Privacy Policy

1. About This Privacy Policy

Royal International School of Excellence (RISE) respects the privacy and dignity of students, parents, employees and visitors.

As a school, RISE may process personal information for admission, education, administration, student safety, communication, academic records, attendance, examinations, school activities, legal compliance and other legitimate educational purposes.

This Privacy Policy should be read together with the school's Terms & Conditions, Student Rules, Child Protection Policy, Staff Code of Conduct and other applicable school policies.

2. Information We May Collect

2.1 Student Information

• Student name
• Date of birth
• Gender and other demographic information where required
• Photograph
• Address and contact information
• Parent/guardian information
• Emergency contact information
• Admission and enrollment information
• Academic records and examination results
• Attendance records
• Disciplinary and behavioural records where necessary
• Transport or hostel information where applicable
• Health or emergency information where necessary for student safety and care

2.2 Parent/Guardian Information

• Name
• Telephone number
• Email address
• Residential/contact address
• Relationship with the student
• Emergency contact information
• Information required for admission, fees and school administration

2.3 Teacher and Staff Information

• Name and contact details
• Educational qualifications
• Professional experience
• Employment and joining information
• Attendance and payroll-related information
• Identity and verification documents where legally or operationally required

2.4 Website Information

When a person visits the RISE website, the website or its service providers may collect information such as IP address, browser information, device information, pages visited, approximate usage information and information submitted through website forms.

3. How We Use Personal Information

RISE may use personal information for purposes including:

• Processing student admissions and enrollment.
• Maintaining student and academic records.
• Managing attendance and examinations.
• Providing educational and administrative services.
• Communicating with parents and guardians.
• Managing school fees and accounts.
• Maintaining student safety and emergency contacts.
• Managing hostel and transport services where applicable.
• Organising educational, sports and cultural activities.
• Complying with applicable legal and regulatory requirements.
• Protecting the security of students, employees and school facilities.
• Responding to enquiries and requests submitted through the website.
• Improving school administration and educational services.

4. Children's Personal Data

Where applicable under Indian data-protection law, RISE will obtain or rely upon the required consent of a parent or lawful guardian before processing personal data of a child.

RISE will take appropriate measures to protect children's personal information and will not knowingly use children's personal data for purposes that are prohibited by applicable law.

Where processing is necessary for education, safety, legal compliance, school administration or another permitted purpose, RISE may process the relevant information to the extent legally permitted and necessary.

5. Child Protection & POCSO Compliance

RISE is committed to protecting children from sexual abuse, exploitation, harassment, violence and other forms of harm.

RISE will follow applicable child-protection laws and procedures, including the Protection of Children from Sexual Offences Act, 2012 (POCSO Act), as applicable.

• Any concern or information relating to a suspected offence against a child will be handled through the applicable safeguarding and reporting procedure.
• School personnel will comply with applicable mandatory reporting obligations.
• Where required by law, information concerning a suspected POCSO offence will be reported to the appropriate law-enforcement authority.
• The school will not require a complainant to first resolve a suspected POCSO offence internally where the law requires reporting to the authorities.
• Information relating to a child-protection matter will be handled confidentially and shared only with persons or authorities who are legally authorised or who need the information for the protection of the child and lawful handling of the matter.
• RISE will take reasonable measures to prevent unauthorised disclosure of information that could identify a child involved in a child-protection matter.
• School employees and other persons working with children are expected to follow the school's child-protection procedures and professional-boundary requirements.

The POCSO Act contains mandatory reporting provisions and protections concerning the identity and privacy of children.

6. Photographs, Videos & School Events

RISE may take photographs or videos during authorised school activities, educational programmes, sports events, celebrations, competitions, awareness programmes and other institutional activities.

Where required, appropriate consent or other lawful basis will be obtained before using identifiable photographs or videos, particularly where the content is intended for public communication or promotional purposes.

• Parents/guardians may be asked to provide consent for specified uses of a child's photograph or video.
• Images will not knowingly be used for inappropriate or unlawful purposes.
• Child-protection considerations will be applied when publishing photographs or videos.
• Information that could unnecessarily identify a child involved in a safeguarding matter will not be publicly disclosed.

7. CCTV & Campus Security

CCTV or other security systems may be used on school premises for legitimate purposes including student safety, staff safety, campus security, prevention of unauthorised access, investigation of incidents and protection of school property.

CCTV systems will not intentionally be placed in areas where individuals have a reasonable expectation of privacy, subject to applicable law and security requirements.

CCTV footage may be accessed by authorised personnel and may be disclosed to law-enforcement or other competent authorities where legally required or otherwise lawfully permitted.

8. Cookies & Website Technologies

The RISE website may use cookies or similar technologies to provide essential website functionality, improve performance, understand website usage and support selected website features.

Users may be able to manage cookies through their browser settings. Disabling certain cookies may affect some website functionality.

9. Third-Party Services

RISE may use third-party service providers for services such as website hosting, email, payment processing, school management systems, cloud storage, communication, security, analytics and other operational purposes.

Such providers may process information on behalf of RISE where necessary for the services they provide and subject to applicable contractual, security and legal requirements.

10. Government & Regulatory Authorities

RISE may provide information to government departments, educational authorities, law-enforcement agencies, courts, child-protection authorities or other competent authorities where required or permitted by applicable law.

This may include information required for statutory education records, student identification, examinations, recognition, affiliation, safety, child protection or lawful investigation.

11. Student Academic Records

RISE may maintain academic records including attendance, marks, assessments, examination results, certificates, achievements and other educational information.

Such information may be shared with authorised educational bodies, examination authorities, government systems or other lawful recipients where required for educational administration or legal compliance.

12. APAAR, UDISE+ & Educational Systems

Where applicable, RISE may process and submit required student information through authorised educational systems and government platforms, including systems used for student records and educational administration.

Where parental consent is required for a minor, RISE will follow the applicable consent procedure.

For example, the official APAAR system states that parental consent is required for creation of an APAAR ID for a minor and describes the processing of student identification and academic information.

13. Data Security

RISE will take reasonable technical and organisational measures appropriate to the nature of the information and the risks involved to protect personal information against unauthorised access, misuse, alteration, disclosure, loss or destruction.

Security measures may include:

• Access controls.
• Password and account protection.
• Restricted access to student records.
• Administrative controls.
• Secure hosting or storage where applicable.
• Monitoring and incident-management procedures.

14. Data Retention

RISE will retain personal information only for as long as reasonably necessary for the purpose for which it was collected, for legitimate institutional requirements, or as required by applicable law.

Certain student, academic, financial, employment, legal or regulatory records may need to be retained for longer periods because of statutory, educational or institutional requirements.

15. Data Accuracy

Parents/guardians, students and employees should provide accurate and updated information to the school.

If any information is incorrect or changes, the concerned person should contact the school so that appropriate records can be updated.

16. Data Principal Rights

Subject to applicable law and the circumstances of processing, individuals may have rights concerning their personal data, including rights relating to access, correction, updating, withdrawal of consent where applicable, grievance redressal and erasure where legally applicable.

Requests should be submitted through the school's designated privacy or grievance contact.

17. Withdrawal of Consent

Where processing is based on consent, a person may request withdrawal of consent subject to applicable law and the consequences of such withdrawal.

Withdrawal of consent may not affect processing that is required or permitted under law or necessary for certain statutory, safety, contractual or institutional purposes.

18. Data Breach & Security Incidents

If RISE becomes aware of a personal-data security incident, the school will assess and respond to the incident and take steps required under applicable law, including applicable notification or reporting requirements.

19. Staff Confidentiality

Teachers and employees who have access to student, parent or school information are required to maintain confidentiality and use such information only for authorised professional purposes.

Unauthorised disclosure, copying, publication or sharing of confidential student information is prohibited.

20. Child Safety & Confidentiality

RISE will take reasonable steps to protect sensitive information relating to children and safeguarding matters.

Confidentiality does not prevent disclosure where disclosure is required by law, necessary to protect a child or another person from serious harm, or required by a competent authority.

21. Marketing & Communications

RISE may communicate with parents, guardians, students and other users regarding school activities, admissions, educational programmes, announcements and institutional information.

Where consent is required for a particular promotional use, RISE will seek the appropriate consent.

22. External Links

The RISE website may contain links to third-party websites or services. RISE is not responsible for the privacy practices, content or security practices of third-party websites.

Users should review the privacy policies of third-party websites before providing personal information to them.

23. Grievance & Privacy Requests

Questions, privacy requests, complaints or concerns regarding personal information should be submitted to RISE through the school's official contact details.

24. Police, Law-Enforcement & Child-Protection Authorities

Nothing in this Privacy Policy prevents RISE from reporting suspected offences, child abuse, sexual offences, serious threats, missing-child situations or other matters to the police, Special Juvenile Police Unit, Child Welfare Committee, District Child Protection Unit, courts or other competent authorities where required or permitted by law.

In matters covered by POCSO, applicable mandatory reporting requirements will be followed. The school's internal procedures will not be used to delay a report where the law requires reporting to law-enforcement authorities.

25. Applicable Laws

This Privacy Policy is intended to operate subject to applicable laws and regulations of India, including applicable data-protection, child-protection, education, information-technology and other laws as amended or replaced from time to time.

This includes, where applicable, the Digital Personal Data Protection Act, 2023 and rules made under it, the Protection of Children from Sexual Offences Act, 2012 and applicable child-protection and education laws.

26. Changes to This Privacy Policy

RISE may update this Privacy Policy from time to time to reflect changes in law, technology, school operations, security requirements or data processing practices.

The latest version will be published on this webpage with the applicable effective date.