Privacy Policy

Under the Digital Personal Data Protection Act, 2023, the entity determining the purpose and means of processing personal data is the Data Fiduciary:

This policy applies to:

• Prospective parents and guardians inquiring about preschool programs (Playgroup, Nursery, JR.KG, SR.KG) or Daycare facilities.
• Enrolled students and their parents, guardians, or authorized emergency pick-up individuals.
• Visitors and prospective parents submitting online forms on our website or booking campus tours.
• Personal data in digital format or personal data collected in non-digital form that is subsequently digitized.

We collect only the minimum personal data strictly necessary to fulfill admission, educational delivery, caretaking, and child safety functions:

Under Section 4 and Section 6 of the DPDP Act, personal data may only be processed for specific, lawful purposes for which consent has been obtained:

Under the DPDP Act, 2023, our processing rests upon:

• Verifiable Parental Consent (Section 6 & Section 9): Obtained via affirmative checkbox on website forms and written admission declaration forms signed by the parent or legal guardian.
• Certain Legitimate Uses (Section 7): Processing strictly necessary for responding to a medical emergency involving a child's health or life, compliance with any judgment, decree, or order issued under Indian law, or responding to epidemics/public safety directives.

Consent is obtained through an un-checked, affirmative checkbox on all digital forms with clear link to this policy, and physical signed forms at admission.

Withdrawal is as easy as giving consent: Under Section 6(4) of the DPDP Act, parents and legal guardians have the right to withdraw their consent at any time without penalty for past lawful processing.

Under Chapter III of the DPDP Act, parents or legal guardians acting on behalf of their child are entitled to the following enforceable statutory rights:

Fateh Excellence Preschool & Daycare NEVER sells, rents, leases, or monetizes parent or student data.

Personal data is shared strictly on a confidential, need-to-know basis with:

• Authorized School Staff: Certified educators and daycare caretakers directly responsible for your child's learning and safety.
• Cloud Database Provider (Supabase): Encrypted database infrastructure used solely for storing admission enquiries and administrative data.
• Website Hosting Infrastructure (Vercel): Encrypted transport and server delivery.
• Essential Communication Gateways: WhatsApp and SMS providers for operational circulars and emergency messages.
• Law Enforcement & Educational Regulators: Disclosed only when strictly required by a court order, statutory inquiry, or child welfare regulation under Indian law.

Under Section 8(7) of the DPDP Act, personal data must be erased once the purpose of collection has been served or consent is withdrawn:

Under Section 8(5) of the DPDP Act, we maintain reasonable technical and organizational safeguards:

• Data Encryption: All data transmitted to and from our website is encrypted using industry-standard TLS/SSL encryption (HTTPS). Databases are encrypted at rest with AES-256 standards.
• Role-Based Access Control: Access to student records and parent contact lists is restricted strictly to designated teachers and administrators with authenticated credentials.
• Physical Security on Campus: Student physical files are kept in locked administrative cabinets at the Kalamboli campus. 24/7 CCTV surveillance protects premises and children.
• Staff Confidentiality Undertakings: All teaching and care staff sign child safety and data confidentiality agreements upon joining.

In the improbable event of a personal data breach affecting digital or physical records, Fateh Excellence Preschool & Daycare shall, in accordance with Section 8(6) of the DPDP Act:

1. Notify the Data Protection Board of India (DPBI) in the form and manner prescribed under the Act.
2. Notify each affected parent or legal guardian promptly via registered phone/email, detailing the nature of the breach, affected records, risks, and recommended actions or remediation steps implemented by the school.

Our primary student management and operational records are stored on secure servers located within India or hosted by globally certified infrastructure providers adhering to Indian data protection safeguards.

In compliance with Section 16 of the DPDP Act, personal data is never transferred to any country or territory restricted or blacklisted by the Central Government of India.

In compliance with Section 8(9) and Section 13 of the DPDP Act, 2023, the school has designated a dedicated Grievance Officer:

Statutory Right to Approach the Data Protection Board: If a parent or legal guardian is not satisfied with the grievance resolution provided by the school, or has not received a response within the prescribed timeline, they have the statutory right under Section 13(4) of the Act to file a complaint before the Data Protection Board of India (DPBI).