Privacy Policy

1 Who We Are

Global Public School is a CBSE-affiliated institution (Affiliation No. 3330566, School Code: 16475) located at Mishra Gali, Surajpur, Chhattisgarh. We are the data controller responsible for personal information collected through this website and through our admission, enrolment, and fee payment processes.

2 Information We Collect

We collect personal information through various channels, including:

a) Information Provided Directly by You

• Student details: full name, date of birth, gender, class/grade, previous school name.
• Parent/guardian details: name, relationship, occupation, mobile number, email address.
• Address and residence details.
• Aadhaar card number (for government compliance and UDISE reporting).
• Caste/category certificate details (where applicable, as required by CBSE/government).
• Medical/health information relevant to the student's well-being at school.
• Photographs of students and guardians for school records and ID cards.
• Bank account or UPI details used for fee payment (processed securely via payment gateway — not stored by the School).
• Enquiry or contact form submissions including name, email, phone, and message.

b) Information Collected Automatically

• IP address, browser type, operating system, and device information.
• Pages visited, time spent on pages, and navigation patterns on this website.
• Referral URLs and search terms used to reach this website.
• Cookie identifiers and session data (see Section 7 on Cookies).

c) Information from Third Parties

• Data from CBSE, UDISE+, state education boards, or government portals as required for compliance.
• Payment confirmation and transaction reference data from our payment gateway provider.

3 How We Use Your Information

We use the personal information we collect for the following purposes:

• Admission Processing: To evaluate and process student admission applications and verify submitted documents.
• Fee Management: To generate fee receipts, process online payments, send fee reminders, and manage outstanding dues.
• Academic Records: To maintain student attendance, examination records, report cards, and progress reports.
• Communication: To send notices, circulars, event invitations, PTM schedules, and urgent school communications via SMS, email, or phone.
• Legal & Regulatory Compliance: To report to CBSE, UDISE+, state government, and other authorities as mandated by law.
• Safety & Security: To maintain a safe school environment, including CCTV monitoring on school premises.
• Website Improvement: To analyse website traffic and usage patterns to improve user experience.
• Grievance Resolution: To respond to complaints, enquiries, or requests submitted through the website or school office.
• School Publications: Student photographs or achievements may be used in school newsletters, annual magazines, or the school website with appropriate consent.

4 Legal Basis for Processing Personal Data

We process personal data on the following legal grounds under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (India):

• Consent: Where you have explicitly agreed to the processing (e.g., use of photographs for school publications).
• Contractual Necessity: To fulfil the school's obligations to enrolled students and their families (e.g., fee receipts, progress reports).
• Legal Obligation: To comply with CBSE regulations, UDISE+ data submission, government policies, and court orders.
• Legitimate Interest: To maintain school security, improve educational services, and communicate important information.

5 Sharing & Disclosure of Information

We do not sell, rent, or trade your personal information to any third party. We may share information only in the following limited circumstances:

• Government & Regulatory Authorities: CBSE, NCERT, UDISE+, state education department, RTE authorities, and other statutory bodies as legally required.
• Payment Gateway Providers: Secure third-party payment processors to facilitate online fee payments. These partners are bound by strict data security obligations and do not use your data for any other purpose.
• School Management Software: Authorised school ERP or student information system providers who process data on our behalf under confidentiality agreements.
• Emergency Situations: To medical personnel, law enforcement, or emergency services when required for the safety of a student or staff member.
• Legal Proceedings: When required by a court order, subpoena, or applicable law.

In all cases, we share only the minimum information necessary for the specific purpose.

6 Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Typical retention periods are:

After the retention period, data is securely deleted or anonymised.

7 Cookies & Tracking Technologies

Our website uses cookies — small text files stored on your device — to enhance your browsing experience and analyse website usage. We use the following types of cookies:

• Essential Cookies: Required for the website to function correctly (e.g., maintaining your session while making a payment). These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with the website (e.g., Google Analytics). Data collected is aggregated and anonymous.
• Preference Cookies: Remember your settings and preferences to provide a more personalised experience.

You can control or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of this website, including the online payment system.

8 Data Security

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, alteration, or disclosure. Our measures include:

• SSL/TLS encryption for data transmitted through this website.
• Secure, access-controlled storage of physical and digital records.
• Restricted access to personal data on a need-to-know basis among school staff.
• Regular review of our data handling and security practices.
• Use of PCI-DSS compliant payment gateways for all online transactions — card and banking details are never stored on our servers.

While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security and encourage users to take precautions such as keeping their login credentials and payment details private.

9 Children's Privacy

As a school, we necessarily collect personal data of minors (students below 18 years of age). Such data is collected solely for educational, administrative, and statutory purposes. We do not use students' personal data for commercial purposes, marketing, or profiling.

All data relating to minor students is collected with the consent of a parent or legal guardian, who is responsible for ensuring the accuracy of the information provided. Parents and guardians may exercise data rights on behalf of their minor children (see Section 10).

10 Your Rights

Under the Digital Personal Data Protection Act, 2023 (India) and other applicable laws, you have the following rights with respect to your personal data:

• Right to Access: Request a copy of the personal data we hold about you or your child.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of personal data where it is no longer necessary, subject to legal retention requirements.
• Right to Withdraw Consent: Where processing is based on consent (e.g., use of photographs), you may withdraw consent at any time without affecting prior use.
• Right to Grievance: Lodge a complaint with the School's designated point of contact if you believe your data has been misused.

To exercise any of these rights, please contact us at info@gpssurajpur.in or visit the School office. We will respond within 30 days of receiving your request.

Note: Certain rights may be limited where legal obligations require us to retain or process data (e.g., CBSE-mandated academic records).

11 Third-Party Services & External Links

This website may contain links to external websites including CBSE (cbse.gov.in), NCERT, DIKSHA, UDISE+, and government portals. These websites have their own privacy policies, and we have no responsibility for their content or data practices. We encourage you to read their privacy policies before providing any personal information.

We also use Google Analytics to understand website traffic. Google's data collection is governed by Google's Privacy Policy. You may opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

12 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will revise the "Last Updated" date at the top of this page.

We encourage you to review this page periodically. Continued use of our website or services after any update constitutes your acknowledgment of the revised policy. For significant changes, we will notify parents/guardians through the school's official communication channels.

13 Contact Us & Data Grievance Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our designated point of contact:

We will acknowledge your request within 3 working days and aim to resolve it within 30 days.