Privacy Policy

We collect information you provide directly to us when you: • Submit an online admission inquiry or application form • Register for school events, parent-teacher meetings, or extracurricular activities • Contact us via email, phone, or the contact form on our website • Subscribe to our newsletter or announcements • Fill out health / medical declaration forms Types of information collected may include: • Personal identifiers: full name, date of birth, gender, photograph • Contact details: postal address, email address, phone number • Academic records: previous school name, class, board, marks/grades • Health information: medical conditions, allergy information, emergency contacts • Financial information: for fee payment and scholarship applications (processed through secure third-party payment gateways; we do not store card details) • Device & usage data: IP address, browser type, pages visited, and session duration collected through standard web analytics

We use the information we collect for the following purposes: • Processing admission applications and communicating decisions • Maintaining student academic and health records • Sending important school-related communications (fee reminders, exam schedules, events) • Personalising your experience on our website • Processing payment transactions and issuing receipts • Complying with legal and regulatory obligations (RTE Act, CBSE / CISCE norms) • Responding to enquiries, complaints, and requests • Conducting surveys or assessments to improve our services • Safety and security of students, staff, and campus premises We do not use personal information for automated decision-making that produces legal effects.

We share your information only in the following circumstances: • With authorised school staff (teachers, administration) on a need-to-know basis • With affiliated boards (CBSE / CISCE) for examination registration and certification • With government bodies or regulators when required by law (e.g., RTE compliance, audits) • With trusted third-party service providers (e.g., SMS gateway, payment processor, cloud storage) under strict data processing agreements • In anonymised / aggregated form for research or reporting where no individual can be identified We do NOT sell, rent, or trade your personal information to any third party for marketing purposes.

BrightFuture School of Excellence is an educational institution — most users of our system are minors. We take special care to protect children's data: • Student data is collected with parental / guardian consent at the time of admission • Children under 13 may not independently submit personal information via our website • Parents or guardians may review, update, or request deletion of their child's data by contacting our Data Protection Officer • We comply with applicable Indian laws including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDPA) regarding children's data • CCTV footage of students is retained for a maximum of 30 days and is accessible only to the Principal and authorised security staff

Our website uses cookies and similar technologies to: • Remember your preferences (language, theme) • Analyse website traffic (via privacy-respecting analytics) • Maintain session state so your form data is not lost on page refresh You can control cookies through your browser settings. Disabling all cookies may affect website functionality. We do not use third-party advertising cookies.

We implement appropriate technical and organisational measures to protect your personal information: • All data transmissions are encrypted using TLS (HTTPS) • Access to personal data is restricted to authorised personnel only • Student records are stored on secured servers with regular backups • Our staff undergoes periodic data-privacy awareness training • In the event of a data breach that poses a risk to rights and freedoms, we will notify affected individuals and the relevant authority within the timescales required by law Despite these measures, no internet transmission is 100% secure. We encourage you to use strong passwords and to log out from shared devices.

We retain personal information for as long as necessary for the purposes described in this policy: • Active student records are kept throughout the student's enrolment and for 7 years thereafter (for certificate / TC purposes) • Admission enquiry data from unsuccessful applicants is deleted after 1 year • Web analytics data is retained for 13 months • CCTV footage is overwritten after 30 days unless required for an investigation • Financial records are retained for 8 years in compliance with Indian tax regulations You may request earlier deletion of your data subject to our legal retention obligations.

Under the Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable laws, you have the right to: • Access the personal data we hold about you or your child • Correct inaccurate or incomplete data • Withdraw consent (this may affect our ability to provide services) • Nominate another person to exercise rights on your behalf • Receive a summary of data processing activities • Grievance redressal — if you believe your rights have been violated To exercise any of these rights, please contact our Data Protection Officer (details in Section 10).

Our website may contain links to third-party websites (e.g., the board's official site, payment gateway). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy notices before providing personal information.

If you have questions, concerns, or wish to exercise your data rights, please contact: Data Protection Officer BrightFuture School of Excellence Education Hub, Sector 15, Knowledge Park New Delhi – 110 001 Email: privacy@brightfutureschool.edu.in Phone: +91-11-2345-6789 Working hours: Monday to Friday, 9:00 AM – 5:00 PM We will acknowledge your request within 48 hours and resolve it within 30 days.

We may update this Privacy Policy from time to time. Material changes will be communicated by: • A notice on our website homepage • An email to registered parents / guardians • A notice on the school notice board The "Last Updated" date at the top of this page reflects when the policy was last revised. We encourage you to review this page periodically.