Privacy policy

Privacy Policy

Effective Date: [Date]
Last Updated: [Date]

At [School Name], we respect the privacy of our students, parents/guardians, teachers, staff, and other users of our [System Name] School Management System (“System”, “Platform”, or “Service”). This Privacy Policy explains how we collect, use, store, protect, and disclose personal information when you use our System.

By accessing or using the System, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

Depending on your role and use of the System, we may collect the following information:

A. Student Information

  • Full name

  • Date of birth

  • Gender

  • Student ID/admission number

  • Class, section, and academic information

  • Attendance records

  • Examination results and grades

  • Assignment and academic performance information

  • Student photograph/profile image

  • Address and contact information

  • Parent/guardian information

  • Medical or emergency information where provided and permitted

  • Fee and payment-related information

B. Parent/Guardian Information

  • Full name

  • Contact number

  • Email address

  • Residential address

  • Relationship with the student

  • Login credentials

  • Communication and notification preferences

  • Payment and transaction information where applicable

C. Teacher and Staff Information

  • Name

  • Employee ID

  • Contact information

  • Email address

  • Professional and employment information

  • Attendance and leave records

  • Class/subject assignments

  • Login credentials

  • Profile photograph where applicable

D. Account and Login Information

When users create or access an account, we may collect:

  • Username/email address

  • Password or authentication information

  • User role

  • Login and account activity

  • Password reset information

Passwords are intended to be stored securely using appropriate security mechanisms and should not be stored in plain text.

E. Technical Information

When you use the System, certain technical information may be collected automatically, including:

  • IP address

  • Browser type

  • Device type

  • Operating system

  • Login date and time

  • Application usage information

  • Error logs and diagnostic information

2. How We Use Your Information

We may use the information collected through the System to:

  • Create and manage student, parent, teacher, and staff accounts.

  • Maintain student academic and administrative records.

  • Manage attendance, examinations, assignments, and grades.

  • Manage school fees, invoices, receipts, and payments.

  • Communicate important school-related information.

  • Send notifications, announcements, reminders, and updates.

  • Manage classes, subjects, schedules, and academic activities.

  • Process leave applications and related requests.

  • Generate academic, administrative, and financial reports.

  • Provide customer or technical support.

  • Improve the functionality, security, and reliability of the System.

  • Detect and prevent unauthorized access, fraud, misuse, or security incidents.

  • Comply with applicable legal and regulatory requirements.

We will use personal information only for legitimate educational, administrative, operational, security, or legal purposes.

3. How We Share Information

We do not sell or rent personal information to third parties.

Information may be shared when necessary with:

School Administrators and Authorized Staff

Authorized school personnel may access information necessary to perform their responsibilities.

Parents or Guardians

Parents or legal guardians may receive information relating to their child or children, subject to the school's policies and applicable law.

Service Providers

We may use trusted third-party service providers for services such as:

  • Cloud hosting

  • Database infrastructure

  • SMS notifications

  • Email services

  • Payment processing

  • Backup services

  • Technical support

  • Analytics and security services

These providers may only access information as necessary to provide their services and are expected to maintain appropriate security and confidentiality.

Legal and Regulatory Authorities

We may disclose information where required by applicable law, court order, government request, or other lawful process.

4. Payment Information

Where the System supports online payments, payments may be processed through third-party payment gateways.

We may receive information such as:

  • Transaction ID

  • Payment amount

  • Payment status

  • Payment date

  • Payment method

We generally do not store complete credit/debit card numbers or other sensitive payment credentials on our servers unless specifically required and legally permitted.

Payment information is processed according to the privacy policies and security practices of the respective payment provider.

5. Cookies and Similar Technologies

The System may use cookies and similar technologies to:

  • Maintain login sessions.

  • Remember user preferences.

  • Improve system functionality.

  • Enhance security.

  • Understand how users interact with the System.

Users may be able to control cookies through their browser settings. Disabling certain cookies may affect the functionality of some parts of the System.

6. Data Security

We take reasonable technical and organizational measures to protect personal information against:

  • Unauthorized access

  • Unauthorized disclosure

  • Loss or destruction

  • Alteration

  • Misuse

  • Security threats

Security measures may include authentication controls, access restrictions, encrypted connections, secure password storage, backups, logging, and other appropriate safeguards.

However, no internet-based system can be guaranteed to be completely secure. Users should also protect their login credentials and notify the school or System administrator if they suspect unauthorized access.

7. Data Retention

We retain personal information for as long as reasonably necessary to:

  • Provide the System and its services.

  • Maintain academic and administrative records.

  • Meet school record-keeping requirements.

  • Resolve disputes.

  • Maintain financial and transaction records.

  • Comply with legal or regulatory obligations.

  • Protect the security and integrity of the System.

When information is no longer required, it may be deleted, anonymized, or securely disposed of in accordance with applicable requirements and the school's data retention policies.

8. Student and Children's Privacy

The System may process information relating to students who are under the applicable age of majority.

Student information is collected and processed for legitimate educational and administrative purposes and should be managed by the school and authorized personnel in accordance with applicable laws and policies.

Parents or legal guardians may contact the school regarding access, correction, or other requests concerning a child's personal information, subject to applicable laws and school policies.

9. User Responsibilities

Users are responsible for:

  • Keeping their login credentials confidential.

  • Not sharing passwords or authentication information with unauthorized persons.

  • Providing accurate information where required.

  • Logging out from shared or public devices.

  • Immediately reporting suspected unauthorized access or security incidents.

10. Access and Correction of Information

Users may have the right, subject to applicable law and school policies, to:

  • Request access to their personal information.

  • Request correction of inaccurate or incomplete information.

  • Request deletion of information where legally applicable.

  • Ask how their information is being used.

  • Withdraw consent where processing is based on consent.

Requests relating to student records should generally be submitted through the school administration or authorized System administrator.

11. Third-Party Links and Services

The System may contain links to third-party websites, applications, payment gateways, or other services.

We are not responsible for the privacy practices, security, or content of third-party services. Users should review the privacy policies of those services before providing personal information.

12. Data Transfers

Where information is stored or processed using third-party hosting or service providers, the information may be processed in locations outside the user's country.

We take reasonable measures to ensure that service providers handling personal information maintain appropriate security and confidentiality protections and comply with applicable requirements.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

  • Our services

  • System functionality

  • Legal or regulatory requirements

  • Security practices

  • Data processing practices

Any updated Privacy Policy will be published on this page with a revised “Last Updated” date.

Users are encouraged to review this page periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of personal information, please contact us:

[School Name]
Address: [School Address]
Email: [Privacy/Support Email]
Phone: [Phone Number]
Website: [Website URL]

For matters concerning student records, parents/guardians may also contact the school's administration directly.

15. Acceptance of This Privacy Policy

By using the [System Name] School Management System, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of information as described above, subject to applicable law and the school's policies.