Privacy Policy

Last updated: May 26, 2026

Bihar Public School ("the School", "we", "us", "our") respects the privacy of every visitor, parent, guardian, student, alumnus and staff member ("you") who uses this website or makes a payment to us through this website. This Privacy Policy explains what personal information we collect, why we collect it, how we use, share and protect it, and what rights you have over it. It is published in compliance with the Information Technology Act, 2000 (as amended), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 of India.

1. Information We Collect

We collect the following categories of information, only to the extent necessary to provide our services:

• (a) Identification & Contact Information: name, date of birth, gender, address, photograph, mobile number, email address, parent / guardian's name, occupation and contact, emergency contact.
• (b) Academic Information: class, section, roll number, admission number, attendance, marks, examination results, behavioural and disciplinary records.
• (c) Financial Information: fee history, fee status, transaction reference numbers, masked card / UPI details (the full card number is never stored on our servers — it is handled exclusively by our PCI-DSS-compliant payment gateway partners), GST identification (if any).
• (d) Document Uploads: birth certificate, transfer certificate, mark sheets, Aadhaar / PAN proofs (where mandated by law), student / parent photos, and other admission documents.
• (e) Technical Information: IP address, browser type and version, device type, operating system, referrer URL, pages visited and time stamps, collected through standard server logs and cookies for security, analytics and fraud prevention.

2. How We Collect Information

• Directly from you when you fill out admission, registration, contact, online-payment or any other form on our website or in person at the School office.
• From your child's previous school (Transfer Certificate, academic record) at the time of admission.
• Automatically via cookies and server logs when you visit the website.
• From our payment gateway partner, when you make an online payment, in the form of a transaction status and reference number.

3. Purpose & Lawful Basis for Processing

Your information is processed only for one or more of the following purposes, on the lawful basis of (i) performance of the educational contract between the School and the parent / guardian, (ii) compliance with statutory obligations, and / or (iii) the consent provided by you at the time of submission:

• To process admission, enrolment and ongoing academic management.
• To collect, process and reconcile fee payments and to generate official receipts and invoices.
• To communicate academic progress, notices, circulars, attendance and disciplinary updates to parents / guardians.
• To comply with regulatory requirements (CBSE / ICSE / State Board / RTE / Income-Tax / GST / law-enforcement requests with valid legal process).
• To detect, prevent and investigate fraud, abuse or unlawful activity.
• To improve the security, performance and content of the website.

4. Sharing of Information

We do not sell, rent or trade your personal information to anyone. We share information only with the following categories of recipients, and only to the extent strictly necessary:

• Payment Gateway Partners (e.g., Razorpay, PhonePe, Cashfree, PayU, Paytm, ICICI / HDFC / Axis / SBI payment processors) — for the limited purpose of processing online payments. Such partners are PCI-DSS-compliant and bound by their own privacy and security commitments.
• Hosting & IT Service Providers — for hosting the website, sending transactional SMS / email, and maintaining backups, under written confidentiality and data-processing arrangements.
• Statutory / Educational Bodies — CBSE / ICSE / State Board / UDISE / RTE authorities, etc., to the extent we are legally obliged to share student records.
• Law-Enforcement Agencies and Courts — pursuant to a valid legal process, summons, warrant or court order.
• Insurance Providers — in the limited cases where the School arranges student / staff insurance, only the data fields required by the insurer.

5. Children's Data

A substantial portion of the data we hold relates to children below the age of 18. We treat such data with the highest level of care:

• Personal information of a child is collected only through and with the verifiable consent of the parent / legal guardian.
• The School does not use children's data for behavioural advertising, profiling or any commercial communication.
• The parent / legal guardian may at any time review, correct or, subject to statutory record-keeping obligations, request deletion of their child's data.

6. Cookies & Tracking

This website uses a small number of cookies that are strictly necessary for the operation of features such as login sessions, fee payment, and CSRF protection, and a limited set of analytics cookies (e.g., Google Analytics) to understand aggregate usage patterns. You may disable cookies via your browser settings, but doing so may impair certain features (e.g., the online fee payment portal).

7. Data Security

We implement reasonable security practices and procedures, including but not limited to:

• HTTPS / TLS encryption of all data in transit between your browser and the website.
• Role-based access control inside the School Management System — staff can only see the data fields relevant to their function.
• Hashed password storage (no plain-text passwords are ever stored).
• Periodic backups, off-site storage and disaster recovery procedures.
• Outsourcing of card-data handling to PCI-DSS-compliant payment gateways — we do not store full card numbers, CVV or net-banking credentials.

While we strive to protect your information, no method of transmission over the Internet or method of electronic storage is 100% secure. You acknowledge this residual risk when you submit data to us.

8. Data Retention

We retain personal information only for as long as is necessary for the purpose it was collected, or as required by applicable law. Student academic and admission records are typically retained for the duration required by the affiliating board and the School's record-keeping policy.

9. Your Rights

Subject to applicable law, you may:

• Request a copy of the personal information we hold about you or your child.
• Request correction of any information that is inaccurate or incomplete.
• Withdraw a previously given consent, where the processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.
• Request erasure of your data, subject to the School's statutory and legitimate record-keeping obligations.
• Lodge a grievance with the School's Grievance Officer (details below) or with the Data Protection Board of India when constituted.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., affiliating board, partner organisations, payment gateways). The School is not responsible for the privacy practices or content of such third-party websites. We encourage you to read their respective privacy policies.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The "Last updated" date at the top of this page indicates when this Policy was last revised. Material changes will be highlighted on the website's home page or notified by email where appropriate.

12. Grievance Officer & Contact

For any question, concern or grievance regarding this Privacy Policy or the way we handle your personal information, please contact the School's Grievance Officer:

Bihar Public School
Pachaura, Mathia, Bihar 841227
Phone: +917462065370
Email: bpssiwan@gmail.com

Please also read our Terms & Conditions, Refund Policy and Cancellation Policy.