We collect only what we need to teach and care for your child, we protect it carefully, and you stay in control. Here is exactly how — in plain language.
At a glance
What we collect
School, health and fee details you give at admission, plus attendance and results.
Why
To teach and look after your child, keep legal school records and file Government returns.
Aadhaar is protected
Used only for UDISE+ / APAAR, stored encrypted, shown to staff as last 4 digits.
How we reach you
App inbox, email and WhatsApp — you choose. Safety alerts always go.
Your rights
See, correct and erase data, withdraw consent, nominate someone, and complain.
Questions?
The Principal is our Grievance Officer — we reply within 30 days at the latest.
Jump to a section
Mount Judi School, Kandikal Gate, Hyderabad (“the school”, “we”) is run by Nauras Education & Welfare Society. This policy explains what personal data we collect about students, parents/guardians and visitors, why we need it, how we protect it, and the rights you have under India’s Digital Personal Data Protection Act, 2023 and the rules made under it. In this policy, “parent” includes a lawful guardian.
Section 1 · Responsibility
Who is responsible for your data
The school is the Data Fiduciary for the personal data described here. For any question, request or complaint, contact our Grievance Officer — we reply within 30 days at the latest.
The Principal, Mount Judi School
18-1-544/B/10, Sadath Nagar, Kandikal Gate, Hyderabad, Telangana
Section 2 · Data
What we collect
Admission & school records
Student’s name, date and place of birth, gender, photograph, class and section, admission number, previous school and TC details, mother tongue, nationality, religion and social category (for Government returns), identification marks; parents’ names, occupations, address, mobiles and email.
Government identifiers
Aadhaar number and name as printed on Aadhaar, PEN (Permanent Education Number) and APAAR ID — needed to register the student on UDISE+ and APAAR.
Health & safety
Blood group, allergies or medical notes you choose to give, emergency contact, and the people authorised to collect the child.
Learning records
Attendance, marks, assessment results, report cards, homework and leave requests.
Fees
Charges, concessions, payments and receipts; for UPI, the transaction reference (UTR) and any screenshot you upload. We never collect card numbers, bank account numbers or UPI PINs.
Parent Portal & website
Sign-in name, a securely hashed password, message preferences, and security records (sign-in times and a one-way coded IP). Enquiry and feedback forms collect what you type.
Section 3 · Purpose
Why we use it
- To admit, teach, assess and look after your child, and keep the school records the law requires (admission register, attendance, transfer certificates).
- To file statutory returns with the Government (UDISE+, APAAR and returns to the education department).
- To bill and collect fees and issue receipts.
- To keep you informed: absence alerts, notices, receipts, results and emergencies.
- To keep the Parent Portal and School Office secure and prevent misuse.
Children’s data is handled with extra care. We process it on the basis of the parent’s consent given at admission, and where the law requires or permits it for education and statutory purposes. We do not use children’s data for advertising, we do not track children’s behaviour for profiling, and we do not sell personal data to anyone.
Section 4 · Aadhaar
Aadhaar numbers
One purpose only
Collected only to register the student on UDISE+ / APAAR — never used for anything else, and never authenticated with UIDAI.
Encrypted & masked
Stored encrypted. School staff see only the last four digits, e.g. XXXX XXXX 1234.
Every export recorded
Only the school administrator can export full numbers for the Government portal, and each export is logged with its reason.
No Aadhaar yet?
The admission can still go ahead — just tell the office.
Section 5 · Messages
How we contact you
App inbox
Every message is always in your Parent Portal inbox.
Sent from the school’s WhatsApp number to the mobile registered with us.
To the email address on your child’s record.
Switch email or WhatsApp off for notices, receipts and results any time in Parent Portal › My account. Safety messages — absence alerts and emergencies — are always sent. Messages never contain marks, fee amounts or medical information; you sign in to see details. WhatsApp messages are subject to WhatsApp’s own terms and privacy policy.
Section 6 · Sharing
Who we share data with
- Government authorities as required by law (UDISE+, APAAR, the education department, examination boards).
- Service providers who run our systems for us, under confidentiality: our website hosting company (which stores the website and portal data), our email provider, and the backup service. They may only use the data to provide that service.
- Another school — only the transfer certificate and records needed when your child moves, at your request.
- Emergency services or a hospital if your child’s health or safety requires it.
💡 UPI payments are made in your own UPI app (for example Google Pay, PhonePe, Paytm or BHIM) directly to the school’s bank account — the website never handles the money.
Section 7 · Security
How we protect it
Never public
Student records live only inside the password-protected School Office and Parent Portal.
Need-to-know access
Each staff member sees only what their role needs — teachers see only their own classes. Parents see only their own children.
Strong sign-in
Staff use a password plus a code from an authenticator app. Passwords are stored only as one-way hashes; the site uses HTTPS.
Everything logged
Changes to records and access to sensitive information are logged. If a breach happens, we inform affected parents and the Data Protection Board of India as the law requires.
Section 8 · Retention
How long we keep it
Permanent school records
Admission register, transfer-certificate records, results and fee accounts are kept as the law and education department require.
Removed when no longer needed
Contact details, health notes, photographs and other non-statutory details are removed after a student leaves, or earlier if you ask and the law allows.
Cleared automatically
Unfinished online payment forms are deleted after 7 days; expired sign-in sessions are deleted automatically.
Section 9 · Your rights
Your rights
See your data
Download everything we hold from Parent Portal › My account › Download my child’s data, or ask the office.
Correct it
Tell the office if anything is wrong or out of date.
Erase it
Ask us to delete data we no longer need. Statutory school records must be kept.
Withdraw consent
For optional uses such as website photos or optional messages — any time, without affecting what was done before.
Nominate someone
Name another person to exercise these rights if you are unable to.
Complain
Contact our Grievance Officer first (Section 1). If not satisfied, you may complain to the Data Protection Board of India.
Section 10 · Website
Website visitors and cookies
The public website uses only the cookies needed to work: a security cookie for forms and, when you sign in, a session cookie for the Parent Portal or School Office. We use privacy-friendly visitor statistics (Jetpack Stats) to count page visits; we do not use advertising cookies. The WhatsApp chat button opens WhatsApp only if you tap it.
Section 11 · Photographs
Photographs
Photos of students are used on the website or social media only with the parent’s consent, and never with the child’s full name. Tell the office at any time if you do not want your child’s photo used, and we will remove it.
Section 12 · Updates
Changes to this policy
We will update this page when our practices or the law change, and tell parents of important changes through the Parent Portal.