This Consent is given by the undersigned user ("Data Principal", "I", "me", or "User") of the ERP/Mobile Application ("Platform") of our organisation ("School", "Data Fiduciary"), operated with the technical support of Edunext Technologies Pvt. Ltd. (the "Service Provider"), which processes personal data on behalf of and under instructions from, the School.
By logging in to and using the ERP/Mobile Application, I provide my free, specific, informed, unconditional and unambiguous consent to the School to collect, store, use and otherwise process my personal data for the lawful and specified purposes described below, in accordance with the Digital Personal Data Protection Act, 2023.
Where applicable — that is, where I am a parent or lawful guardian of a student ("Ward") — I additionally provide my consent, on behalf of my Ward, for the processing of my Ward's personal data for academic, administrative and communication purposes within the ERP system, as more particularly described in the Privacy Policy at Part B of this document.
My personal data (and, where applicable, my Ward's personal data) will be processed strictly for the following specified purposes:
I understand and acknowledge that:
By proceeding to log in and use the Platform, I confirm that I have read and understood the Privacy Policy set out in Part B below and I voluntarily consent to the processing of my personal data (and, where applicable, my Ward's personal data) as described in this Consent and the Privacy Policy.
This consent is captured electronically at the point of login to the ERP/Mobile Application. A record of consent (including date, time and version of this notice) is maintained by the School/Service Providers as required under the DPDP Act.
This Privacy Policy outlines how the ERP/Mobile Application used by the School — developed and supported by Edunext Technologies Pvt. Ltd. (the "Service Providers") — collects, uses, stores and protects the personal data of its users, in compliance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable rules.
Educational data, particularly data concerning students, is treated as sensitive in nature. The School and Service Providers are committed to safeguarding the privacy of all users, with particular emphasis on the safety and confidentiality of student (child) data.
This Policy applies to all users of the Platform, including students, parents/guardians, teachers and school staff/administrators. By accessing or using the Platform, users acknowledge and accept the practices described in this Policy.
To deliver ERP services and enhance the user experience, the following categories of personal data are collected:
Teacher / Staff Data: Name, email address, phone number and professional credentials — used for managing staff profiles, communication and access to teaching tools.
Student Data: Name, email, mobile number, father's, mother's mobile numbers and email IDs, age, class/grade, attendance records, examination scores and other academic details shared by the School for educational purposes.
Usage Data: Automatically collected data such as login activities, device type, browser details and IP address — used to maintain platform performance and security.
All data collected is used strictly for academic, administrative and support purposes and only to the extent necessary for such purposes (data minimisation), in accordance with the DPDP Act.
Personal data is collected and used to support institutional operations and to deliver services to students, parents, teachers and administrators. Data is used strictly for educational and administrative purposes, including:
Providing Services: Managing student records, monitoring academic performance, maintaining attendance and facilitating communication between students, teachers and parents.
Improving the Platform: Analysing usage patterns, identifying technical issues and enhancing features, usability and performance.
Communication: Sharing important updates, responding to queries, providing technical support and sending school-related notifications.
Legal Compliance: Fulfilling obligations under applicable laws, including data retention, reporting and safety requirements.
No personal data is used for any purpose beyond what has been notified to and consented to by, the Data Principal, in keeping with the purpose-limitation principle under the DPDP Act.
Personal data is processed on the basis of the free, informed and specific consent of the Data Principal, obtained through the Consent set out in Part A of this document and, where applicable, on the basis of "legitimate uses" recognised under the DPDP Act (such as compliance with legal obligations and for purposes related to employment).
Personal data is shared only when necessary and with appropriate safeguards, including contractual obligations of confidentiality and data protection:
Schools and Educational Institutions: Data may be shared with authorised school personnel for academic management, reporting and student support.
Data Processors and Trusted Third-Party Providers: Edunext Technologies Pvt. Ltd. along with verified service providers (e.g., hosting, analytics, communication services), processes data strictly under the School's instructions and under confidentiality and data-processing agreements.
Legal and Safety Requirements: Data may be disclosed where required by law, court orders, or the Data Protection Board of India, or to protect the rights, safety, or property of users or the institution.
No personal data is sold or shared for advertising or unrelated commercial purposes.
Secure Storage: Data is stored on secure servers using industry-standard encryption, both in transit and at rest, with role-based access controls, authentication protocols and continuous monitoring.
Access Controls: Only authorised personnel (system administrators and designated school staff) may access user data, bound by strict confidentiality obligations.
Reasonable Security Safeguards: Technical and organisational measures are implemented as required under the DPDP Act to prevent personal data breaches.
Personal and academic data is retained only for as long as necessary to fulfil the educational, administrative and legal purposes for which it was collected. After a student or staff member leaves the institution, data is securely archived for a limited period and thereafter deleted or anonymised, unless a longer retention period is required by law.
In accordance with the DPDP Act, users have the following rights concerning their personal data (and, for parents/guardians, their Ward's data):
Right to Access: To obtain a summary of personal data being processed and the processing activities undertaken.
Right to Correction and Updating: To request correction of inaccurate or misleading data and completion or updating of data.
Right to Erasure: To request deletion of personal data that is no longer necessary for the purpose for which it was collected, subject to legal retention requirements.
Right to Withdraw Consent: To withdraw consent at any time, with effect on future processing only.
Right to Grievance Redressal: To have any complaint addressed by the Grievance Officer and thereafter to approach the Data Protection Board of India.
Right to Nominate: To nominate another individual to exercise these rights in the event of death or incapacity.
How to Exercise These Rights: Requests to view, update, correct, or delete data may be sent to the contacts listed in Section 14 (Grievance Redressal) below. Verified requests are processed in a timely and secure manner.
The Platform is designed with safeguards to ensure that student (child) data is collected, used and stored responsibly, in accordance with Section 9 of the DPDP Act:
Purpose: Cookies and similar technologies help remember user preferences, maintain login sessions and gather insights to improve platform functionality and performance.
Analytics: Basic analytics tools may be used to monitor system usage, detect errors and optimise performance. No personal or sensitive data is collected through such tools without appropriate consent.
User Control: Users may manage or disable cookies through their browser settings; certain features of the Platform may not function correctly if cookies are disabled.
The School and Service Providers may engage trusted third-party providers, such as cloud hosting platforms, communication tools and analytics services, to deliver the Platform. Each provider operates under contractual data-protection obligations consistent with this Policy and the DPDP Act. Where personal data is processed or stored outside India, such transfer is undertaken only to jurisdictions permitted under the DPDP Act and subject to appropriate safeguards.
In the event of a personal data breach, the School and Service Providers shall take prompt remedial action and shall notify the Data Protection Board of India and affected Data Principals, as required under the DPDP Act.
For any data-related requests or grievances — including access, correction, deletion, or consent withdrawal — users may contact:
If a grievance raised with the above contacts remains unresolved within the timeline prescribed under the DPDP Act, the Data Principal may escalate the matter to the Data Protection Board of India.
This Privacy Policy may be updated periodically to reflect changes in legal requirements, platform features, or data-handling practices. Users will be notified of significant changes through in-app notifications, email alerts, or announcements on the School's official channels. Each version of this Policy will indicate its effective date. Continued use of the Platform after such updates constitutes acknowledgement and acceptance of the revised Policy.
For questions, concerns, or requests relating to this Privacy Policy or the handling of personal data, please contact:
9999123456, 8800000123