Privacy Policy for Students and Parents
1. Introduction
Vidyalo, operated by DCC Services Pvt Ltd, values the privacy and protection of students and their parents using our platform. We recognize the sensitivity of handling students' personal information, particularly with regards to identification documents, and are committed to processing this data responsibly in line with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws in India.
This policy outlines how we collect, use, share, and protect the personal information of students and parents on our platform. By using Vidyalo’s services, parents’/guardians’ consent to this Privacy Policy on behalf of their children under 18 years of age.
2. Information We Collect
To facilitate school admissions and provide relevant services, we collect the following information:
- Account Information: Email address, password.
- Student and Parent Details: Student’s first and last name, date of birth, parent or guardian's full name, email, phone number, postal address.
- Preferences: Preferred school type, board, medium of instruction, and location.
- Identification Documents: Aadhaar, photograph, and other identification documents of both student and parent, which are confidential and sensitive.
- Application Data: Documents necessary for the admission process, such as proof of address, date of birth, and academic records.
3. Purpose of Data Collection
We collect personal data for the following purposes:
- School Recommendations and Applications: To suggest schools based on parental preferences and process applications on behalf of students.
- Account Management: To create and maintain a parent account that enables application tracking, communication with schools, and secure access to Vidyalo’s services.
- Verification: To verify the identity of students and parents to prevent misuse or unauthorized access.
- Communication: To send updates regarding application statuses, fee receipts, and notifications relevant to the admission process.
4. Consent Requirements
Parents or guardians are required to provide consent for:
- Creating an account and sharing personal data on behalf of students under 18 years of age.
Parental consent is essential to proceed with services for students below the age of 18 years of age.
5. Data Usage and Processing
We use your personal information to:
- Match School Preferences: Provide personalized school recommendations.
- Process Applications: Share student applications, along with required identification documents, with selected schools.
- Parent Communication: Enable secure communication between schools and parents.
- Platform Improvement: Analyse aggregated data to improve Vidyalo’s platform, ensuring better service for future users.
6. Data Sharing and Disclosure Your
data will be shared only as described below:
- With Schools and other service providers of Vidyalo: Application information, including identification documents, is shared only with the selected schools where applications are submitted.
- With Third-Party Service Providers: We may engage trusted third-party providers (e.g., for platform hosting or analytics) who process data under strict confidentiality agreements.
- With Regulatory Authorities: Vidyalo will share data with government authorities as required by law or legal proceedings, in compliance with the DPDP Act and other legal obligations.
7. Data Security Measures
We are committed to safeguarding your information through comprehensive security practices:
- Access Controls: Only authorized personnel have access to personal data, based on necessity and security protocols.
- Regular Audits: Security protocols are regularly reviewed and updated to address any vulnerabilities.
While we take rigorous precautions, please note that no security system is completely infallible in the online environment.
8. Data Retention Policy
Vidyalo retains personal data only as long as necessary for the purposes outlined in this policy or as mandated by law. Specifically:
- Application Data: Retained for the duration of the admission process and, if required, for legal obligations thereafter.
- Account Data: Retained as long as the parent account remains active, or until a deletion request is received.
Upon request or when data is no longer required, we ensure secure deactivation of your data.
9. Data Breach Notification
In the unlikely event of a data breach that could potentially compromise your personal information, we will notify affected users promptly, in line with the DPDP Act requirements. Our response plan includes:
- Immediate Containment Measures: To secure data and prevent further breaches.
- Investigation: To identify the breach source and rectify the vulnerability.
- Notification: Affected individuals will be informed promptly, outlining the nature of the breach, compromised data, and steps to mitigate any risks.
10. Children's Privacy and Parental Rights
For children under 18, Vidyalo adheres to the DPDP Act by:
- Parental Consent: Requiring parental or guardian consent for account creation and data submission on behalf of minors.
- Access Rights: Parents have the right to access, update, or request deletion of their child's data at any time.
- Right to Withdraw Consent: Parents can withdraw consent for data processing at any stage by contacting Vidyalo, which may impact the services provided.
11. Data Transfer Outside India
If personal data needs to be transferred outside India for any purpose, Vidyalo ensures that it is transferred only to countries deemed “trusted” by the Indian government. Measures are taken to ensure the data receives equivalent protection standards abroad as mandated in India.
12. User Rights
In accordance with the DPDP Act, parents and guardians have the following rights:
- Right to Access: Request access to personal data that Vidyalo holds.
- Right to Rectify: Correct inaccuracies in the data provided.
- Right to Erasure: Request deletion of data, except where retention is legally required.
- Right to Withdraw Consent: Revoke consent at any time; however, withdrawal may impact service provision.
- Right to Object: Object to certain types of data processing.
To exercise these rights, contact us at support@vidyalo.com
13. Use of Cookies
To enhance user experience, Vidyalo uses cookies that help track user preferences and understand platform usage patterns. Parents can control cookie settings through their browser preferences.
14. Policy Updates
This Privacy Policy may be updated periodically to reflect changes in our practices or legal obligations. Significant changes will be communicated to users, and the updated policy will be accessible on our platform.
15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your rights under it, please contact us at:
Vidyalo
ERGO Tower Unit No 704 Block EP & GP Salt Lake Sector V Kolkata - 700091
