Privacy Policy

1. Introduction

Capital International School (“we,” “our,” or “the School”) is committed to protecting the privacy and personal data of students, parents, guardians, staff, and visitors. This Privacy Policy explains how we collect, use, store, disclose, and protect personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA) enacted by the Government of India, and the Information Technology Act, 2000, along with its associated rules.

By accessing our website (www.capitalinternationalschool.com), submitting enquiry or admission forms, or interacting with us in any manner, you consent to the collection and use of your personal data as described in this policy.

2. Key Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set forth below, consistent with the DPDPA, 2023:

3. Personal Data We Collect

We collect the following categories of personal data through our website, admission forms, and school interactions:

3.1 Information Collected via the Website

• Parent’s or Guardian’s full name
• Child’s full name
• Mobile phone number
• Email address
• Grade the child is applying for (LKG through Grade 10)
• Area or locality of residence
• Any additional information voluntarily provided in the message field

3.2 Information Collected During Admissions

• Student’s date of birth, age, gender, and nationality
• Parent/guardian identification documents (Aadhaar, PAN, passport, etc.)
• Previous school records and transfer certificates
• Medical history and health records of the student
• Photographs of the student and parent/guardian
• Residential address and emergency contact details

3.3 Automatically Collected Data

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Cookies and similar tracking technologies (see Section 10)

4. Purpose of Data Collection

We process personal data solely for the following legitimate purposes:

• Processing and managing student admissions and enrolment
• Communicating with parents and guardians regarding admissions, academics, events, and emergencies
• Maintaining student academic records, attendance, and progress reports
• Ensuring the safety and security of students on campus and during transportation
• Complying with applicable laws, regulatory requirements, and government directives
• Improving our website, services, and educational programmes
• Scheduling campus tours and responding to enquiries
• Sending important updates and notifications related to school operations

5. Consent

In accordance with the DPDPA, 2023, we obtain verifiable consent from parents or lawful guardians before processing the personal data of any child (individual below 18 years of age). Consent is collected at the time of admission enquiry, form submission, or enrolment.

You may withdraw your consent at any time by contacting us at info@capitalinternationalschool.com. Please note that withdrawal of consent may impact our ability to provide certain services, including continued enrolment and communication.

6. Data Sharing and Disclosure

We do not sell, rent, or trade personal data to any third party. We may share personal data only in the following circumstances:

• With authorised government bodies, regulatory authorities, or the Central Board of Secondary Education (CBSE) as required by law
• With third-party service providers who assist in school operations (e.g., transport management, IT systems, payment gateways) under strict confidentiality agreements
• With medical professionals in the event of a health emergency involving a student
• When required by a court order, legal process, or law enforcement authority

All third-party service providers engaged by the School are contractually bound to protect personal data and use it only for the specified purposes.

7. Data Retention

We retain personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable Indian laws and regulations. Specifically:

• Student academic records are retained for a minimum period as mandated by CBSE and state education regulations.
• Admission enquiry data (submitted via the website) is retained for up to 2 academic years from the date of submission, after which it is securely deleted.
• Financial and payment records are retained as per the requirements of Indian tax and accounting laws.

Upon expiry of the retention period, personal data is securely erased or anonymised.

8. Data Security Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmitted through our website
• Restricted access controls ensuring only authorised personnel can access personal data
• Regular security audits and vulnerability assessments of our IT systems
• Secure physical storage of paper-based records with controlled access
• CCTV surveillance on campus for the safety of students and staff (footage is retained for a limited period and is not shared externally except when required by law)

9. Your Rights Under the DPDPA, 2023

As a Data Principal, you have the following rights under the Digital Personal Data Protection Act, 2023:

To exercise any of these rights, please contact our Grievance Officer using the details provided in Section 13.

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and to analyse website traffic. The types of cookies we use include:

• Essential Cookies: Required for the basic functionality of the website (e.g., form submissions, page navigation).
• Analytics Cookies: Used to understand how visitors interact with our website (e.g., Google Analytics). These cookies collect anonymised data about page views and user behaviour.

You may disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of the website. For more information on how Google uses your data, please visit Google’s Privacy Policy at https://policies.google.com/privacy.

11. Third-Party Links

Our website may contain links to third-party websites, including social media platforms (Facebook, Instagram, YouTube, LinkedIn) and payment gateways. We are not responsible for the privacy practices or content of these external websites. We encourage you to review the privacy policies of any third-party website before providing your personal data.

12. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in legal requirements, school operations, or data processing practices. Any material changes will be communicated through our website or via direct notification. The “Last Updated” date at the top of this document indicates the most recent revision.

13. Grievance Officer & Contact Information

In compliance with the DPDPA, 2023, Capital International School has appointed a Grievance Officer to address any concerns, complaints, or requests related to your personal data.

We endeavour to resolve all grievances within 30 days of receipt. If you are not satisfied with our response, you may approach the Data Protection Board of India as established under the DPDPA, 2023.

This Privacy Policy is governed by the laws of India.