Privacy Policy

CHRISTUS REX SENIOR SECONDARY SCHOOL, OOTY

WEBSITE PRIVACY POLICY

Last Updated: 28-08-2026

Christus Rex Senior Secondary School, Ooty (“School”, “we”, “us”, or “our”) respects the privacy of students, prospective students, parents, guardians, staff, alumni, visitors, and other individuals who interact with the School through its website.

This Privacy Policy explains how the School collects, uses, stores, protects, processes, and, where necessary, shares personal information submitted through the School’s website, including information provided through admission forms, enquiry forms, registration forms, online applications, communication forms, payment facilities, and other digital services.

Because the School may collect personal information relating to children and minors, as well as information relating to parents and guardians, the School recognises the need for appropriate safeguards and responsible handling of such information.

By using the Website or submitting information through it, you acknowledge that you have read and understood this Privacy Policy.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through the official Website of Christus Rex Senior Secondary School, Ooty, including information submitted through:

Online admission applications;
Student registration forms;
Admission enquiry forms;
Parent and guardian forms;
Contact forms;
Event registration forms;
School activity registrations;
Online fee or payment facilities, where applicable;
Student-related forms;
Download or document request forms;
Feedback and communication facilities;
Scholarship or concession applications, where applicable;
Employment or staff enquiry forms, where applicable;
Cookies and website technologies;
Other digital services made available by the School.

2. Personal Information We May Collect

Depending upon the service or form being used, the School may collect different categories of personal information.

The information collected may include, but is not limited to, the following.

Student’s full name;
Previous or preferred name, where applicable;
Date of birth;
Place of birth;
Gender;
Photograph;
Residential address;
Permanent address;
Nationality;
Mother tongue;
Blood group, where required;
Previous school details;
Academic records;
Previous examination details;
Transfer Certificate information;
Identification documents;
Aadhaar details or Aadhaar-related verification information, where lawfully required;
Student contact details, where applicable;
Medical or health-related information where necessary for legitimate School purposes;
Information relating to disability or special educational requirements, where applicable;
Emergency contact information;
Sibling information;
Transportation-related information;
Hostel-related information, where applicable;
Scholarship or concession information;
Extracurricular and achievement information;
Information relating to special educational needs;
Other information reasonably required for admission, enrolment, School administration, student safety, education, or statutory compliance.

3. Parent and Guardian Information

The School may collect information relating to parents, guardians, or persons authorised to act on behalf of a student, including:

Father’s/Parent 1’s name;
Mother’s/Parent 2’s name;
Guardian’s name, where applicable;
Parent/Guardian relationship with the student;
Mobile telephone numbers;
Alternate telephone numbers;
Email addresses;
Residential address;
Permanent address;
Occupation;
Employer or organisation details, where required;
Educational qualification, where required;
Annual income or income range, where relevant to a scholarship, concession, or other legitimate School purpose;
Identification information;
Aadhaar details or verification information, where lawfully required;
Emergency contact information;
Communication preferences;
Other information reasonably necessary for School administration or legal compliance.

4. Aadhaar Information

The School recognises that Aadhaar information requires particular care. Where Aadhaar information is requested, the School shall collect, process, verify, or retain such information only for a lawful and legitimate purpose and to the extent permitted or required under applicable law.

Depending upon the purpose and applicable requirements, the School may request Aadhaar number, Masked Aadhaar, Aadhaar card/document, Aadhaar-related verification information, Aadhaar Offline e-KYC or other permissible verification information, or other legally permitted identity verification information.

The School will seek to follow privacy-preserving practices and shall avoid unnecessary public disclosure of Aadhaar information. Where an Aadhaar document is required to be uploaded, the School may apply appropriate safeguards such as restricted access, masking/redaction, encryption, controlled storage, and deletion or secure disposal when the information is no longer required, subject to applicable legal, regulatory, accounting, academic, or administrative requirements.

The School shall not publish Aadhaar numbers or Aadhaar documents on publicly accessible portions of the Website.

5. Caste, Community and Religion-Related Information

Admission or School administration processes may require information relating to caste, community, category, religion, minority status, social or educational category, reservation category, supporting certificates, and other related information.

Such information shall be collected only where reasonably necessary for a legitimate School purpose, including admission processing, statutory requirements, eligibility determination, scholarships, concessions, reservation/category requirements, government reporting, educational administration, or other lawful purposes.

The School shall not use such information for unlawful discrimination, unauthorised profiling, or purposes unrelated to the purpose for which the information was collected. Access to such information shall be restricted to authorised personnel and service providers who require access for legitimate purposes. The School shall take reasonable measures to prevent unnecessary disclosure of such information.

6. Information Relating to Children

The School may collect and process personal information relating to children below eighteen years of age. Such information may include student identity information, academic information, photographs, parent/guardian information, contact information, identification documents, admission information, health or emergency information, attendance and activity information, and other information required for legitimate educational or administrative purposes.

The School shall process children’s personal data in accordance with applicable laws and requirements concerning children’s data. Where required by applicable law, the School shall obtain verifiable consent from the parent or lawful guardian before processing children’s personal data.

The School shall take reasonable steps to ensure that processing of children’s personal data is undertaken for legitimate School purposes and does not unnecessarily expose children to risks, profiling, tracking, or harmful processing.

7. Purpose of Collecting Personal Information

The School may collect and process personal information for purposes including:

Processing admission applications;
Verifying student and parent information;
Assessing eligibility for admission;
Maintaining student records;
Communicating with parents and guardians;
Communicating admission decisions and requirements;
Managing School enrolment;
Providing educational services;
Managing examinations and academic activities;
Managing School events and activities;
Maintaining emergency contact information;
Ensuring student safety and welfare;
Processing fees and payments;
Processing scholarships, concessions, or financial assistance;
Meeting statutory and regulatory obligations;
Responding to government or authorised authority requests;
Verifying identity where legally or operationally necessary;
Preventing fraud, impersonation, or misuse;
Maintaining School records;
Providing transportation or hostel services where applicable;
Managing School communications;
Maintaining Website security;
Responding to enquiries and complaints;
Improving Website functionality and user experience;
Maintaining records required for legal, administrative, academic, or institutional purposes;
Performing other lawful purposes reasonably connected with the School’s educational and administrative functions.

8. Legal Basis and Consent

The School shall process personal data in accordance with applicable data protection and other relevant laws. Depending on the nature of the processing, information may be processed where consent has been provided; processing is necessary for a lawful and legitimate School purpose; processing is necessary for admission or provision of educational services; processing is required to comply with applicable legal or regulatory obligations; processing is necessary to protect the safety or interests of a student or other individual; processing is necessary for the establishment, exercise, or defence of legal rights; or another lawful basis recognised under applicable law applies. Where consent is relied upon, the School will seek to provide appropriate information regarding the purpose of processing. Where processing relates to a child, parental or lawful guardian consent shall be obtained where required by applicable law.

9. Voluntary and Mandatory Information

Some information requested through the Website may be mandatory because it is necessary for admission, identity verification, student registration, statutory compliance, School administration, emergency purposes, payment processing, scholarship or concession processing, or another legitimate School purpose.

The relevant form may identify mandatory fields. Where a user does not provide information that is legally or operationally necessary, the School may be unable to process the relevant application, enquiry, registration, service, or request. Where information is optional, the user may choose not to provide it unless otherwise required by law or a legitimate School process.

10. Accuracy of Information

Parents, guardians, students, applicants, and other users are responsible for ensuring that information submitted to the School is accurate, complete, current, and not misleading.

Users should promptly notify the School if any significant information changes. The School may request supporting documents or verification where necessary to confirm the accuracy of information.

Providing false, forged, misleading, or unauthorised information may result in rejection of an application, withdrawal of a service, or other appropriate action in accordance with School policy and applicable law.

11. How We Use Photographs and Videos

The School may photograph or record students, parents, staff, visitors, and participants during School-related activities, events, competitions, celebrations, sports, cultural programmes, educational activities, ceremonies, and other institutional events.

Where permitted and appropriately authorised, such photographs and recordings may be used for School records, annual reports, newsletters, School publications, educational documentation, event documentation, School Website content, official social media, prospectuses, promotional and institutional communication, and other legitimate School purposes.

The School shall take reasonable measures when publishing identifiable photographs or videos involving children. Where consent is required for a particular use, the School shall seek the appropriate consent. Parents or lawful guardians may contact the School regarding legitimate concerns relating to the use of identifiable images of their child.

12. Cookies and Website Technologies

The Website may use cookies and similar technologies to operate essential Website functions, remember user preferences, improve Website performance, understand Website usage, maintain security, analyse traffic and usage patterns, and improve user experience.

The Website may use third-party analytics or embedded services where applicable. Where required, the School will provide appropriate information or controls relating to cookies and similar technologies. Users may also be able to control cookies through their browser settings. Disabling certain cookies may affect Website functionality.

13. Google, Analytics and Other Third-Party Services

The Website may use services provided by third parties, including analytics providers, payment gateways, communication services, hosting providers, security services, CAPTCHA services, cloud platforms, embedded media providers, or other technology providers.

Such providers may process limited personal information on behalf of the School or as independent service providers, depending on the nature of the service. The School will take reasonable steps to select and use service providers in accordance with applicable legal and security requirements. Users should review the privacy policies of third-party services where appropriate.

14. Payment Information

Where online payments are available, payment transactions may be processed by authorised third-party payment gateways. The School generally does not need to collect or store complete debit card, credit card, CVV, PIN, or banking authentication credentials through the School Website.

Payment information may be processed directly by the relevant payment service provider in accordance with its terms and privacy policy. The School may receive transaction-related information such as payer name, transaction reference, amount, payment status, date and time, payment method, application/student reference number, and other information required for reconciliation and accounting.

15. Sharing of Personal Information

The School may share personal information only where reasonably necessary and lawful.

Information may be shared with authorised School staff; School management or administration; teachers or authorised educational personnel where necessary; parents or lawful guardians where appropriate; government departments and regulatory authorities; examination boards; educational authorities; law enforcement authorities where legally required; courts or other competent authorities; authorised payment processors; Website hosting providers; cloud storage providers; IT and cybersecurity service providers; communication service providers; admission or School management software providers; professional advisers; auditors; insurers where applicable; transportation or hostel service providers where applicable; and other authorised service providers necessary to perform legitimate School functions.

The School shall seek to ensure that such sharing is limited to what is reasonably necessary for the relevant purpose and is carried out in accordance with applicable law.

16. No Sale of Student Personal Information

The School does not sell students’ personal information, parents’ personal information, Aadhaar information, caste information, religion information, or other personal information collected through the Website as a commercial product. Personal information shall not be disclosed to third parties for unrelated commercial purposes except where permitted by law and subject to applicable requirements.

17. Data Storage and Retention

Personal information may be stored in School systems, admission management systems, student information systems, secure servers, cloud platforms, authorised third-party systems, digital document repositories, and physical School records where necessary. The School shall retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or for the period required by applicable law, regulatory requirements, School policies, accounting requirements, academic record requirements, dispute resolution, or legitimate institutional purposes.

Different categories of information may therefore be retained for different periods. When personal information is no longer required, the School shall take reasonable steps to securely delete, destroy, anonymise, or otherwise dispose of it, subject to legal and operational requirements.

18. Security Measures

The School recognises the importance of protecting personal information, particularly information relating to students and minors. Reasonable security measures may include access controls, role-based access, password protection, encryption where appropriate, secure transmission protocols, server security, malware and threat protection, backups, audit logs, restricted administrative access, controlled document access, secure handling of Aadhaar-related documents, staff awareness and confidentiality requirements, and other technical and organisational safeguards. However, no electronic system can be guaranteed to be completely secure.

19. Access to Personal Information

Access to student and parent information shall be restricted to authorised persons who require the information for legitimate School purposes. The School may implement role-based access controls so that personnel can access only the information reasonably necessary for their responsibilities. Particular categories of information, including identification documents, Aadhaar information, caste/category information, religion-related information, health information, and other confidential records, may be subject to additional access restrictions.

20. Data Breach and Security Incidents

If the School becomes aware of a personal data breach or security incident affecting personal information, the School shall take reasonable steps to identify and contain the incident; assess its nature and extent; secure affected systems; investigate the cause; take corrective measures; maintain appropriate records; notify affected individuals where required; and notify the appropriate authority or regulator where required by applicable law. Where children’s personal data or highly confidential information is affected, the School may apply additional protective measures based on the nature and severity of the incident.

21. Rights of Individuals

Subject to applicable law and the manner in which the relevant rights are legally implemented, individuals may have rights relating to their personal data, including rights to obtain information about processing; access personal information; request correction of inaccurate information; request updating of incomplete information; request deletion or erasure where legally applicable; withdraw consent where processing is based on consent; raise grievances; nominate another individual where applicable under law; and exercise other rights available under applicable data-protection laws.

Certain rights may be subject to legal exceptions, retention obligations, academic requirements, statutory requirements, contractual requirements, dispute resolution, or other lawful restrictions.

22. Rights Relating to Children’s Data

Where personal information relates to a child, requests concerning such information may need to be submitted by the child’s parent or lawful guardian, subject to applicable law. The School may require reasonable verification of the identity and authority of the person making such a request. The School may refuse or limit a request where doing so is legally permitted or required, including where the information must be retained for statutory, academic, safety, legal, or other legitimate purposes.

23. Withdrawal of Consent

Where processing is based on consent, consent may be withdrawn subject to applicable law and the practical consequences of such withdrawal. Withdrawal of consent does not affect processing that was lawfully carried out before the withdrawal.

If certain information is essential for admission, enrolment, student safety, statutory compliance, or provision of School services, withdrawal may prevent the School from providing the relevant service or completing the relevant process.

24. Grievance Redressal

If you have concerns regarding the collection, use, storage, disclosure, security, or processing of personal information, you may contact the School. The School will review and address privacy-related complaints in accordance with its applicable procedures and legal obligations. Users are encouraged to provide sufficient information to allow the School to investigate the concern.

25. Data Protection Contact

Christus Rex Senior Secondary School, Ooty

Email: christusrex1975@gmail.com

Telephone: +91-423-2442064 / / 91 94892 61044 \ +91-423-2443340

Address: Woodcock Road St. Mary’s Hill Ootacamund The Nilgiris-643001

Website: https://rexschool.org/

26. International Data Transfers

Where the School or its authorised service providers use cloud infrastructure, hosting services, software platforms, communication systems, or other technology services that may process personal information outside India, such processing shall be undertaken subject to applicable law and the School’s contractual and security requirements. The School shall take reasonable steps to ensure that appropriate safeguards are applied to personal information processed through such services.

27. Third-Party Websites

The School Website may contain links to third-party websites, applications, social media platforms, payment gateways, or other services. The School does not control the privacy practices of such third parties. Users should review the applicable privacy policies before submitting personal information to third-party services. The School shall not be responsible for privacy practices, security incidents, or data processing carried out independently by third-party websites.

28. Student and Parent Login Accounts

Where the Website provides student, parent, applicant, or staff login facilities, users are responsible for maintaining the confidentiality of their login credentials. Users must not share passwords, allow unauthorised persons to access their account, use another person’s account, attempt to bypass security controls, or disclose confidential student information obtained through the portal. Any suspected unauthorised access should be reported to the School immediately.

29. Communication and Notifications

The School may use personal information such as mobile numbers, email addresses, or other contact details to communicate admission-related information, application updates, School notices, academic information, event information, emergency communications, fee-related information, administrative communications, security notifications, and other legitimate School-related information. Where required by law, users will be provided with appropriate choices regarding non-essential communications.

30. Confidentiality of Student Information

The School recognises that student information is confidential. Student information shall not ordinarily be disclosed to unrelated third parties unless the disclosure is authorised; the parent or lawful guardian has appropriately requested or authorised it; the disclosure is necessary for a legitimate School purpose; the disclosure is required by law; the disclosure is necessary to protect safety or prevent harm; or another lawful basis applies. The School shall take reasonable steps to prevent unauthorised disclosure.

31. Data Minimisation

The School aims to collect personal information that is reasonably necessary for the relevant School purpose. Where a particular field is not required for the purpose for which information is being collected, the School may avoid collecting such information. The School may periodically review forms and databases to identify unnecessary or outdated information.

32. Retention of Aadhaar and Identity Documents

Aadhaar copies, identification documents, certificates, and related records shall be retained only where reasonably necessary for the applicable School purpose or where retention is required by law, regulation, audit, academic administration, or another legitimate requirement.

Where retention of the complete document is not necessary, the School may use alternatives such as masked documents, redacted documents, verification status, reference numbers, or other privacy-preserving mechanisms.

33. No Public Disclosure of Personal Information

The School shall not intentionally publish confidential personal information such as Aadhaar numbers, passwords, authentication credentials, personal contact information where inappropriate, student admission records, caste/category records, religion-related records, financial information, health information, or other confidential personal information on publicly accessible portions of the Website except where there is a lawful and appropriate basis for doing so.

34. Changes to This Privacy Policy

The School may update this Privacy Policy from time to time to reflect changes in applicable law, changes in School practices, changes in Website functionality, changes in technology, changes in third-party services, or other operational requirements. The revised Privacy Policy shall be published on the Website with an updated “Last Updated” date. Users are encouraged to periodically review this Privacy Policy.

35. Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the applicable laws of India. Nothing in this Privacy Policy shall limit any rights or protections that cannot lawfully be excluded or restricted under applicable law.

36. Acceptance

By submitting personal information through the School Website, the user acknowledges that they have read and understood this Privacy Policy. Where a parent or lawful guardian submits information relating to a student or child, the parent or lawful guardian represents that they have the necessary authority to provide such information and to act on behalf of the child, to the extent required by applicable law.

37. Contact Us

For questions, requests, complaints, or concerns relating to this Privacy Policy or the handling of personal information, please contact:

School Contact Details