Privacy Policy Effective Date: 18-09-2026 Welcome to International Delhi Public School, Mahore. We are committed to protecting your privacy and complying with the Digital Personal Data Protection Act, 2023 (DPDP Act). 1. Data Collection & Minimization We collect digital personal data strictly for the purposes of school admissions, student administration, and educational services. This may include names, contact details, academic records, and parent/guardian information. To comply with Data Minimization principles, we do NOT collect biometric data (e.g., child photographs) during the initial public application. Such records are only collected via an authenticated portal upon formal enrollment. 2. Purpose & Consent Your personal data is processed solely for the purposes explicitly stated at the time of collection. By submitting forms on our website, you provide verifiable consent for us to process this data. 3. Data Storage & Security All personal data is securely hosted on enterprise-grade cloud infrastructure provided by Cloudflare and Supabase. Database records are protected using industry-standard at-rest encryption and TLS encryption in transit. Our cloud servers are restricted via strict access controls and Row Level Security to prevent unauthorized access. 4. Data Retention Rejected admission applications and resolved enquiries are automatically deleted from our systems after 1 year. Approved admission applications and enrolled student records are retained for as long as reasonably necessary for educational administration, academic records, legal and regulatory obligations, academic verification, and alumni recordkeeping. Different categories of records may be retained for different periods based on their purpose and applicable requirements. 5. Your Rights (Data Principal) Under the DPDP Act, you have the right to: - Access the personal data we hold about you. - Request correction of inaccurate data. - Withdraw your consent at any time. - Request the erasure of your personal data. 6. Children's Data As an educational institution, we process children's data. This processing is strictly limited to educational administration and is conducted with verifiable parental consent. We do not track children or target advertisements. 7. Contact for Data Deletion If you wish to exercise your rights, request data deletion, or withdraw consent, please contact our Data Protection Officer at: info_mahore@idpssociety.com