Privacy Policy

Last updated: October 2026

Bishop Cotton Boys' School ("the School", "we", "us") operates this online admissions portal ("the Portal") to enable parents and guardians to apply for admission, upload supporting documents, pay the application fee and track the status of their application. This Privacy Policy explains what personal data we collect, why we collect it, how we protect it, and your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Data We Collect

Account details — the parent/guardian's name, email address, mobile number and a password (stored only as a one-way hash).
Applicant details — the child's name, date of birth, place of birth, gender, blood group, mother tongue, nationality, religion and denomination, Aadhaar number (optional), previous school and academic records, and any alumni or sibling connection you declare.
Parent/guardian details — names, occupation, qualification, annual income range, NRI status, mobile numbers, email addresses, office and residential addresses.
Documents you upload — birth certificate, address proof, photographs, signature, qualification certificates and any category-specific certificates (for example baptism, church membership, caste or employment certificates).
Payment records — the amount, date and transaction reference of the application fee. We do not collect payment card details: all card transactions are processed directly by PayU (our payment gateway) and are governed by their privacy policy.
Technical data — a session cookie and records of sign-ins needed to keep your account secure.

2. How We Use Your Data

Processing your child's application for admission, including verifying documents, checking eligibility (for example age criteria and admission category), and conducting the selection process.
Sending email about your account and application: email verification, password reset, application acknowledgement, payment receipt, and changes in application status (via our email service, Mandrill / Mailchimp).
Where admission is granted, transferring the student's and parents' details to the School's fee portal and student records so that fees can be raised and the student enrolled.
Maintaining audit records of application status changes and payments for school administration and regulatory compliance.
Detecting and preventing unauthorised access to accounts.

We do not use your data for marketing, profiling, or any purpose unrelated to admissions and, for admitted students, enrolment.

PayU Payments Private Limited — processes the online application fee. Your card details go directly to PayU and are not seen or stored by the School or this Portal.
Mandrill / Mailchimp — used to deliver emails to your registered email address.
School staff — authorised admissions staff and school management can view applications and uploaded documents in order to process them.
The School's fee portal — for admitted students only, as described above.
Government authorities where required by law, for example student registration on the Government of Karnataka's Student Achievement Tracking System (SATS) for admitted students.

We do not sell, rent, or share your data with any third party for commercial purposes.

4. Data Retention

Applications that do not result in admission, together with their uploaded documents, are retained until the end of the academic year for which the application was made, and then deleted.
For admitted students, application data becomes part of the student's school record and is retained as required for school records.
Application fee payment records are retained for a minimum of 7 years as required for financial compliance.
Accounts whose email address is never verified are deleted automatically after 24 hours.
Session cookies expire when you close your browser or log out.

5. Your Rights (DPDP Act 2023)

As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the right to:

Access — request a summary of personal data we hold about you and your child.
Correction — request correction of inaccurate data. Note that the date of birth on an application cannot be changed after submission.
Erasure — request deletion of your account and an application you no longer wish to pursue, subject to the retention of payment records described above.
Grievance redressal — raise a complaint with the School's Data Protection Officer.
Nomination — nominate a person to exercise your rights on your behalf.

To exercise these rights, email support@bishopcottonschool.org with the subject line "Data Privacy Request" and your application number.

6. Security

The Portal is served over HTTPS. Passwords are stored using strong one-way hashing. Uploaded documents are stored privately and are only accessible to you and to authorised school staff after signing in. Access to application data is restricted to authenticated users and authorised staff. We regularly review our security practices.

7. Cookies

We use a session cookie to keep you logged in and a security cookie to protect forms. No third-party tracking or advertising cookies are used on this Portal.

8. Children's Data

Applications are made by a parent or lawful guardian on behalf of the child. By submitting an application you confirm that you are the child's parent or lawful guardian and consent to the processing of the child's data for the purposes described in this policy.

9. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of the Portal after a change constitutes acceptance of the updated policy.

10. Contact

Bishop Cotton Boys' School
St. Mark's Road, Bengaluru – 560 001, Karnataka, India
Email: bcbs@bishopcottonboysschool.edu.in