Privacy Policy

Jayshree Periwal International Pre School (JPIPS)

Last Updated: October 1, 2026

Jayshree Periwal International Pre School (“JPIPS”, “we”, “us” or “our”) respects the privacy of students, parents, guardians, visitors and other individuals who interact with our website and digital services.

This Privacy Policy explains how we collect, use, store, disclose and protect personal information obtained through our website, enquiry forms, admission forms, communication channels and other digital services.

1. Personal Information We May Collect

Depending on your interaction with us, we may collect:

1. Parent/guardian name and contact details.
2. Student/child name, age/date of birth, class, programme and branch preference.
3. Address and location information where required for admission or communication.
4. Emergency contact information.
5. Information voluntarily provided through enquiry or admission forms.
6. Information relating to allergies, medical or special assistance requirements where necessary for the child’s safety and wellbeing.
7. Photographs, videos, testimonials and other material voluntarily submitted to JPIPS.
8. Communication records relating to enquiries, admissions and support.
9. Website technical information such as IP address, browser, device information and website interaction data.
10. Payment or transaction-related information where online payment facilities are provided.

We will seek to collect only information that is reasonably necessary for the relevant purpose.

This approach is consistent with the notice, purpose and security principles set out under the DPDP framework and the existing privacy requirements under the IT/SPDI framework. 

2. Information Relating to Children

JPIPS operates in an educational environment and may necessarily process information relating to children.

1. Information relating to a child may be collected from a parent or lawful guardian or through authorised school processes.
2. JPIPS will take appropriate steps to establish parental/guardian authority where required by applicable law.
3. We will not knowingly use children’s personal information for targeted advertising.
4. We will not intentionally create behavioural profiles of children for commercial marketing purposes.
5. Any monitoring or tracking relating to children will be limited to purposes permitted by applicable law, such as education, administration or safety.
6. Child-related information will be handled with particular care and will not be unnecessarily made publicly available.

The DPDP Rules specifically provide that educational-institution processing of children’s data for educational activities or safety is subject to defined conditions.

3. Purpose of Collection and Use

Personal information may be used for:

1. Responding to enquiries and requests for information.
2. Processing admission enquiries and applications.
3. Communicating with parents/guardians.
4. Providing information regarding programmes, branches and school activities.
5. Managing school-related administrative processes.
6. Providing student services and ensuring child safety.
7. Improving our website, services and user experience.
8. Maintaining records required for administrative, legal, accounting or regulatory purposes.
9. Processing payments where applicable.
10. Sending school-related information and, where separately permitted, promotional communications.

Personal information will not be used for purposes that are materially different from the purpose communicated to the individual, unless permitted by applicable law.

4. Consent

Where consent is required, JPIPS will seek consent in a clear and informed manner.

1. Consent will be requested for specific purposes.
2. Optional marketing or promotional communications will be distinguishable from necessary school communications.
3. Consent may be withdrawn through the available communication mechanism, subject to applicable law.
4. Withdrawal of consent will not affect processing lawfully carried out before withdrawal.
5. For children’s personal information, parental/guardian consent will be obtained or verified wherever required.

The DPDP Rules require notices to clearly describe the personal data collected and the specific purposes for which it is processed, and to provide a mechanism for withdrawal of consent comparable in ease to giving consent.

5. Photographs, Videos and Testimonials

JPIPS may use photographs, videos and testimonials relating to school activities for official communication, educational documentation and promotional purposes where appropriate consent has been obtained.

Where the material features a child:

1. Consent will be sought from the parent/legal guardian where required.
2. We will avoid unnecessarily publishing sensitive personal information alongside the child’s image.
3. Parents/guardians may contact us regarding future use of submitted material.
4. Content may be edited or formatted for website, social media, digital creatives or school communication without altering its intended meaning.

6. Cookies and Website Analytics

Our website may use cookies and similar technologies for:

1. Essential website functionality.
2. Security.
3. Website performance.
4. Anonymous or aggregated analytics.
5. Remembering user preferences.
6. Marketing or remarketing, where appropriately configured and legally permitted.

Where required, non-essential cookies will be presented through an appropriate consent mechanism.

JPIPS will not knowingly use tracking technologies to build behavioural advertising profiles of children.

7. Third-Party Services

Our website may use third-party services such as:

• Website hosting and security providers
• Admission/CRM/ERP systems
• Email, SM, Whatsapp or communication providers
• Payment gateways
• Analytics services
• Google Maps or similar location services
• YouTube/social-media embeds
• Advertising and campaign platforms

Such providers may process information on our behalf or collect information under their own policies. We will use appropriate contractual, technical or organisational safeguards where applicable.

8. Sharing of Personal Information

JPIPS does not sell personal information.

Information may be shared where reasonably necessary with:

1. Authorised employees and school personnel.
2. Technology, hosting and software service providers.
3. Admission, CRM, ERP or communication service providers.
4. Payment service providers.
5. Professional advisers or auditors where necessary.
6. Government, regulatory or law-enforcement authorities where legally required.
7. Emergency or child-safety authorities where necessary to protect a child’s or individual’s safety.

Third parties receiving personal information will be expected to maintain appropriate confidentiality and security safeguards.

9. Government-Issued Identification

JPIPS will avoid collecting government-issued identification numbers through ordinary public enquiry forms unless they are genuinely required for a lawful purpose.

Where Aadhaar or another government identifier is required for an authorised school or statutory process:

1. It will be collected through an appropriate secure channel.
2. It will be used only for the disclosed purpose.
3. It will not be publicly displayed.
4. Access will be restricted to authorised personnel.

UIDAI specifically advises against placing Aadhaar numbers in the public domain, and the Aadhaar Act restricts public publication/display of Aadhaar information. 

10. Data Security

JPIPS will implement reasonable technical and organisational safeguards appropriate to the nature of personal information processed.

These may include:

1. Access controls and role-based access.
2. Encryption or equivalent protection where appropriate.
3. Secure website connections.
4. Monitoring and logging.
5. Secure backups.
6. Password and authentication controls.
7. Vendor security controls.
8. Procedures for responding to suspected data breaches.

The DPDP Rules prescribe safeguards including encryption/masking/tokenisation, access controls, logging, monitoring, backups and contractual security provisions with Data Processors.

11. Data Retention

Personal information will be retained only for as long as reasonably necessary for:

1. The purpose for which it was collected.
2. School administration and academic records.
3. Legal, regulatory, accounting or statutory obligations.
4. Dispute resolution or enforcement of agreements.
5. Other purposes permitted by applicable law.

When information is no longer required, it will be securely deleted, anonymised or otherwise disposed of as appropriate.

The DPDP Rules contain specific erasure and retention requirements for certain categories of Data Fiduciaries and also require specified processing data/logs to be retained for defined periods where applicable.

12. International Data Processing

Some service providers used by JPIPS may process information outside India.

Where personal information is processed outside India, JPIPS will take steps required under applicable Indian law, contractual arrangements and government restrictions.

The DPDP Rules provide for transfer of personal data outside India subject to requirements that may be prescribed by the Central Government.

13. Your Rights

Subject to applicable law, individuals may request information relating to their personal data, including:

1. Access to personal information being processed.
2. Correction of inaccurate or incomplete information.
3. Erasure where the information is no longer required or where applicable law permits/mandates it.
4. Withdrawal of consent where processing is based on consent.
5. Grievance redressal.
6. Nomination of another individual where applicable.

The DPDP framework expressly provides for access, correction/erasure, grievance redressal and nomination rights.

14. Privacy Requests and Grievances

For privacy-related questions, requests or complaints, please contact:

Data Privacy Contact: Sakshi Mehta
Email: preschools@jpischools.com
Phone: +91 74128 44997
Address: Mahapura Rd, Narayan-Y-Block, Sej, Mahapura, Khatwara, Rajasthan 302026 

The DPDP Rules require a Data Fiduciary to prominently publish the contact details of the relevant person who can answer questions regarding processing of personal data.

15. Data Breach

In the event of a personal data breach, JPIPS will take appropriate steps to:

1. Contain and investigate the incident.
2. Assess the nature and extent of the breach.
3. Take corrective and preventive measures.
4. Notify affected individuals and regulatory authorities where required by applicable law.
5. Cooperate with competent authorities and service providers during incident response.

The notified DPDP Rules prescribe specific breach-intimation requirements, while CERT-In directions may require applicable entities to report specified cyber incidents within six hours and maintain relevant logs.

16. Third-Party Websites

Our website may contain links to websites, applications or services operated by third parties.

JPIPS does not control the privacy practices of such third parties. Users should review the privacy policies of those services before providing personal information.

17. Changes to this Privacy Policy

JPIPS may update this Privacy Policy from time to time to reflect:

• Changes in law.
• Changes in our services.
• Changes in technology.
• Changes in security practices.
• Changes in website functionality.

The updated version will be published on this page along with the revised “Last Updated” date.

18. Applicable Law

This Privacy Policy shall be governed by the laws applicable in India, subject to any mandatory rights or protections available under applicable law.