NCFE Schools · Data Protection
Last updated 18 June 2026 · Governed by the Digital Personal Data Protection Act, 2023 & the DPDP Rules, 2025 (India)
01
Who we are
NCFE Schools is run by the VijayKiran Educational Trust (“NCFE”, “we”, “us” or “our”), with campuses at CV Raman Nagar, Indiranagar, Mandur and Ballari (launching AY 2026–27) in Bengaluru. For the personal data described in this policy, the Trust is the Data Fiduciary that decides why and how your data is processed. Our registered address and full contact details appear in the Grievance Officer & contact section below.
02
The information we collect
We collect only the data we genuinely need to run the school and serve our community of students, parents, teachers and staff. Depending on how you engage with us, this may include:
Identity & contact details — name, date of birth, gender, photographs, address, email and phone number of students, parents/guardians and applicants.
Academic & administrative records — admission details, prior school records, attendance, assessment and progress data, and fee and transport records.
Health & support information — medical, dietary, allergy or special-education needs you choose to share so we can care for your child safely.
Payment information — billing details processed securely through our payment partners when you pay fees online.
Technical data — IP address, browser and device information, and cookies collected automatically when you visit ncfeschools.com.
We collect children’s data only from a parent or legal guardian, and only what is reasonably necessary.
03
How we use your information
We use personal data for clear, lawful purposes, including to:
process admissions and enrolment, and deliver education and related services;
communicate with parents and guardians about academics, events, fees, attendance and safety;
maintain student records and meet our duties as a recognised school;
operate transport, daycare, co-scholastic and other facilities you opt into;
keep our campuses, students and staff safe and secure;
improve our website, programmes and communications; and
comply with our legal, regulatory and statutory obligations.
04
Our lawful basis: notice & consent
Under the DPDP Act, we process your personal data either with your consent or for legitimate uses permitted by law. Where we rely on consent, we ask for it through a clear notice that tells you what data we collect and why, and your consent is free, specific, informed and unambiguous.
For students, consent is given by a parent or legal guardian. You can withdraw your consent at any time (see Your rights below). Withdrawing consent does not affect processing already carried out, and some records may still be retained where the law requires.
You may give, manage or withdraw your consent directly with us or, where available, through a registered Consent Manager.
05
Children’s and students’ data
Protecting children is central to how we work. As required by the DPDP Act, we:
obtain verifiable consent from a parent or legal guardian before processing a child’s personal data;
never process children’s data in a way that is likely to cause harm to their well-being;
do not track or behaviourally monitor children, and do not use their data for targeted advertising.
Student data is used strictly for educational, administrative, safety and statutory purposes.
06
How we share your information
We do not sell your personal data. We share it only where necessary, and with appropriate safeguards, with:
Service providers (Data Processors) — such as our school-management platform (MyClassboard), payment gateways, transport, communication and IT partners, who may use your data only to perform services for us and under written contract;
Government & statutory bodies — such as education or examination authorities, where we are legally required to share data; and
Others as permitted by law — where necessary to comply with legal obligations, enforce our Terms of Service, or prevent fraud, security or safety issues.
07
Online fee payments
When you pay fees online, your financial and billing information is used solely to complete that transaction. Card and payment data is encrypted and handled by our payment partners; we do not store your full card details on our servers. Our payment partners comply with the PCI-DSS standard maintained by the PCI Security Standards Council.
08
Data security
We apply reasonable security safeguards to protect your personal data from loss, misuse, unauthorised access, disclosure, alteration or destruction, and we keep these measures under review. In the unlikely event of a personal data breach, we will act promptly and, as required under the DPDP Act and the DPDP Rules, 2025, notify the Data Protection Board of India and the affected individuals — with a detailed report to the Board within 72 hours as prescribed.
09
How long we keep your data
We keep personal data only for as long as it is needed for the purposes in this policy, or for as long as the law requires us to retain it — for example, statutory academic and financial records. When data is no longer required and there is no legal reason to keep it, we securely delete or anonymise it. You may also ask us to erase data we are not obliged to retain.
10
Your rights as a Data Principal
The DPDP Act gives you, as a Data Principal, the right to:
access a summary of the personal data we hold about you and how we process it;
request correction, completion, updating or erasure of your personal data;
withdraw your consent at any time, as easily as you gave it;
nominate another individual to exercise your rights in the event of death or incapacity; and
raise a grievance with us and, if unresolved, complain to the Data Protection Board of India.
To exercise any of these rights, please contact our Grievance Officer below. We may need to verify your identity before acting on a request.
11
Cookies, analytics & third-party links
Our website uses cookies and similar technologies to keep the site working, understand how it is used and improve your experience. You can control cookies through your browser settings. Our site may also link to third-party websites; once you leave ncfeschools.com we are not responsible for their privacy practices, and we encourage you to read their policies.
12 · Grievance Officer & Contact
Questions or concerns? Contact us.
If you have questions about this policy, wish to exercise your rights, or want to raise a concern about how your data is handled, please contact our Grievance Officer:
Grievance Officer, NCFE Schools — VijayKiran Educational Trust
154/1, Vijay Kiran Knowledge Park, 5th Main, Malleshpalya, Bengaluru 560075
Email: reachus@ncfe.ac.in
Phone: +91 80 4718 5857
If you are not satisfied with our response, you have the right to register a complaint with the Data Protection Board of India.
13
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The latest version will always appear on this page with its effective date, and significant changes will be highlighted here.