Privacy Policy

Last updated: June 2026

Bishop Cotton Boys' School ("the School", "we", "us") operates this fee payment portal ("the Portal") to enable parents and guardians to view and pay school fees securely. This Privacy Policy explains what personal data we collect, why we collect it, how we protect it, and your rights under the Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Data We Collect

Data	Why we collect it
Student name, ID, class, category	Identify the student and determine the correct fee structure
Parent / guardian name and mobile number	Account authentication and fee-related communications
Parent email address	Send receipts and fee notices
Fee payment records and receipts	Maintain financial records required by law
IP address (login events only)	Security — detect unauthorised account access
Browser session data (cookies)	Keep you logged in during your session

We do not collect payment card details. All card transactions are processed directly by PayU (our payment gateway) and are governed by their privacy policy. We only receive a payment confirmation reference.

2. How We Use Your Data

• Displaying fee demands, challans, and receipts to the parent/guardian of the relevant student.
• Sending email confirmations of payments and fee notices via our email service (Mandrill / Mailchimp).
• Maintaining audit records of approvals and payments for school accounts and regulatory compliance.
• Detecting and preventing unauthorised access to accounts (IP logging on login).

We do not use your data for marketing, profiling, or any purpose unrelated to fee management.

3. Data Sharing

• PayU Payments Private Limited — processes online fee payments. Your card details go directly to PayU and are not seen or stored by the School or this Portal.
• Mandrill / Mailchimp — used to deliver email receipts and notices to your registered email address.
• School staff — authorised School Admin and Fee Admin staff can view your student's fee records in the staff dashboard.
• We do not sell, rent, or share your data with any third party for commercial purposes.

4. Data Retention

• Fee and payment records are retained for a minimum of 7 years as required for financial compliance.
• Login IP logs are retained for 12 months and then deleted.
• Session cookies expire when you close your browser or log out.

5. Your Rights (DPDP Act 2023)

As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the right to:

• Access — request a summary of personal data we hold about you.
• Correction — request correction of inaccurate data (e.g., wrong email address).
• Grievance redressal — raise a complaint with the School's Data Protection Officer.
• Nomination — nominate a person to exercise your rights on your behalf.

To exercise these rights, email support@bishopcottonschool.org with the subject line "Data Privacy Request".

6. Security

The Portal is served over HTTPS. Passwords are stored using strong one-way hashing (bcrypt). Access to fee data is restricted to authenticated users and authorised staff. We regularly review our security practices.

7. Cookies

We use a single session cookie to keep you logged in. No third-party tracking or advertising cookies are used on this Portal.

8. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of the Portal after a change constitutes acceptance of the updated policy.

9. Contact

Bishop Cotton Boys' School
St. Mark's Road, Bengaluru – 560 001, Karnataka, India
Email: support@bishopcottonschool.org