1. INTRODUCTION

This Privacy Policy (“Policy”) applies to personal information of children, parents, legal guardians, family members, and other individuals (collectively, “you,” “your,” “families,” or “data subjects”) who are enrolled with or interact with Krityam Montessori Preschool and Daycare, operated by Future Leaders Education and Charitable Trust (“Krityam,” “we,” “us,” or “our”) for Montessori education, daycare services, extended care, meal programs, and related educational services (collectively, “Services”).

We are committed to protecting the privacy and confidentiality of personal information entrusted to us. This Policy explains how we collect, use, store, share, and protect your personal information in accordance with applicable laws including the Information Technology Act, 2000, and its rules and amendments.

This document is an electronic record under the Information Technology Act, 2000, and does not require physical or digital signatures. By enrolling your child with Krityam or using our Services, you acknowledge that you have read, understood, and consent to this Privacy Policy.

For the purposes of this Policy, “Personal Information” means any identifiable information about children and their families, including but not limited to contact details, health information, educational records, behavioral observations, family background, photographs, videos, and any other information disclosed to us.

2. INFORMATION WE COLLECT

2.1 Child Information

We collect the following information about enrolled children:

2.1.1 Basic Information

• Full name, date of birth, gender, and age
• Home address and contact details
• Parent/guardian contact information
• Emergency contact details
• Previous educational history

2.1.2 Health and Medical Information

• Medical history and current health conditions
• Vaccination records and immunization status
• Allergies, dietary restrictions, and special needs
• Medication requirements and administration instructions
• Emergency medical contact information
• Health insurance details

2.1.3 Developmental and Educational Information

• Montessori assessments and developmental milestones
• Learning preferences and behavioral observations
• Academic progress reports and portfolio documentation
• Special educational needs or accommodations
• Individual learning plans and goal-setting records

2.1.4 Multimedia Records

• Photographs of children during educational activities
• Video recordings of classroom activities and developmental progress
• Audio recordings of language development sessions
• Artwork, project documentation, and portfolio materials

2.2 Family Information

We collect information about parents, guardians, and family members:

2.2.1 Contact and Personal Details

• Names, addresses, phone numbers, and email addresses
• Occupation, employer details, and work contact information
• Marital status and family composition
• Language preferences and cultural background

2.2.2 Financial Information

• Payment history and billing information
• Bank account details for fee processing (through secure payment gateways)
• Income verification for scholarship or financial assistance programs

2.2.3 Emergency and Authorization Information

• Authorized pickup persons and their contact details
• Emergency contacts and their relationship to the child
• Medical emergency authorization and consent forms
• Transportation and field trip authorization

2.3 Technical Information

When you use our website (krityam.com) or digital services:|

2.3.1 Website Analytics

• IP address, browser type, and device information
• Pages visited, time spent, and navigation patterns
• Geographic location and time zone
• Referrer URLs and search queries

2.3.2 Application Data

• Usage data from LilTriangle app
• Login credentials and access logs
• Communication records and message history
• App performance and error reports

2.4 Communication Records

• Email correspondence with staff and administration
• Phone call logs and voicemail messages
• Written communications and feedback forms
• Parent-teacher conference notes and records

3. HOW WE USE YOUR INFORMATION

3.1 Primary Educational Purposes

• Child Safety and Care: Ensuring the safety, health, and well-being of children in our care
• Educational Program Delivery: Providing authentic Montessori education tailored to each child’s needs
• Developmental Assessment: Monitoring progress, skill acquisition, and learning milestones
• Individual Learning Plans: Creating personalized educational experiences and accommodations
• Parent Communication: Sharing progress updates, daily reports, and educational insights

3.2 Administrative Purposes

• Identity Verification: Confirming identity of children, parents, and authorized persons
• Enrollment Management: Processing admissions, maintaining student records, and managing waitlists
• Financial Administration: Processing fee payments, managing accounts, and providing receipts
• Attendance Tracking: Recording daily attendance and managing pickup/drop-off procedures
• Emergency Response: Contacting families during emergencies and coordinating medical care

3.3 Communication and Engagement

• Daily Updates: Sharing daily activities, meals, and developmental observations
• Event Coordination: Organizing parent meetings, celebrations, and special events
• Educational Resources: Providing home extension activities and parenting support
• Community Building: Facilitating connections among Krityam families

3.4 Quality Improvement

• Program Enhancement: Analyzing feedback to improve educational programs and services
• Staff Training: Using observations for professional development and training purposes
• Facility Management: Optimizing classroom environments and resource allocation
• Technology Integration: Improving digital platforms and communication tools

3.5 Marketing and Promotional Activities

• Success Stories: Showcasing educational achievements and program benefits (with consent)
• Website Content: Creating authentic content about our Montessori approach and community
• Social Media: Sharing educational insights and school community highlights (with consent)
• Testimonials: Featuring family experiences and recommendations (with explicit consent)

4. INFORMATION SHARING AND DISCLOSURE

4.1 Internal Sharing

Personal information is shared internally on a “need-to-know” basis with:

4.1.1 Educational Staff

• Teachers and Assistants: For educational planning and daily care requirements
• Principal and Administration: For academic oversight and administrative coordination
• Support Staff: For meal preparation, transportation, and extended care services

4.2 Third-Party Service Providers

We share limited information with trusted service providers who assist in delivering our services:

4.2.1 Technology Partners

• LilTriangle App: Secure platform for parent communication and child progress tracking
• Google Services: Cloud storage (Google Drive) and analytics (Google Analytics)
• Website Hosting: Secure hosting and maintenance of krityam.com

4.2.2 Payment Processing

• Razorpay and Similar Gateways: Secure processing of fee payments and financial transactions
• Banking Partners: For direct bank transfers and payment reconciliation

4.2.3 Security and Monitoring

• Hikvision CCTV Systems: Video surveillance for campus security and child safety
• Security Service Providers: For access control and emergency response

4.2.4 Marketing and Communication

• Marketing Team: Content creation for website, social media, and promotional materials
• Social Media Platforms: Facebook, Instagram, YouTube, and Google for educational content sharing

4.3 Medical and Emergency Disclosure

• Healthcare Providers: Sharing medical information during emergencies or health incidents
• Emergency Services: Providing necessary information to paramedics, hospitals, or emergency responders
• Medical Consultants: For specialized care recommendations or developmental assessments

4.4 Legal and Regulatory Compliance

• Government Authorities: When required by law, court order, or regulatory investigation
• Child Protection Services: If mandated reporting requirements are triggered
• Legal Counsel: For legal advice and compliance verification
• Auditors: For financial and operational auditing purposes

4.5 Business Transfers

In the event of merger, acquisition, or sale of Krityam, personal information may be transferred to the acquiring entity, subject to the same privacy protection standards.

5. DATA SECURITY MEASURES

5.1 Technical Safeguards

• Encryption: SSL/TLS encryption for all data transmission and storage
• Access Controls: Role-based access restrictions and authentication protocols
• Secure Storage: Encrypted cloud storage with regular security updates
• Network Security: Firewalls, intrusion detection, and regular security monitoring
• Backup Systems: Secure, encrypted backup systems with disaster recovery protocols

5.2 Physical Safeguards

• Facility Security: 24/7 security monitoring and controlled access to premises
• CCTV Surveillance: Hikvision security cameras with restricted access to recordings
• Document Security: Locked filing systems for physical records and documents
• Device Security: Password-protected devices with automatic screen locks

5.3 Administrative Safeguards

• Staff Training: Regular privacy and security training for all employees
• Privacy Policies: Comprehensive staff privacy and confidentiality agreements
• Incident Response: Documented procedures for security breach notification and response
• Regular Audits: Periodic security assessments and vulnerability testing

5.4 Third-Party Security

• Vendor Agreements: Contractual privacy and security requirements for all service providers
• Compliance Verification: Regular assessment of third-party security practices
• Data Processing Agreements: Formal agreements governing third-party data handling

6. DATA RETENTION AND DELETION

6.1 Retention Periods

• Student Records: Retained for 3 months after child’s departure from Krityam
• Financial Records: Retained as required by applicable accounting and tax regulations
• Medical Information: Deleted within 3 months unless required for ongoing care
• Multimedia Content: Deleted within 3 months unless explicit consent given for longer retention

6.2 Secure Deletion

• Digital Records: Secure deletion using industry-standard data wiping techniques
• Physical Documents: Secure shredding and disposal through certified services
• Cloud Storage: Complete removal from all backup systems and archives
• Third-Party Data: Verification of deletion from all service provider systems

6.3 Retention Extensions

In certain circumstances, data may be retained beyond standard periods:

• Legal Requirements: When retention is mandated by law or legal proceedings
• Medical Needs: For children with ongoing medical conditions requiring continuity of care
• Consent-Based: With explicit parental consent for specific purposes (e.g., testimonials, case studies)

7. YOUR RIGHTS AND CHOICES

7.1 Access Rights

• Information Access: Request copies of all personal information we hold about your child and family
• Data Portability: Obtain your information in a commonly used, machine-readable format
• Third-Party Sharing: Request details about all third parties with whom your information has been shared

7.2 Correction and Update Rights

• Data Accuracy: Request correction of inaccurate or incomplete information
• Profile Updates: Update contact information, emergency contacts, and preferences through LilTriangle app
• Medical Updates: Provide updated health information and medical requirements

7.3 Consent Management

• Photo/Video Consent: Opt-in or opt-out of photography and videography for various purposes
• Marketing Communications: Control participation in promotional materials and testimonials
• Communication Preferences: Choose methods and frequency of communication from Krityam

7.4 Deletion Rights

• Data Removal: Request deletion of personal information (subject to legal retention requirements)
• Account Closure: Complete removal of digital accounts and associated data
• Multimedia Removal: Request removal of photos and videos from all platforms

7.5 Exercising Your Rights

To exercise any of these rights:

• Contact Administration: Submit written requests to our Administrative Specialist
• Online Portal: Use the LilTriangle app for routine updates and preferences
• Email Requests: Send formal requests to privacy@krityam.com
• In-Person: Visit our office during business hours for immediate assistance

8. CHILDREN’S PRIVACY PROTECTION

8.1 Age-Appropriate Practices

• Developmental Considerations: Information collection and use practices tailored to children aged 6 months to 6 years
• Parental Consent: All information collection and sharing requires explicit parental consent
• Child Safety First: All practices prioritize child safety and well-being over other considerations

8.2 Special Protections

• Limited Collection: We collect only information necessary for educational and care purposes
• Secure Handling: Enhanced security measures for all child-related information
• Staff Training: Specialized training on child privacy and protection for all staff members
• Regular Review: Ongoing assessment of practices to ensure age-appropriate privacy protection

8.3 Multimedia Content Guidelines

• Educational Purpose: Photos and videos primarily used for developmental documentation and educational assessment
• Consent Required: Explicit parental consent obtained before any multimedia content creation
• Limited Sharing: Strict controls on sharing of child photos and videos
• Child Dignity: All multimedia content maintains respect for child dignity and privacy

9. THIRD-PARTY SERVICES AND LINKS

9.1 Third-Party Applications

Our services integrate with several third-party platforms:

9.1.1 LilTriangle App

• Purpose: Parent communication, progress tracking, and administrative coordination
• Data Shared: Child progress, photos, daily reports, and communication messages
• Privacy Practices: Governed by LilTriangle’s privacy policy in addition to this Policy

9.1.2 Google Services

• Google Drive: Secure cloud storage for educational records and administrative documents
• Google Analytics: Website usage analysis for service improvement
• YouTube: Educational content sharing (with appropriate privacy settings)

9.1.3 Social Media Platforms

• Facebook, Instagram: Sharing educational content and community highlights (with consent)
• Privacy Controls: All content shared with appropriate privacy settings and consent

9.2 Payment Gateways

• Razorpay and Similar Services: Secure payment processing for fees and services
• Data Protection: Payment information protected by PCI DSS compliance standards
• Limited Access: Krityam does not store complete payment card information

9.3 Third-Party Links

Our website may contain links to third-party websites or services. This Privacy Policy does not apply to those external sites. We encourage parents to review the privacy policies of any third-party sites they visit.

10. INTERNATIONAL DATA TRANSFERS

10.1 Data Location

• Primary Storage: Data primarily stored in secure facilities within India
• Cloud Services: Some data may be stored in international cloud facilities operated by our service providers
• Legal Compliance: All international transfers comply with applicable data protection laws

10.2 Transfer Safeguards

• Contractual Protection: Service provider agreements include data protection clauses
• Security Standards: International storage meets or exceeds Indian security requirements
• Access Controls: Strict limitations on international access to personal information

11. MARKETING AND PROMOTIONAL USE

11.1 Consent-Based Marketing

• Explicit Consent: All marketing use of personal information requires explicit parental consent
• Opt-In Process: Clear, separate consent forms for different types of promotional use
• Withdrawal Rights: Easy process to withdraw consent for marketing use at any time

11.2 Types of Marketing Use

• Website Content: Success stories and educational examples (with consent)
• Social Media: Classroom activities and learning highlights (with consent)
• Promotional Materials: Brochures, testimonials, and marketing content (with consent)
• Community Outreach: Sharing Krityam’s educational approach and philosophy

11.3 Marketing Data Protection

• Limited Information: Only necessary information used for marketing purposes
• Anonymization: Personal identifiers removed when possible
• Time Limits: Marketing consent valid for specific time periods with renewal options
• Professional Standards: All marketing content maintains professional and educational focus

12. DATA BREACH NOTIFICATION

12.1 Incident Response

In the event of a data security incident:

• Immediate Assessment: Rapid evaluation of the scope and impact of any security breach
• Containment: Immediate steps to prevent further unauthorized access or disclosure
• Investigation: Thorough investigation to determine cause and extent of the incident
• Remediation: Implementation of corrective measures to prevent future incidents

12.2 Notification Procedures

• Timeline: Affected families notified within 72 hours of incident discovery
• Communication Methods: Notification via email, phone, and written notice as appropriate
• Information Provided: Details about the incident, information affected, and steps being taken
• Support Services: Assistance and support for affected families

12.3 Regulatory Compliance

• Authority Notification: Reporting to relevant authorities as required by law
• Cooperation: Full cooperation with investigations and regulatory requirements
• Documentation: Comprehensive documentation of incident and response measures

13. COMPLIANCE AND LEGAL FRAMEWORK

13.1 Applicable Laws

This Privacy Policy complies with:

• Information Technology Act, 2000 and its rules and amendments
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Indian Contract Act, 1872
• Right to Information Act, 2005 (where applicable)
• Other applicable Indian privacy and data protection laws

13.2 Industry Standards

• Educational Privacy Best Practices: Following recognized standards for educational institution privacy
• Child Protection Guidelines: Adherence to child safety and protection standards
• International Standards: Alignment with global privacy protection principles where applicable

13.3 Regular Compliance Review

• Annual Assessment: Yearly review of privacy practices and policy compliance
• Legal Updates: Regular monitoring of changes in privacy laws and regulations
• Best Practice Integration: Continuous improvement based on evolving privacy standards

14. CONTACT INFORMATION AND COMPLAINTS

14.1 Privacy Officer

• Designated Privacy Officer: Vidya (Chief Operations & HR Manager)
• Email: privacy@krityam.com
• Phone: +91 90907 31000
• Address: F52, Manyata Residency, Manyata Tech Park, Nagavara, Bengaluru, Karnataka 560045

14.2 General Inquiries

For general privacy questions or concerns:

• Administrative Specialist: Nalini
• Principal: Debashree
• Office Hours: Monday to Friday, 8:00 AM to 6:00 PM

14.3 Complaint Process

If you have concerns about our privacy practices:

1. Initial Contact: Contact our Privacy Officer with details of your concern
2. Investigation: We will investigate your complaint within 10 business days
3. Response: Formal response provided within 15 business days
4. Escalation: If unsatisfied, you may escalate to senior management
5. External Recourse: Right to file complaints with relevant authorities

15. POLICY UPDATES AND CHANGES

15.1 Policy Review

• Regular Updates: This Policy is reviewed and updated annually or as needed
• Change Triggers: Updates made in response to legal changes, service modifications, or feedback
• Version Control: All policy versions maintained for reference

15.2 Notification of Changes

• Advance Notice: Material changes communicated 30 days before implementation
• Communication Methods: Email notification, website posting, and app notifications
• Consent for Changes: Significant changes may require renewed consent from families

15.3 Continued Enrollment

Continued enrollment in Krityam services after policy updates constitutes acceptance of the revised Privacy Policy, unless you explicitly withdraw consent or terminate services.

16. SPECIAL CIRCUMSTANCES

16.1 Emergency Situations

During emergencies affecting child safety or health:

• Information Sharing: Necessary information may be shared with emergency responders
• Parental Notification: Parents contacted immediately when possible
• Documentation: All emergency disclosures documented and reported to parents

16.2 Legal Proceedings

If required by legal proceedings:

• Court Orders: Compliance with valid court orders for information disclosure
• Legal Defense: Use of information for legal defense when necessary
• Minimal Disclosure: Only information specifically required by legal process disclosed

16.3 Child Protection

In cases involving child safety concerns:

• Mandatory Reporting: Compliance with mandatory reporting requirements
• Authority Cooperation: Full cooperation with child protection investigations
• Confidentiality Balance: Balancing confidentiality with child protection obligations

17. CONSENT AND ACKNOWLEDGMENT

17.1 Enrollment Consent

By enrolling your child with Krityam Montessori, you acknowledge and consent to:

• Data Collection: Collection of personal information as described in this Policy
• Data Use: Use of information for educational, administrative, and safety purposes
• Data Sharing: Sharing with authorized staff and approved third-party service providers
• Security Measures: Our security practices and procedures for protecting your information

17.2 Specific Consents

Additional consent obtained for:

• Photography and Videography: Creation and use of multimedia content
• Marketing Materials: Use of information and images for promotional purposes
• Third-Party Applications: Data sharing with specific service providers
• Communication Preferences: Methods and frequency of communication

17.3 Consent Withdrawal

You may withdraw consent at any time by:

• Written Notice: Formal written request to withdraw specific consents
• Partial Withdrawal: Withdrawing consent for specific uses while maintaining others
• Service Impact: Understanding that consent withdrawal may affect service delivery

18. EFFECTIVE DATE AND GOVERNING LAW

18.1 Effective Date

This Privacy Policy is effective from [Date] and applies to all personal information collected from that date forward.

18.2 Governing Law

This Policy is governed by Indian law, and any disputes will be subject to the jurisdiction of courts in Bengaluru, Karnataka.

18.3 Severability

If any provision of this Policy is found to be unenforceable, the remaining provisions will continue in full force and effect.

ACKNOWLEDGMENT

I/We acknowledge that I/we have read, understood, and agree to the terms of this Privacy Policy. I/We understand our rights regarding personal information and how to exercise those rights.

Parent/Guardian Signature: ________________________

Date: ________________________

Child’s Name: ________________________

Relationship to Child: ________________________

Document Prepared By: Future Leaders Education and Charitable Trust

Legal Review Date: [Date]

Next Review Date: [Date + 1 Year]

Document Version: 1.0

This Privacy Policy is proprietary to Krityam Montessori Preschool and Daycare and is intended for use by enrolled families and service providers only. Unauthorized reproduction or distribution is prohibited.