School Management System — Student, Parent & Staff Data Protection Policy
MCS Alathur ("the School", "we", "us", or "our") operates a School Management System to manage academic, administrative, and communication activities between the school, students, parents, and staff.
This Privacy Policy explains how we collect, use, store, and protect personal information entered into this system. By using this system — whether as a staff member, teacher, parent, or administrator — you agree to the practices described in this policy.
| Category | Data Collected |
|---|---|
| Identity | Full name, date of birth, gender, admission number, EMIS/UDISE number, blood group, category, religion, nationality |
| Contact | Home address (house name, place, post office, district, state, PIN code) |
| Documents | Aadhaar number, passport number (optional) |
| Academic | Class, section, roll number, stream, joining date, previous school details, exam marks, attendance records |
| Health | Blood group, height, weight, allergies, chronic conditions, special needs, emergency contact details, medical notes |
| Transport | Mode of transport, route/stop details |
| Activities | Co-curricular activities, competition achievements, club memberships |
| Photo | Student photograph (optional, max 1MB) |
| Category | Data Collected |
|---|---|
| Father | Name, mobile, WhatsApp number, email, occupation, company, annual income (optional) |
| Mother | Name, mobile, WhatsApp number, email, occupation, company |
| Guardian | Name, relationship, mobile (optional) |
| Login | Email address and encrypted password for parent portal access |
| Preferences | Communication preferences (SMS, WhatsApp, Email) |
For teachers and staff, we collect: full name, employee number, email address, phone number, gender, date of birth, qualification, joining date, assigned subjects and classes, salary (for payroll), and photograph.
The system records login sessions, attendance marking timestamps, and fee collection records for audit and accountability purposes.
| Purpose | Data Used |
|---|---|
| Student admission and enrolment management | Student identity and academic data |
| Daily attendance tracking | Student identity, class, date |
| Fee collection and receipts | Student identity, fee records |
| Examination management and mark entry | Student identity, subject marks |
| Homework assignment and tracking | Class, subject, due dates |
| Parent communication via portal | Parent contact, student academic data |
| Hall ticket generation and approval | Student identity, exam details |
| Student profile and progress reports | All academic and activity data |
| Government reporting (EMIS/UDISE) | Student identity and academic data |
| Emergency contact and health management | Health and emergency contact data |
| Role | What They Can See |
|---|---|
| Principal / Super Admin | All data across all modules |
| School Admin | All student, class, fee, attendance, and exam data |
| Teacher | Only their assigned classes — attendance, homework, exam marks, notices |
| Accountant | Student names and fee records only |
| Parent | Only their own child's data — attendance, fees, homework, exam results, notices |
We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse:
All passwords are stored using bcrypt hashing — never in plain text.
Each user can only access data relevant to their role. No cross-role visibility.
Sessions automatically expire after 30 minutes of inactivity.
Database is backed up regularly. Backups are stored securely on the server.
All data transmitted between your browser and the server is encrypted via SSL/HTTPS.
Hosted on a dedicated server with restricted access. Installer and debug files deleted after setup.
| Data Type | Retention Period |
|---|---|
| Student academic records | Retained for the duration of enrolment + 5 years after leaving |
| Attendance records | Retained for the current academic year + 3 years |
| Fee records and receipts | Retained for 7 years (financial compliance) |
| Exam marks | Retained permanently for academic history |
| Staff records | Retained for duration of employment + 5 years |
| Parent portal login | Deleted when student leaves the school |
| Photos | Retained while the student is enrolled. Deleted on request after leaving. |
As a parent, guardian, or staff member, you have the following rights regarding your personal data:
Request a copy of the personal data we hold about you or your child.
Request correction of inaccurate or incomplete information.
Request deletion of data when it is no longer needed, subject to legal obligations.
Request your data in a readable format for transfer to another institution.
Object to certain processing of your data where we rely on legitimate interest.
Contact the school office or Principal in writing. We will respond within 15 working days.
The Parent Portal (we.mcsalathur.com/parent-login.php) allows parents and guardians to view their child's academic information in real time.
If you have more than one child enrolled at MCS Alathur, a single parent account (email) can be linked to all children. You can switch between children using the child switcher on the portal.
Student and teacher photographs uploaded to this system are subject to the following:
This system uses the following third-party resources. No personal student or parent data is shared with these services:
| Service | Purpose | Data Shared |
|---|---|---|
| Bootstrap (CDN) | User interface styling framework | None |
| Bootstrap Icons (CDN) | Interface icons | None |
| Chart.js (CDN) | Dashboard charts | None |
| Google Fonts (CDN) | Typography | None (IP address only per Google's policy) |
| Hetzner (Server Host) | Server hosting in Germany/Finland | Encrypted data storage only |
MCS Alathur serves students including children under the age of 18. We take special care to protect the privacy of minors:
MCS Alathur reserves the right to update this Privacy Policy from time to time to reflect changes in the system, legal requirements, or our data practices.
When we make material changes, we will:
Continued use of the system after changes constitutes acceptance of the updated policy.
For any privacy-related concerns, requests to access or delete your data, or questions about this policy, please contact:
Reach out to the school office or Principal directly. We are committed to responding to all privacy requests within 15 working days.