MCS Alathur, Kerala, India

Privacy Policy

School Management System — Student, Parent & Staff Data Protection Policy

Effective Date: June 2025 Last Updated: 22 July 2026 Version 2.2
← Back

Table of Contents

  1. Introduction
  2. Information We Collect
  3. How We Use Your Information
  4. Who Has Access to Your Data
  5. Data Security
  6. Data Retention
  7. Your Rights
  8. Parent Portal
  9. Photos & Media
  10. Third-Party Services
  11. Children's Privacy
  12. Changes to This Policy
  13. Contact Us

1. Introduction

MCS Alathur ("the School", "we", "us", or "our") operates a School Management System to manage academic, administrative, and communication activities between the school, students, parents, and staff.

This Privacy Policy explains how we collect, use, store, and protect personal information entered into this system. By using this system — whether as a staff member, teacher, parent, or administrator — you agree to the practices described in this policy.

🏫 Our Commitment: MCS Alathur is committed to protecting the privacy and safety of every student, parent, and staff member. All data collected is used solely for educational and administrative purposes and is never sold or shared with unauthorized parties.

2. Information We Collect

2.1 Student Information

CategoryData Collected
IdentityFull name, date of birth, gender, admission number, EMIS/UDISE number, blood group, category, religion, nationality
ContactHome address (house name, place, post office, district, state, PIN code)
DocumentsAadhaar number, passport number (optional)
AcademicClass, section, roll number, stream, joining date, previous school details, exam marks, attendance records
HealthBlood group, height, weight, allergies, chronic conditions, special needs, emergency contact details, medical notes
TransportMode of transport, route/stop details
ActivitiesCo-curricular activities, competition achievements, club memberships
PhotoStudent photograph (optional, max 1MB)

2.2 Parent / Guardian Information

CategoryData Collected
FatherName, mobile, WhatsApp number, email, occupation, company, annual income (optional)
MotherName, mobile, WhatsApp number, email, occupation, company
GuardianName, relationship, mobile (optional)
LoginEmail address and encrypted password for parent portal access
PreferencesCommunication preferences (SMS, WhatsApp, Email)

2.3 Staff Information

For teachers and staff, we collect: full name, employee number, email address, phone number, gender, date of birth, qualification, joining date, assigned subjects and classes, salary (for payroll), and photograph.

2.4 Usage Data

The system records login sessions, attendance marking timestamps, and fee collection records for audit and accountability purposes.

3. How We Use Your Information

PurposeData Used
Student admission and enrolment managementStudent identity and academic data
Daily attendance trackingStudent identity, class, date
Fee collection and receiptsStudent identity, fee records
Examination management and mark entryStudent identity, subject marks
Homework assignment and trackingClass, subject, due dates
Parent communication via portalParent contact, student academic data
Hall ticket generation and approvalStudent identity, exam details
Student profile and progress reportsAll academic and activity data
Government reporting (EMIS/UDISE)Student identity and academic data
Emergency contact and health managementHealth and emergency contact data
✅ We do NOT use your data for:
  • Advertising or marketing to third parties
  • Selling or renting data to any organization
  • Profiling for non-educational purposes
  • Any purpose beyond school administration

4. Who Has Access to Your Data

RoleWhat They Can See
Principal / Super AdminAll data across all modules
School AdminAll student, class, fee, attendance, and exam data
TeacherOnly their assigned classes — attendance, homework, exam marks, notices
AccountantStudent names and fee records only
ParentOnly their own child's data — attendance, fees, homework, exam results, notices
⚠️ Access Control: All staff accounts are role-based. Teachers can only access their assigned classes. No staff member can view data outside their designated role. Parent accounts are strictly limited to their own children's data.

5. Data Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse:

🔐

Encrypted Passwords

All passwords are stored using bcrypt hashing — never in plain text.

🛡️

Role-Based Access

Each user can only access data relevant to their role. No cross-role visibility.

⏱️

Session Timeout

Sessions automatically expire after 30 minutes of inactivity.

💾

Regular Backups

Database is backed up regularly. Backups are stored securely on the server.

🔒

HTTPS

All data transmitted between your browser and the server is encrypted via SSL/HTTPS.

🏗️

Secure Server

Hosted on a dedicated server with restricted access. Installer and debug files deleted after setup.

6. Data Retention

Data TypeRetention Period
Student academic recordsRetained for the duration of enrolment + 5 years after leaving
Attendance recordsRetained for the current academic year + 3 years
Fee records and receiptsRetained for 7 years (financial compliance)
Exam marksRetained permanently for academic history
Staff recordsRetained for duration of employment + 5 years
Parent portal loginDeleted when student leaves the school
PhotosRetained while the student is enrolled. Deleted on request after leaving.

7. Your Rights

As a parent, guardian, or staff member, you have the following rights regarding your personal data:

👁️

Right to Access

Request a copy of the personal data we hold about you or your child.

✏️

Right to Correct

Request correction of inaccurate or incomplete information.

🗑️

Right to Delete

Request deletion of data when it is no longer needed, subject to legal obligations.

📤

Right to Portability

Request your data in a readable format for transfer to another institution.

🚫

Right to Object

Object to certain processing of your data where we rely on legitimate interest.

📞

How to Exercise

Contact the school office or Principal in writing. We will respond within 15 working days.

8. Parent Portal

The Parent Portal (we.mcsalathur.com/parent-login.php) allows parents and guardians to view their child's academic information in real time.

What parents can see:

🔑 Account Security: Parent accounts are protected by email and password. Parents are responsible for keeping their login credentials confidential. If you believe your account has been compromised, contact the school office immediately to reset your password.

Multiple children:

If you have more than one child enrolled at MCS Alathur, a single parent account (email) can be linked to all children. You can switch between children using the child switcher on the portal.

9. Photos & Media

Student and teacher photographs uploaded to this system are subject to the following:

10. Third-Party Services

This system uses the following third-party resources. No personal student or parent data is shared with these services:

ServicePurposeData Shared
Bootstrap (CDN)User interface styling frameworkNone
Bootstrap Icons (CDN)Interface iconsNone
Chart.js (CDN)Dashboard chartsNone
Google Fonts (CDN)TypographyNone (IP address only per Google's policy)
Hetzner (Server Host)Server hosting in Germany/FinlandEncrypted data storage only
⚠️ SMS / WhatsApp Notifications: If the school enables SMS or WhatsApp notifications in the future, parent phone numbers may be transmitted to the relevant messaging service provider (e.g. Twilio, MSG91). This will be disclosed separately with an opt-in option.

11. Children's Privacy

MCS Alathur serves students including children under the age of 18. We take special care to protect the privacy of minors:

12. Changes to This Policy

MCS Alathur reserves the right to update this Privacy Policy from time to time to reflect changes in the system, legal requirements, or our data practices.

When we make material changes, we will:

Continued use of the system after changes constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related concerns, requests to access or delete your data, or questions about this policy, please contact:

🏫 Privacy Officer — MCS Alathur

Reach out to the school office or Principal directly. We are committed to responding to all privacy requests within 15 working days.

School
MCS Alathur
Location
Alathur, Kerala, India
Contact
School Office / Principal
System URL
we.mcsalathur.com