1. Minor Privacy & Statutory Scope
At The Crayon Box School (managed by the Crayon Box Educational Society, Burari, Delhi), we recognize that information concerning children requires the highest standard of ethical handling and statutory care.
This Privacy Policy is formulated in strict accordance with the Digital Personal Data Protection (DPDP) Act, 2023, the Information Technology Act, 2000 (and 2021 Intermediary Rules), and the statutory directives issued by the Central Board of Secondary Education (CBSE) and the Directorate of Education (DoE), Government of NCT of Delhi.
π‘οΈ Verifiable Parental Consent Mandate
As all enrolled students at Crayon Box School are minors, personal data is processed solely with the explicit, verifiable consent of a legal parent or guardian. We never undertake behavioral tracking, profiling, or targeted commercial advertising directed toward children.
2. Information We Collect
To provide academic, pastoral, health, transport, and administrative services, we collect only necessary and proportionate information:
A. Prospective Admissions Inquiries
- Parent/Guardian contact particulars (Full name, phone number, email address, residential locality in North Delhi).
- Child details (Name, date of birth, grade applying for, previous school attended).
B. Enrolled Student & Family Records
- Identity & Civil Records: Government birth certificate, Transfer Certificate (TC), passport-size photographs, and parent identity proof.
- Academic & Developmental Data: Continuous and Comprehensive Evaluation (CCE) scores, report cards, teacher anecdotal notes, and Olympiad/co-curricular participation.
- Health & Emergency Profiles: Blood group, known allergies, chronic medical conditions, emergency contact numbers, and pediatrician references for infirmary care.
- Statutory Disclosures: Category declarations (General / EWS / DG / Minority) as mandated by DoE Delhi admission guidelines.
3. School ERP & Mobile App Credentials Security
Our official school management software and the Crayon Box Parent App handle sensitive academic and fee transaction records. We protect this infrastructure through enterprise-grade controls:
- 256-Bit SSL/TLS Encryption: All data transmitted between parent devices, browsers, and school servers is encrypted end-to-end.
- Credential Confidentiality: Parents and guardians are provided unique Admission Number (Admission ID) login credentials. Passwords must never be shared with unauthorized third parties.
- Payment Gateway Compliance: Online fee payments are processed via RBI-compliant, PCI-DSS Level 1 certified payment gateways. Crayon Box School does not store credit/debit card numbers or net-banking credentials on local servers.
- Access Control: Teaching faculty only have access to the academic data of students enrolled in their assigned classes or subjects.
4. Live GPS Tracking & Campus CCTV Protocols
To ensure child safety across our 3-acre campus and bus routes, we maintain operational surveillance in compliance with Supreme Court and CBSE guidelines:
π Fleet Telematics & Live Bus Tracking
Bus location coordinates are captured in real time solely to allow parents and the transport desk to monitor transit safety and pickup/drop timings. Telematics data is automatically archived on a 90-day rolling cycle.
Campus CCTV Surveillance
- High-definition cameras operate in public spaces (campus entry gates, corridors, sports turf, science labs, and cafeteria). No surveillance cameras exist in restrooms or changing facilities.
- Footage is stored on secure local digital video recorders (NVR) with encrypted backups for 30 calendar days, after which it is automatically overwritten unless required by law enforcement.
- Access to footage is restricted to the School Safety Officer, Principal, and authorized investigating authorities.
5. Student Photography, Media & Annual Recaps
We celebrate student accomplishments, sports victories, science expos, and artistic performances on our official website, newsletters, and verified social media channels.
- Opt-In Photography Consent: Parents specify media consent during the annual admission/re-enrollment documentation process.
- Privacy Dignity Safeguards: We do not publish residential addresses, phone numbers, or academic grades alongside student photographs.
- Opt-Out Protocol: Parents may withdraw consent for their child's likeness in promotional galleries at any time by emailing
privacy@crayonboxschool.comwith their childβs full name and student ID.
6. Third-Party Sharing Rules & Non-Disclosure
Crayon Box School strictly enforces a zero-sale policy: We do not sell, rent, monetize, or trade parent or student information to commercial marketing agencies, private coaching institutes, or third-party advertisers.
Data is shared solely with:
- Regulatory & Statutory Authorities: CBSE for board registration/OASIS portal updates, and Directorate of Education Delhi as required by statutory mandate.
- Essential Service Partners: Secure school ERP vendors, SMS/WhatsApp alert dispatch gateways, and student accidental health insurance providers bound by strict Non-Disclosure Agreements (NDAs).
- Emergency Healthcare Providers: Licensed medical professionals in the event of an urgent campus or field trip medical emergency.
7. Parental Rights Under the DPDP Act 2023
As a Data Principal representing your minor child, parents and guardians hold statutory rights under Chapter III of the DPDP Act 2023:
| Parental Right | Description | Turnaround Time |
|---|---|---|
| Right to Access | Request a summary of personal student data processed by the school. | Within 7 business days |
| Right to Correction | Update outdated contact numbers, residential address, or medical history. | Within 48 hours |
| Right to Erasure | Request deletion of auxiliary data upon withdrawal/TC (excluding statutory CBSE records). | Within 15 business days |
| Grievance Redressal | File formal inquiries regarding data protection practices with our DPO. | Within 3 business days |
8. Data Protection Officer (DPO) & Redressal Desk
For questions regarding this policy, updating personal records, or submitting a formal data protection request, please contact our designated Data Protection Officer:
ποΈ Grievance Redressal Desk
Designation: Data Protection Officer & Compliance Lead
Organization: The Crayon Box School
Campus Address: 6/20 D Block, Shastri Park Extn., Burari, Delhi – 110084
Direct Helpline: +91 98111 02008
Official Privacy Email: privacy@crayonboxschool.com
