Privacy Policy
Last updated: 12 February 2026
This Privacy Policy explains how VBlooms School (“VBlooms”, “we”, “us”, or “our”) collects, uses, discloses, and safeguards personal data when you visit our website (the “Site”), submit applications, interact with our portals, or otherwise engage with the school. It is drafted for India and reflects the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 (with applicable rules).
1) Controller & Contact
VBlooms School
4, Husor Rd, Madivala, Bengaluru, Karnataka 562166, India
General: info@vblooms.com | Admissions: admissions@vblooms.com | Support/Grievance: support@vblooms.com
2) What Data We Collect
- Identity & contact: parent/guardian and student names, emails, phone, address, relationship.
- Admissions & academic: date of birth, previous school info, grades, entrance assessments, references.
- Documents: ID proofs (e.g., Aadhaar/Passport—where voluntarily provided), photographs, certificates.
- Health (limited): allergies, conditions or special needs required for safety/academic support (processed with appropriate consent/notice).
- Billing & payments: fee records, transaction details (card/bank details are handled by payment gateways).
- Usage & device: IP address, browser, pages viewed, timestamps, approximate location/timezone, cookies and similar technologies.
- Media: photos/videos from school activities and achievements (subject to consents/policies).
- CCTV (on campus): for safety and security, in accordance with signage and policy.
3) How We Collect Data
- Directly from you (forms, emails, phone, interviews, campus visits).
- From students and parents/guardians (including through school portals).
- From service providers (payments, email/SMS, analytics, hosting, LMS).
- Automatically via cookies/SDKs (see Cookie Policy).
- From public sources or referrals where lawful and relevant.
4) Why We Use Your Data (Purposes & Lawful Bases)
- Admissions & enrolment: to assess applications, communicate decisions (consent/performance of a contract/legitimate uses).
- Education & student support: to deliver academics, provide safety and wellbeing (legitimate uses and as required by law).
- Payments & administration: billing, fee collection, receipts (legal obligation/performance of contract).
- Safety & compliance: safeguarding, access control, regulatory reporting (legal obligation/legitimate uses).
- Communications: notices, updates, alumni relations (legitimate uses/consent where required).
- Marketing: newsletters, achievements, events—only with your consent where required; you can withdraw consent anytime.
- Website analytics & improvements: to understand usage and improve the Site (legitimate uses/consent for non-essential cookies).
5) Sharing Your Data
- Service providers / processors: hosting, payment gateways, email/SMS, analytics, IT support, LMS, admissions tools—bound by contracts and security safeguards.
- Authorities & regulators: where required by law or to protect vital interests.
- Transfers: to other institutions (e.g., school transfers) with appropriate permissions/consents.
- With your consent: where you ask us to share data with third parties.
6) International Transfers
Some providers may process data outside India. We require reasonable security safeguards and appropriate contractual protections for such transfers.
7) Data Retention
We retain personal data only as long as necessary for the purposes above and in line with legal, regulatory, and academic record-keeping requirements. Admissions records for non-admitted applicants are typically retained for a limited period (e.g., 1–2 years), while core student records may be kept longer per policy. Billing/financial records may be kept as required by tax/accounting laws.
8) Security
We use reasonable technical and organisational measures to protect personal data. No system is completely secure; we cannot guarantee absolute security.
9) Your Rights (DPDP Act)
Subject to applicable law, you may have the right to:
- Request access to and information about your personal data.
- Request correction/updating of inaccurate or incomplete data.
- Request erasure where appropriate (subject to lawful exceptions).
- Withdraw consent for processing based on consent (without affecting prior lawful processing).
- Use grievance redressal; and nominate (as applicable under DPDP Act) another person to exercise rights in case of incapacity.
To exercise rights, contact our Grievance Officer at support@vblooms.com. We may need to verify your identity/authority (e.g., parent/guardian for minors).
10) Children’s Privacy
For minors, parents/guardians should provide or manage consents and may exercise rights on the child’s behalf, consistent with law and school policy.
11) Cookies & Similar Technologies
We use essential cookies for site functionality and, with your consent where required, analytics/marketing cookies. You can manage preferences via your browser and any cookie banner we provide. See our Cookie Policy.
12) Third-Party Links
The Site may link to third-party sites/services. We are not responsible for their privacy practices. Please review their policies.
13) Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date above reflects the latest version. Significant changes will be highlighted on the Site.
14) Contact & Grievance Officer
Questions, requests, or complaints can be sent to: support@vblooms.com. We will acknowledge and address grievances within a reasonable timeframe, in line with applicable rules.
Notice: Notice: This Privacy Policy is provided for general information only and does not constitute legal advice. It should be reviewed by qualified counsel to ensure it aligns with VBlooms School’s policies and applicable law.