Privacy Policy

BASU Nextgen Education Pvt. Ltd. | Effective Date: April 2026

BASU Nextgen Education Pvt. Ltd. ("BASU Education", "we", "our", "us") is committed to protecting the privacy of students, parents, and guardians who use our services, website, and mobile application. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

a. Personal Information

Student: Full name, date of birth, gender, photograph, school name, class, and academic history
Parent/Guardian: Name, relationship, contact number, and email address
Address and location details provided at enrollment

b. Financial Information

Fee structure, installment records, and payment history
Payment processing is handled securely via Razorpay. We do not store full card or bank account details on our servers.

c. Biometric Information

Fingerprint data is collected via biometric hardware (ZKTeco) solely for attendance tracking purposes
This data is stored locally on institute hardware and is not transmitted to or stored on any external or third-party server

d. Technical Information

Device identifiers and FCM tokens (for push notifications)
App usage logs, IP address, and browser/device type
Session cookies for website functionality

2. How We Use Your Information

We use collected information for the following purposes:

Processing enrollment and maintaining academic records
Communicating fee dues, reminders, and receipts via WhatsApp and SMS
Sending attendance updates and academic notifications to parents
Conducting internal assessments and generating result reports
Sharing promotional content, achievements, or institute updates (only with prior consent)
Improving our platform, app, and services
Fulfilling legal, regulatory, and tax obligations

3. Data Sharing

We do not sell, rent, or trade your personal data to any third party. We share data only with the following service providers, strictly for operational purposes:

Service	Purpose
Razorpay	Payment processing
AiSensy / WhatsApp Business API	Parent and student notifications
Fast2SMS	SMS communication
Amazon Web Services (AWS)	Secure cloud hosting (ap-south-1, India)
Firebase (Google)	Push notifications via FCM

All third-party services are bound by their own privacy policies and data processing agreements.

We may disclose information to regulatory authorities, courts, or law enforcement when required by law.

4. Data Retention

Academic and enrollment records are retained for a minimum of 5 years after the student's last active session
Financial and payment records are retained as required under GST and applicable tax laws
Biometric data is deleted within 30 days of the student's discontinuation from the institute
You may request deletion of non-mandatory data by writing to us (subject to legal retention obligations)

5. Your Rights

As a parent or guardian, you have the right to:

Request access to personal data we hold about you or your child
Request correction of any inaccurate or outdated information
Withdraw consent for promotional communication at any time, in writing
Request deletion of personal data (subject to legal retention requirements)
Raise a complaint regarding how your data is handled

To exercise any of these rights, write to us at the address below.

6. Cookies & App Permissions

Website: We use cookies for session management, authentication, and basic analytics. You may disable cookies in your browser settings, though some features may not function correctly.

Mobile App: The BASU app may request the following permissions:

Permission	Purpose
Notifications	Attendance and fee alerts
Camera / Storage	Profile photo upload and document submission
Internet	Core app functionality

All permissions are requested transparently and are not used beyond their stated purpose.

7. Data Security

Student and parent data is hosted on Amazon Web Services infrastructure in the India (ap-south-1) region. We implement access controls, encrypted data transmission (HTTPS/TLS), and regular security reviews to protect your information.

While we take all reasonable precautions, no system can guarantee absolute security. In the event of a data breach that affects your personal information, we will notify affected users promptly and take immediate corrective action.

8. Children's Privacy

Our services are designed for students between Classes 7 and 12, typically aged 12 to 18 years. All personal data for students under 18 is collected with the explicit consent of a parent or guardian at the time of enrollment. We do not knowingly collect data from individuals below this age group without parental consent.

9. Third-Party Links

Our website or app may contain links to external platforms such as YouTube or WhatsApp. BASU Education is not responsible for the privacy practices or content of any third-party platforms. We encourage you to review the privacy policies of any external services you use.

10. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Any material changes will be communicated to registered parents and guardians via WhatsApp, SMS, or email at least 7 days before the changes take effect. Continued use of our services after the effective date constitutes acceptance of the revised policy.

11. Contact Us

For any privacy-related queries, requests, or concerns:

BASU Nextgen Education Pvt. Ltd.
Noida, Uttar Pradesh, India