Privacy Policy
How Dunes Academy collects, uses, and safeguards your personal information — in line with Indian law.
1Introduction
Dunes Academy ("we," "our," or "us") is a CBSE-affiliated co-educational school located at Indraprastha Nagar, Bhojasar Road, Tehsil Aau, District Phalodi, Rajasthan – 342311. We are committed to protecting the privacy of parents, guardians, students, and visitors who interact with our website at dunesacademy.com.
This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the rights you hold under applicable Indian law — including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act).
By using our website or submitting any enquiry or application form, you agree to the practices described in this policy. If you do not agree, please do not use our website.
2Information We Collect
a) Enquiry & Application Forms
When you complete a contact, admission enquiry, or employment application form on our website, we collect:
- Full name
- Email address
- Phone number
- Child's name, class applied for, and date of birth (admission forms)
- Any message or additional details you voluntarily provide
b) Payment Data
When you pay school fees through our website, payment processing is handled entirely by Razorpay. We do not collect, store, or process card numbers, bank account numbers, UPI IDs, or any other sensitive payment credentials. All payment data is governed by Razorpay's privacy policy and their PCI-DSS compliant infrastructure.
c) Cookies & Analytics
We use Google Analytics to understand how visitors use our website. This tool automatically collects:
- Pages visited and time spent on each page
- Browser type, device type, and operating system
- General geographic location (city or region level — not precise)
- Referring website or traffic source
This data is aggregated and does not personally identify you unless combined with information submitted directly through our forms.
d) Communications
If you contact us via WhatsApp or SMS, we may retain the content of those communications to provide assistance and maintain records of school-related correspondence.
3How We Use Your Information
We use the personal information we collect only for the purposes listed below. We do not use your data for automated decision-making, profiling, or targeted advertising.
| Purpose | Data Used | Legal Basis (DPDP Act) |
|---|---|---|
| Responding to admission or general enquiries | Name, email, phone | Consent |
| Processing school fee payments | Transaction data via Razorpay | Contractual necessity |
| Sending school updates, reminders, and notices | Phone number (WhatsApp / SMS) | Consent / Legitimate interest |
| Processing employment applications | Name, email, phone, resume | Consent |
| Improving our website and user experience | Aggregated analytics data | Legitimate interest |
| Complying with legal and regulatory obligations | As required by law | Legal obligation |
4Third-Party Service Providers
We work with the following trusted third-party providers who may process your data on our behalf. Each provider is bound by their own privacy standards and applicable law.
Payment gateway for fee collection. Your payment credentials are handled solely by Razorpay under their PCI-DSS compliant infrastructure. We do not store card or banking details.
View Razorpay Privacy Policy →Used to send school updates, reminders, and admission communications to parents and guardians who have shared their phone number with us.
We use a registered bulk SMS service to send transactional and informational messages. Your phone number is shared with this provider solely for message delivery.
Used to analyse website traffic patterns. Google may process usage data outside India. You may opt out using Google's browser add-on.
Google Analytics Opt-Out →We do not sell, rent, or trade your personal data to any third party for marketing, advertising, or commercial purposes — ever.
5Data Retention
We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law:
- Enquiry form submissions: Up to 2 years, or until the enquiry purpose is fulfilled
- Enrolled student records: For the duration of enrolment plus 3 years thereafter
- Payment and financial records: As required under applicable financial and tax laws (typically 7 years)
- Employment application data: Up to 1 year if the application is unsuccessful; longer if employment is offered
- Google Analytics data: As per Google's retention settings (default: 26 months)
Once the retention period expires, data is securely deleted or anonymised.
6Cookies
Our website uses cookies — small text files stored on your device — to improve your browsing experience and enable analytics. We use two types of cookies:
You can control or disable cookies through your browser settings at any time. Note that disabling cookies may affect some website functionality. For full details, please read our Cookie Policy.
7Children's Privacy
Dunes Academy serves students from Nursery to Class XII. Our website and its forms are intended for use by parents, guardians, and adults only. We do not knowingly collect personal data directly from minor students.
When parents submit an admission enquiry on behalf of their child, only the parent's or guardian's contact details are required for follow-up communication. The child's details (name, date of birth, class) are collected solely to process the admission enquiry.
If you believe that a minor has submitted personal data to our website without parental consent, please contact us immediately at info@dunesacademy.com and we will promptly delete that information.
8Your Rights Under the DPDP Act, 2023
As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights with respect to the personal data we hold about you:
- Right to Access: Request a summary of the personal data we hold about you and the purposes for which it is processed.
- Right to Correction: Request correction of inaccurate, incomplete, or outdated personal information.
- Right to Erasure: Request deletion of your personal data where it is no longer necessary for the original purpose, subject to applicable legal obligations.
- Right to Withdraw Consent: Withdraw consent for data processing at any time. This does not affect the lawfulness of processing based on consent before withdrawal.
- Right to Grievance Redressal: Raise a complaint or grievance with us regarding the handling of your personal data. We will respond within a reasonable timeframe.
- Right to Nominate: Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
To exercise any of these rights, please contact us using the details in Section 11 below. We will respond within 30 days of receiving your request.
9Data Security
We implement reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, alteration, or misuse. These include:
- HTTPS encryption for all data transmitted through our website
- Secure payment processing via Razorpay's encrypted infrastructure
- Access controls limiting who within our staff can view personal data
- Regular review of our data handling practices
While we take data security seriously, no internet transmission or electronic storage method is 100% secure. We cannot guarantee absolute security of data transmitted through our website.
10Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or applicable law. When we make significant changes, we will revise the "Last Updated" date at the top of this page.
We encourage you to review this page from time to time. Continued use of our website after any changes constitutes your acceptance of the updated policy.
11Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please reach out to us through the appropriate channel below.