Privacy Policy

Kings Cornerstone International College (KCIC) – Privacy and Compliance Policy

Last Updated: January 2025

1. Introduction

Kings Cornerstone International College Private Limited (KCIC, we, our, or us) is committed to protecting personal and educational information and ensuring full regulatory compliance. This policy sets out how we collect, store, use, and share information for students, guardians, staff, and partners.

We primarily comply with Indian privacy laws, including the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, while also recognising and aligning with the European Union GDPR, UK Data Protection Act, and Australian Privacy Principles. This ensures that our practices meet international standards and protect student and partner data globally.

2. Scope

This policy applies to students, prospective students, and their guardians, staff and faculty, partner universities and service providers, and all digital platforms, including websites, learning platforms, email communications, and social media channels.

3. Information We Collect

  KCIC may collect information through applications, enrolments, website use, and digital interactions. Categories include:

* Personal data such as name, contact details, date of birth, nationality, and address.

* Educational records including academic transcripts, previous qualifications, enrolment data, and programme progress.

* Guardian information for students under 18.

* Usage and online data, including website and learning platform activity and interactions on social media channels.

* Marketing preferences, including consent for promotional communications via email, social media, or other digital channels.

4. Purpose of Data Collection and Use

We collect and process data to administer applications, enrolments, credit transfers, and programme progression, provide academic guidance, support, and updates, operate our websites, learning platforms, and social media channels in compliance with marketing and advertising regulations, comply with Indian, European, UK, and Australian legal obligations, facilitate career guidance, internships, and post-study work opportunities, and improve digital platforms and student experience.

5. Legal Basis for Processing Data

In India, processing is required for compliance with the IT Act, 2000 and associated rules. In the EU and UK, processing is based on consent, contractual necessity, legal obligation, or legitimate interests under GDPR and Data Protection Act. In Australia, data is processed for primary educational purposes and legitimate business purposes under the Australian Privacy Principles. All personal data collected for marketing and promotional purposes is based on explicit consent.

6. Data Sharing

KCIC may share information with partner universities for credit recognition, student transfers, and programme completion, accreditation bodies to meet academic and regulatory standards, service providers assisting with IT, academic platforms, student support, and marketing services, and legal authorities where required by law in India, Europe, the UK, or Australia. KCIC does not sell personal data. All data sharing respects Indian and international privacy regulations.

7. Marketing and Social Media Compliance

KCIC ensures that all marketing communications, including emails, newsletters, and social media posts, comply with applicable laws in India, Europe, the UK, and Australia. Students, parents, and users may opt-in or opt-out of promotional communications at any time. Social media activity and engagement data is collected and used only for legitimate marketing purposes in line with platform policies and local regulations.

8. Data Security

KCIC implements appropriate technical and organisational measures to protect personal information from unauthorised access, disclosure, alteration, or destruction. Security measures include secure storage systems and access controls, encryption of sensitive information, staff training and awareness programmes, and regular audits and monitoring of systems.

9. Data Retention

Personal information is retained only as long as necessary to fulfil the purposes described above, including statutory and regulatory obligations. Retention periods may vary depending on the type of data and applicable legal requirements.

10. Student, Guardian, and Staff Rights

Individuals have the right to access personal data, request correction or update of inaccurate or incomplete data, request deletion of personal data where permitted, object to certain processing including marketing communications, and request transfer of personal data. Requests should be sent to mailto:admission@cornerstone.edu.in.

11. Compliance with Partner Universities

KCIC ensures that all student transfers, credit recognitions, and programme pathways comply with the policies and standards of our partner universities.

Our partnership is based on transparency, integrity, and regulatory compliance.

12. Updates to this Policy

KCIC may update this policy periodically to remain compliant with changes in Indian or international law or with evolving educational and marketing practices. Updates will be communicated via our website or email notifications.

13. Contact Information

For questions regarding this Privacy and Compliance Policy or to exercise your rights, please contact admission@cornerstone.edu.in