1. Introduction

Orli International Academy is committed to protecting the privacy and security of personal data collected from learners, parents, staff, and other stakeholders. This Privacy and Data Protection Policy outlines how we collect, use, store, and safeguard personal information in compliance with applicable data protection laws and regulations.

2. Scope

This policy applies to all personal data collected, processed, and stored by Orli International Academy in digital and physical formats. It covers learners, parents, guardians, staff, visitors, and any third parties engaging with the Academy.

3. Data Collection

We collect personal data through various channels, including but not limited to:

• Enrollment and admission forms
• Online registration portals
• Communication with parents and guardians
• Employment applications and staff records
• CCTV and security systems

The types of data collected may include:

• Full name, date of birth, and contact details
• Academic records and progress reports
• Medical and health information
• Financial information related to tuition and fees
• Emergency contact details
• Images and videos for school events and security purposes

4. Purpose of Data Collection

Personal data is collected for the following purposes:

• Student admission, academic assessment, and administration
• Communication with parents and guardians
• Ensuring the safety and security of students and staff
• Compliance with legal and regulatory requirements
• Employment and payroll processing for staff
• Improving our educational services and curriculum development

5. Data Storage and Security

Orli International Academy ensures that all personal data is stored securely using appropriate technical and organizational measures. These measures include:

• Secure databases and password-protected systems
• Restricted access to personal data based on roles and responsibilities
• Data encryption and secure backups
• Regular security audits and staff training on data protection

6. Data Sharing and Disclosure

Personal data is only shared with authorized personnel and third parties under strict confidentiality agreements. Data may be disclosed to:

• Regulatory and educational authorities as required by law
• Service providers for administrative and academic support
• Emergency services in case of health or security incidents
  We do not sell or trade personal data to third parties for marketing purposes.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Once data is no longer needed, it is securely disposed of through deletion or shredding of physical documents.

8. Rights of Data Subjects

Individuals have the following rights regarding their personal data:

• Right to access and request a copy of their personal data
• Right to request corrections to inaccurate or incomplete data
• Right to request deletion of personal data, where applicable
• Right to object to data processing under certain conditions
• Right to withdraw consent for data processing where applicable

9. Policy Updates

This policy may be updated periodically to reflect changes in regulations or operational practices. Updates will be communicated through official school channels.