Privacy policy

This policy explains what school@web collects, why, how long we keep it, and what you can ask us to do with it. It applies to this website and to every school website we host.

Who we are

school@webbuilds and hosts websites for schools and colleges in Nepal. For the data a school publishes on its own website, the school is the owner of that data and we process it on the school’s behalf. Contact us at [email protected] or +977 986-6011660.

What we collect

From school staff who sign in. Name and email address from your Google account, used only to create and secure your account. We never receive your Google password.

From enquiries.What you send us — your school’s name and your contact details — so we can reply.

Content the school publishes.Text, photos, notices and events uploaded by school staff. This is the school’s own material and is public by design.

Student and staff data for birthday posts. If a school uses the birthday feature, it uploads names and dates of birth. See the section below, which is the part of this policy that matters most.

Children’s data

The birthday feature means we store the names and dates of birth of children, and publish their names in scheduled social media posts. We treat this as the most sensitive data we hold.

• We store only what the feature needs — a name, a date of birth, and the school it belongs to. Not addresses, marks, attendance or medical information.
• The school is responsible for consent.By uploading student data, a school confirms it has the right to share it with us and to publish the child’s name, and that it has obtained parental consent where required.
• A parent can object at any time. Ask your school to remove the child, or contact us directly. On request we remove the record and stop any scheduled post, and we will take down a published post naming that child.
• Deletion. A school can delete all student data at any time from its dashboard, or ask us to. We complete deletion requests within 30 days.

How long we keep data

Account and school data are kept while the school’s plan is active. If a school leaves, we hand over its content and delete our copies within 90 days, other than what we must keep for accounting. Student data for birthday posts is deleted as soon as a school removes it or closes its account.

Who we share it with

We do not sell data, and we do not share it for advertising. We share only what a service needs to work: Google, for sign-in; the social platforms a school connects, when it chooses to publish to them; and our hosting provider. Where a school connects Facebook or Instagram, what it publishes there is then governed by that platform’s own terms.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Write to [email protected]and we will respond within 30 days. Nepal’s Individual Privacy Act 2075 governs personal data handled here.

Security

Data is served over encrypted connections and access is restricted to the school it belongs to. No system is perfectly secure; if a breach affects your data we will tell you and the relevant authority.

Changes

If we change this policy in a way that affects you, we will tell schools by email before it takes effect. See also our terms of service.