Privacy Policy for Uluwatu School

1. Introduction and Scope

This Privacy Policy explains how Uluwatu School collects, uses, stores, and protects the Personal Data (PD) of students, parents, and guardians, in compliance with the laws of the Republic of Indonesia, including Law No. 27 of 2022 concerning Personal Data Protection (UU PDP), and international standards (where applicable, e.g., GDPR).

2. Definitions

  • School: Uluwatu School.
  • Personal Data (PD): Any data about an identified or identifiable person, directly or indirectly.
  • Sensitive Personal Data: PD requiring special protection (e.g., health, religion, biometrics).
  • Student: A child registered at the School.

3. Data We Collect

We collect PD essential for enrollment, administration, education, and safety purposes. This includes:

  • Student Data: Full name, date of birth, gender, nationality, academic history, health information (allergies, medication), biometric data (for access/attendance, if used), photos, and videos of school activities.
  • Parent/Guardian Data: Full name, address, phone numbers, email addresses, occupation, legal guardianship status, and emergency contact details.
  • Financial Data: Payment details, invoicing, and transaction history.
  • Technical Data: IP addresses, website usage data (via cookies).

4. Legal Basis and Data Use

We process your PD based on:

  • Clear Consent: Provided upon completing enrollment forms.
  • Contractual Obligation: Necessary to fulfill the educational contract.
  • Legal Obligation: Compliance with Indonesian governmental regulations.

Data is used to:

  • Provide educational instruction and curricular services.
  • Manage administration, finance, and record-keeping.
  • Ensure the safety, health, and welfare of Students.
  • School communication and emergency notifications.
  • Limited marketing purposes (e.g., brochures, social media, only with explicit consent).

5. Disclosure and Data Transfer

We only disclose Student/Parent PD to third parties if:

  • Required by law (e.g., reporting to the Ministry of Education, immigration authorities).
  • Necessary for school operations (e.g., IT service providers, learning platforms, insurers, subject to confidentiality agreements).
  • We have your explicit written consent.
  • The School does not sell or lease your Personal Data.

6. Cookies and Tracking

Our website uses cookies to [State purpose, e.g., enhance user experience, analyze web traffic]. By using our website, you consent to the use of cookies in accordance with this Policy.

7. Data Subject Rights (Pursuant to UU PDP)

You have the right to:

  • Access: Access and obtain a copy of the PD we hold.
  • Rectification: Request correction if the PD we hold is inaccurate.
  • Withdraw Consent: Withdraw any previously given consent (this may affect our ability to provide educational services).
  • Erasure/Deletion: Request the deletion of PD that is no longer relevant.

All requests must be submitted in writing to: info@uluwatuschool.org.

8. Data Security

The School is committed to protecting PD through adequate technical and organizational security measures, including encryption, access control, and staff training.

9. Policy Changes

The School reserves the right to amend this Privacy Policy. Changes will be published on the School’s website at [Uluwatu School Website URL] and, if significant, will be communicated directly to you.