01Introduction
Kings Cornerstone International College Private Limited (KCIC, we, our, or us) is committed to protecting personal and educational information and ensuring full regulatory compliance. This policy sets out how we collect, store, use, and share information for students, guardians, staff, and partners.
We primarily comply with Indian privacy laws, including the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, while also recognising and aligning with the European Union GDPR, UK Data Protection Act, and Australian Privacy Principles. This ensures that our practices meet international standards and protect student and partner data globally.
02Scope
This policy applies to students, prospective students, and their guardians, staff and faculty, partner universities and service providers, and all digital platforms, including websites, learning platforms, email communications, and social media channels.
03Information we collect
KCIC may collect information through applications, enrolments, website use, and digital interactions. Categories include:
- Personal data such as name, contact details, date of birth, nationality, and address.
- Educational records including academic transcripts, previous qualifications, enrolment data, and programme progress.
- Guardian information for students under 18.
- Usage and online data, including website and learning platform activity and interactions on social media channels.
- Marketing preferences, including consent for promotional communications via email, social media, or other digital channels.
04Purpose of data collection and use
We collect and process data to administer applications, enrolments, credit transfers, and programme progression, provide academic guidance, support, and updates, operate our websites, learning platforms, and social media channels in compliance with marketing and advertising regulations, comply with Indian, European, UK, and Australian legal obligations, facilitate career guidance, internships, and post-study work opportunities, and improve digital platforms and student experience.
05Legal basis for processing data
In India, processing is required for compliance with the IT Act, 2000 and associated rules. In the EU and UK, processing is based on consent, contractual necessity, legal obligation, or legitimate interests under GDPR and the Data Protection Act. In Australia, data is processed for primary educational purposes and legitimate business purposes under the Australian Privacy Principles. All personal data collected for marketing and promotional purposes is based on explicit consent.
06Data sharing
KCIC may share information with partner universities for credit recognition, student transfers, and programme completion, accreditation bodies to meet academic and regulatory standards, service providers assisting with IT, academic platforms, student support, and marketing services, and legal authorities where required by law in India, Europe, the UK, or Australia.
KCIC does not sell personal data. All data sharing respects Indian and international privacy regulations.
07Marketing and social media compliance
KCIC ensures that all marketing communications, including emails, newsletters, and social media posts, comply with applicable laws in India, Europe, the UK, and Australia. Students, parents, and users may opt in or opt out of promotional communications at any time. Social media activity and engagement data is collected and used only for legitimate marketing purposes in line with platform policies and local regulations.
08Data security
KCIC implements appropriate technical and organisational measures to protect personal information from unauthorised access, disclosure, alteration, or destruction. Security measures include:
- Secure storage systems and access controls
- Encryption of sensitive information
- Staff training and awareness programmes
- Regular audits and monitoring of systems
09Data retention
Personal information is retained only as long as necessary to fulfil the purposes described above, including statutory and regulatory obligations. Retention periods may vary depending on the type of data and applicable legal requirements.
10Student, guardian, and staff rights
Individuals have the right to access personal data, request correction or update of inaccurate or incomplete data, request deletion of personal data where permitted, object to certain processing including marketing communications, and request transfer of personal data.
Requests should be sent to admission@cornerstone.edu.in.
11Compliance with partner universities
KCIC ensures that all student transfers, credit recognitions, and programme pathways comply with the policies and standards of our partner universities. Our partnership is based on transparency, integrity, and regulatory compliance.
12Updates to this policy
KCIC may update this policy periodically to remain compliant with changes in Indian or international law or with evolving educational and marketing practices. Updates will be communicated via our website or email notifications.
13Contact information
For questions regarding this Privacy and Compliance Policy or to exercise your rights, please contact admission@cornerstone.edu.in.