Skip to main content

Institutional Privacy Policy

Our commitment to student data integrity, ethical digital transparency, and institutional record protection across all four wings of Kasturi Academy & College.

Version 2.4 • Last Institutional Review: September 2026

1. Scope and Institutional Governance

This Privacy Policy outlines how Kasturi Educational Group (“Kasturi Academy”, “Kasturi College”, “Kasturi Secondary School”, “we”, “us”, or “our”) collects, processes, stores, and protects personal and academic information collected through our official websites, digital admissions portals, visit schedulers, and online inquiry forms.

Our policy applies universally across our four academic divisions:

  • Kasturi Secondary School: Playgroup through Class 10 (SEE Board)
  • Kasturi Academy: Higher Secondary +2 Science and Management (NEB)
  • Kasturi College: 4-Year BBA and BIT Undergraduate Degrees (Purbanchal University)
  • College of Management: BBS and MBS Degrees (Tribhuvan University)

2. Information We Collect

We only collect information strictly necessary to facilitate institutional inquiries, student counseling, admissions processing, and academic administration:

  • Contact Details: Full name, telephone number, WhatsApp contact, email address, and home location submitted during visit bookings or online admission applications.
  • Academic Credentials: Previous examination scores (SEE, NEB +2, Bachelor’s transcripts), school or college history, and elective preferences.
  • Admissions & Counseling Preferences: Intended study wings, stream preferences (e.g., Physical vs. Biological Science, Computer Science vs. Hotel Management), and scheduled counseling dates.
  • Technical Telemetry: Anonymized server logs, browser type, referral domain, and screen viewport dimensions collected strictly for performance optimization and cybersecurity defense.
Zero Commercial Sale Policy: Kasturi College does not sell, rent, license, or monetize student, parent, or applicant information to third-party commercial marketing networks or lead brokers under any circumstances.

3. Purpose of Processing

Information collected via our digital services is utilized exclusively for genuine institutional purposes:

  • Evaluating applicant eligibility and entrance preparation requirements.
  • Coordinating in-person campus visits, laboratory demonstrations, and transportation consultations.
  • Dispatching verified examination schedules, routine changes, and academic notices.
  • Facilitating official university and board registration with NEB, PU, and TU.
  • Alumni networking, career placement records, and institutional award tracking.

4. Data Security and Retention

We deploy hardened security infrastructure to safeguard all applicant and student records:

  • Cryptographic Security: All web traffic is encrypted using modern TLS 1.3 encryption. Forms are protected with single-use CSRF tokens and rate-limiting gates to prevent automated harvesting.
  • Access Controls: Role-Based Access Control (RBAC) restricts internal access to applicant documents exclusively to authorized admissions officers and registrars.
  • Retention Policy: Uncompleted prospective inquiries and counseling records are retained for a maximum of 12 months for active admissions cycles, after which they are purged via our retention protocol. Enrolled student academic records are preserved in accordance with Ministry of Education, NEB, PU, and TU university accreditation mandates.

5. Cookies, Local Storage & External Technical Services

Our platform uses privacy-first cookies and browser local storage strictly to preserve user functional preferences:

  • Appearance Preference: We store your chosen theme (kasturi-theme: light/dark) in local browser storage so your viewing preference persists across pages without transmitting tracking identifiers.
  • Session Security: Ephemeral PHP session cookies are used to validate CSRF tokens during form submissions and are destroyed when your browser session concludes.
  • External Content Delivery Networks: To deliver performant typography and scalable vector iconography, pages load font files from Google Fonts (fonts.googleapis.com, fonts.gstatic.com) and open-source icons via cdnjs (cdnjs.cloudflare.com). These requests transmit standard HTTP network headers (such as IP address and User-Agent) necessary for asset delivery. No third-party profiling or advertising trackers are placed by these assets.
  • Analytics Notice: Third-party tracking or behavioral profiling scripts are disabled by default on our public pages.

6. Your Data Rights & Deletion Requests

Prospective applicants, parents, and visitors hold explicit rights regarding their personal inquiries:

  • Right to Access & Rectification: You may request a summary of the contact information you submitted during campus visits or online inquiries to ensure its accuracy.
  • Right to Erasure: If you no longer wish to be contacted regarding admissions or counseling, you may request the immediate deletion of your inquiry records prior to the standard 12-month retention window.

7. Contacting the Data Protection Office

If you have inquiries regarding your personal information, wish to correct your submitted admissions data, or desire to withdraw a counseling request, please contact our administrative desk:

Administration & Records Desk:
Kasturi College & Academy Campus
Main Highway, Itahari-7, Sunsari, Koshi Province, Nepal
Telephone: +977-25-580550 / +977-25-580000
Official Email: info@kasturicollege.com

Call Office Book Visit