Legal

Privacy Policy

Last updated: 15 June 2026. This policy applies to oakville.pk, the Oakville school portal, and Oakville mobile applications (collectively, our “Services”).

This policy is provided for transparency and app-store compliance. It does not constitute legal advice. If you have questions about your rights or our practices, please contact us using the details at the end of this document.

1. Who we are

Oakville International School (“Oakville”, “we”, “us”, or “our”) is a Cambridge-oriented school in Lahore, Pakistan. We are responsible for personal information processed through our Services in connection with admissions, education, communication, and school operations.

2. Scope of this policy

This Privacy Policy explains how we collect, use, store, share, and protect personal information when you:

  • visit or interact with our public website;
  • submit admission, enquiry, contact, or registration forms;
  • use the school portal for authorised administrative, academic, or operational purposes;
  • sign in to or use Oakville mobile applications as a parent, guardian, student, or staff member;
  • communicate with us by email, phone, WhatsApp, or in person in connection with our digital Services.

Separate notices may apply to on-campus CCTV, paper records, or activities that are not delivered through our digital Services.

3. Information we collect

The information we collect depends on how you use our Services. We may collect the following categories of data:

3.1 Website visitors and prospective families

  • Identity and contact details (for example name, email address, phone number, city, and relationship to the applicant).
  • Admission and enquiry information (child’s name, date of birth, programme interest, and messages you submit).
  • Technical data (IP address, browser type, device type, pages viewed, referring URL, and approximate location derived from IP).
  • Cookie and analytics data as described in Section 12.
  • Security interaction data (for example Cloudflare Turnstile tokens used to protect forms from abuse).

3.2 Portal users (staff and authorised school personnel)

  • Account identifiers, role, and authentication logs.
  • Professional contact details and activity within the portal required for school operations.
  • Records entered or managed in the portal relating to students, families, fees, attendance, academics, notices, and communications.

3.3 Mobile app users (parents, guardians, students, and staff)

  • Account and profile information linked to your school relationship (for example name, email, role, and linked student records where applicable).
  • Authentication data when you sign in (including third-party sign-in such as Google, where enabled).
  • Device information, app version, operating system, and push notification tokens.
  • Usage data relating to features you access (for example notices, homework, fees, timetables, or attendance, depending on your role and permissions).
  • Communications and content you submit through the app within the scope of school services.

3.4 Students and children

Student information is collected and processed primarily through parents or guardians, through school enrolment processes, and through authorised school staff. Where students use mobile apps or portal features directly, we process their information as necessary to deliver education-related services, with appropriate safeguards and access controls.

4. How we use personal information

We use personal information to:

  • respond to enquiries and process admission interest and applications;
  • provide education, pastoral care, and school administration;
  • operate the school portal and mobile applications;
  • communicate with families and staff (including notices, reminders, and service messages);
  • process fees and financial records where applicable;
  • maintain security, prevent fraud and abuse, and protect our systems;
  • improve our website, apps, and services;
  • comply with legal, regulatory, and safeguarding obligations.

5. Legal bases for processing

Depending on the context, we rely on one or more of the following:

  • Consent — for example when you submit a form, opt in to marketing communications, or enable push notifications.
  • Contract — to perform our agreement with enrolled families or employment/engagement arrangements with staff.
  • Legitimate interests — to operate and improve our Services, secure our platforms, and communicate about school matters, balanced against your rights.
  • Legal obligation — where we must retain or disclose information under applicable law.
  • Vital interests and safeguarding — where necessary to protect a child or other person.

6. How we share information

We do not sell personal information. We may share information with:

  • Service providers who help us host, secure, deliver, and support our Services (for example cloud hosting, email delivery, analytics, authentication, and push notification providers).
  • Payment processors where fee payments are made through authorised channels.
  • Professional advisers where reasonably necessary (for example legal, audit, or insurance advisers bound by confidentiality).
  • Authorities when required by law, court order, or to protect rights, safety, and safeguarding.
  • School partners only where relevant to educational services and with appropriate controls.

Current categories of technology providers used in connection with our Services may include Cloudflare (hosting and security), Google (analytics and authentication, where enabled), Firebase/Google Cloud (mobile authentication and push messaging), and email delivery services used for school communications.

7. International transfers

Some of our service providers may process data outside Pakistan. Where this occurs, we take reasonable steps to ensure appropriate safeguards are in place consistent with applicable law and the nature of the data processed.

8. Data retention

We retain personal information only for as long as necessary for the purposes described in this policy, including legal, accounting, safeguarding, and archival requirements. Retention periods may differ for admission enquiries, enrolled student records, financial records, portal logs, and mobile app account data.

9. Security

We implement administrative, technical, and organisational measures designed to protect personal information, including access controls, encrypted transport (HTTPS), authenticated access to portal and app features, and monitoring for abuse. No method of transmission or storage is completely secure; please use strong passwords and keep your login credentials confidential.

10. Your rights and choices

Subject to applicable law, you may have the right to:

  • request access to personal information we hold about you;
  • request correction of inaccurate or incomplete information;
  • request deletion or restriction of processing in certain circumstances;
  • withdraw consent where processing is based on consent;
  • disable push notifications in your device or app settings;
  • manage cookies through your browser settings.

To exercise these rights, contact [email protected]. We may need to verify your identity and your relationship to the school before responding. Parents or guardians should contact us regarding student records.

11. Push notifications

Mobile applications may send push notifications about school notices, academic updates, fees, or account activity. You can control notifications through your device settings and, where available, in-app preferences. Disabling notifications may limit timely delivery of school communications.

12. Cookies and similar technologies

Our website may use cookies and similar technologies to:

  • enable core site functionality;
  • remember preferences;
  • measure traffic and usage through analytics tools (such as Google Analytics);
  • protect forms and prevent automated abuse.

You can control cookies through your browser settings. Blocking certain cookies may affect site functionality.

13. Third-party links and services

Our Services may contain links to third-party websites or services (for example maps, social media, or payment pages). Their privacy practices are governed by their own policies. We encourage you to review those policies before providing personal information to third parties.

14. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will be revised when changes are published. Material changes may also be communicated through the website, portal, or app where appropriate.

15. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

See also our Terms of Use.