Effective Date: Tuesday, 1 July 2025

The British Overseas School (“BOS”, “we”, “us”, or “our”) is committed to protecting the privacy and personal data of all individuals who interact with us, including students, parents, staff, alumni, and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR").

1. Data Controller Contact Details

The British Overseas School Address: 7/8, 14 Lane, Khayaban-e-Hilal, Phase 7 Defence Housing Authority, Karachi, 75500
Email: admin@bos-karachi.org
Phone: (021) 111 267 267

Data Protection Officer (DPO): Ms. Angela Victor : angela.victor@bos-karachi.org

2. What Personal Data We Collect

We may collect the following types of personal data:

• Identity data (e.g., full name, date of birth)
• Contact data (e.g., email address, phone number, residential address)
• Demographic data (e.g., nationality, language, gender)
• Educational and employment records
• Financial information (e.g., billing details, bank/payment card information)
• Website usage data (e.g., IP address, cookies, browser type)
• Sensitive data where necessary (e.g., health records, special educational needs)

3. Legal Bases for Processing

We process personal data based on the following legal grounds:

• Performance of a contract
• Legal obligations
• Legitimate interests
• Consent
• Vital interests (in emergencies)

You may withdraw consent at any time by contacting us.

4. Your Rights Under GDPR

You have the right to:

• Access your data
• Request correction of inaccurate or incomplete data
• Request deletion of your data (right to be forgotten)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise these rights, please contact us at admin@bos-karachi.org.

5. How We Use Your Data

We may use your data to:

• Manage admissions, student records, and academic support
• Communicate with students, parents, and staff
• Process fees and donations
• Send newsletters and marketing (with consent)
• Improve our website and services

6. Sharing and Disclosure

We may share your data with:

• Trusted service providers (e.g., IT systems, payment processors)
• Legal and regulatory authorities
• Emergency services when required

All third parties are bound by confidentiality and GDPR obligations.

7. International Data Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure adequate safeguards, including:

• Standard Contractual Clauses (SCCs)
• Binding corporate rules or equivalent protections

8. Data Retention

We retain personal data only as long as necessary to fulfil its purpose or comply with legal obligations. Specific retention schedules are available on request.

9. Cookies and Tracking Technologies

We use cookies and similar technologies for functionality and analytics. You can manage your preferences through our cookie banner or browser settings.

10. Updates to This Privacy Policy

We may update this policy periodically. The most recent version will always be available at privacy-policy.

11. Complaints

If you are located in the EU and believe your rights under GDPR have been violated, you may lodge a complaint with your local data protection authority.

If you have any questions or concerns about this policy, please contact us at admin@bos-karachi.org.