This Notice explains, in plain language, how BC Academy International School collects and uses personal information about students, parents and guardians. It gives our school community a clear, accessible summary of their data protection rights. For full detail, see our Data Protection Policy (BCA-POL-15), available on request.

2. Scope

This Notice applies to personal information collected from students, parents and guardians of BC Academy International School. It does not cover the school's internal data governance procedures, which are set out in the Data Protection Policy (BCA-POL-15).

3. Definitions

Personal Data: Any information relating to an identified or identifiable individual, such as a name, contact details or photograph.

Data Protection Officer (DPO): The person responsible for overseeing how the school handles personal data and for answering questions from parents and students about it.

4. Policy Statement

BC Academy International School is responsible for the personal data of its students, parents and guardians. We collect information needed to educate and safeguard students and to run the school, including admissions, academic, attendance, behaviour, medical, safeguarding and (where used) biometric attendance records for students; contact, identification and billing details for parents/guardians; and visitor sign-in and CCTV records. We use this to provide your child's education, keep students safe, communicate with you, meet our obligations to KHDA, and operate the school, always on an appropriate legal basis such as delivering education, a legal obligation, a vital interest, or your consent.

5. Procedures

Who we share information with

We share information only where necessary with organisations that help us run the school, such as learning platforms and service providers, and we require them to protect it to an equivalent standard. We do not sell personal data, and we do not transfer it outside the UAE without confirming appropriate safeguards.

How long we keep it

We keep personal information only for as long as necessary, in line with KHDA record-keeping expectations. CCTV footage is kept for a limited period unless needed for an ongoing investigation.

Keeping information safe

We use appropriate safeguards to protect personal information, including restricted access, encryption of sensitive data, and staff training. If a breach occurs that could affect your rights, we will notify the UAE Data Office and, where appropriate, you, without undue delay.

Your rights

You can ask to access, correct or erase your or your child's personal data, object to or restrict certain uses, and withdraw consent at any time (for example, for photo/media use). Requests relating to a child's data are normally made through the parent/guardian. Contact the Data Protection Officer in writing; we will respond within 30 calendar days. You may also complain to the UAE Data Office at any time.

Photographs and school communications

We ask for consent at admission before using your child's photograph or video in school publications, the website, or approved social media. You can withdraw this consent, or ask for removal of previously published images, at any time via the Communications Office.

6. Roles and Responsibilities

Data Protection Officer

Answers questions from parents and students, and handles requests to access, correct or erase personal data.

School Office

First point of contact for privacy queries; directs them to the Data Protection Officer.

Parents / Guardians and Students

Can contact the school at any time to ask about, correct, or exercise their rights over their personal data.

7. Monitoring, Evaluation and Review

This Notice is reviewed annually alongside the Data Protection Policy (BCA-POL-15), or sooner if UAE data protection law, KHDA guidance, or school practice changes.

8. Related Policies

Data Protection Policy (BCA-POL-15)

9. Regulatory and Legislative Framework

This Notice reflects the disclosure principles of UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, overseen by the UAE Data Office, and KHDA expectations for school governance and safeguarding of sensitive information.

10. Document Review Cycle

Review Frequency: Annual

Last Approved: 26 August 2026 (reviewed and approved by Data Protection Officer; approved by Zara Harrington)

Next Review Due: 26 August 2027

Review Owner: Data Protection Officer

Escalation Trigger: Reviewed immediately, ahead of schedule, if UAE data protection law, the UAE Data Office's guidance, or KHDA guidance changes.