1. INTRODUCTION
OSP (Online Student Portal) is committed to protecting the privacy and security of personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our platform, website, and services. Please read this policy carefully. If you do not agree with our practices, please do not use our services.
2. INFORMATION WE COLLECT
OSP collects information in the following categories:
A. Personal Information
- Name, email address, phone number, physical address
- Institutional affiliation and administrative role
- Payment information (processed securely via payment gateway)
- Account login credentials and authentication data
B. Student Data
- Student names, enrollment numbers, contact information
- Academic records, grades, attendance data
- Biometric data (fingerprints for attendance, where applicable)
- Parent/guardian contact information
C. Usage Data
- IP address, browser type, device information
- Pages visited, time spent on platform, features used
- Login frequency and activity logs
- Error reports and system performance data
D. Communication Data
- Emails and support tickets submitted to OSP
- Feedback and user surveys
- Customer support communications
3. HOW WE USE YOUR INFORMATION
OSP uses collected information for:
- Service Delivery: Providing, maintaining, and improving OSP platform and features
- Account Management: Creating and managing user accounts and access
- Billing & Payments: Processing subscription fees and transactions
- Communication: Sending service updates, announcements, and support responses
- Security: Detecting and preventing fraud, abuse, and security threats
- Analytics: Analyzing platform usage to improve user experience
- Compliance: Meeting legal, regulatory, and contractual obligations
- Marketing: Sending promotional communications (with user consent)
4. DATA SHARING & DISCLOSURE
OSP does NOT sell student or personal data to third parties. However, we may share information with:
- Service Providers: Payment processors, hosting providers, and analytics partners (under data protection agreements)
- Legal Compliance: Government agencies, law enforcement, or courts when legally required
- Institutional Administrators: School/university staff authorized to access student data
- Parents/Guardians: Student data shared through parent app portal (with parental consent)
- Business Partners: For data migration or system integration (with contractual protections)
5. DATA SECURITY & PROTECTION
OSP implements comprehensive security measures to protect data:
- Encryption: End-to-end SSL/TLS encryption for all data transmission
- PCI-DSS Compliance: Level 1 payment card industry security certification
- Access Controls: Role-based permissions and authentication protocols
- Firewalls & Intrusion Detection: Multi-layer network security
- Data Backup: Regular automated backups with disaster recovery protocols
- Staff Training: Mandatory data protection and confidentiality training
- Audit Trails: Complete logging of all data access and modifications
- Penetration Testing: Regular security assessments and vulnerability scanning
6. DATA RETENTION
OSP retains personal and student data for the duration of the subscription agreement plus:
| Data Type |
Retention Period |
| Student Academic Records |
7 years after graduation |
| Attendance & Biometric Data |
2 years after account closure |
| Transaction/Payment Records |
7 years (tax compliance) |
| Login/Activity Logs |
1 year |
| Support Communications |
3 years |
After retention periods expire, data is securely deleted or anonymized.
7. YOUR PRIVACY RIGHTS
Depending on your location, you may have the following rights:
- Right to Access: Request a copy of personal data we hold
- Right to Rectification: Request correction of inaccurate data
- Right to Deletion: Request deletion of personal data (subject to legal obligations)
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive data in exportable format
- Right to Withdraw Consent: Revoke consent for data processing
- Right to Lodge Complaint: Submit complaints to data protection authorities
To exercise these rights, contact: klashkt@gmail.com
8. GDPR & INTERNATIONAL COMPLIANCE
OSP complies with:
- GDPR (General Data Protection Regulation): EU data protection standards
- PDPA (Personal Data Protection Act): Asia-Pacific privacy regulations
- SECP Requirements: Pakistan Securities & Exchange Commission compliance
- Local Education Laws: National education board data protection standards
- COPPA (Children's Online Privacy): Protection for students under 13
9. COOKIES & TRACKING TECHNOLOGIES
OSP uses cookies and similar technologies for:
- Session Management: Maintaining user login sessions
- Preferences: Remembering user language and display settings
- Analytics: Tracking platform usage and performance (anonymized)
- Security: Detecting and preventing fraudulent activity
Users can control cookies through browser settings. Disabling cookies may affect platform functionality.
10. THIRD-PARTY LINKS & SERVICES
OSP website may contain links to third-party websites and services. This Privacy Policy does not apply to third-party sites. We encourage you to review the privacy policies of external sites before providing personal information.
11. CONTACT & POLICY CHANGES
For privacy concerns or data requests:
Email: klashkt@gmail.com
Phone: +92 3422988522
Address: House #585, Employees Colony, Near General Bus Stand, Layyah, Pakistan
OSP reserves the right to modify this Privacy Policy. Changes are effective immediately upon posting. Continued use of our services constitutes acceptance of updated terms.
