Privacy Policy

We collect the categories of personal information listed below:

• Identity & contact information: name, CNIC/B-Form number, date of birth, residential address, phone/WhatsApp number, e-mail address and emergency contact details of parents/guardians.
• Student information: academic history, previous school records, grades/assessments, attendance, medical & dietary information relevant to safeguarding, and photographs taken at school events.
• Financial information: fee payment records, bank/transaction references, invoicing details and, for franchise applicants, sources of funds and related declarations required under applicable anti-money-laundering law.
• Franchise & business information: professional background, CV, business plan, references and supporting documents submitted with a franchise application.
• Recruitment information: CVs, qualifications, references and interview records of individuals applying for employment.
• Website usage information: IP address, browser type, device identifiers, referring URL, pages visited, session duration and cookie identifiers.

Where personal information relates to a minor, it is provided by, and processed on the lawful basis of consent obtained from, the parent or legal guardian.

We process personal information only for lawful and specified purposes, including:

• Processing admission enquiries, applications, assessments and enrolment;
• Delivering academic, pastoral, disciplinary, health & safety and transport services to enrolled students;
• Fee invoicing, collection, refunds and financial record-keeping;
• Evaluating and administering franchise applications, executing franchise agreements and providing ongoing franchise support;
• Recruiting, on-boarding and managing staff;
• Communicating with parents/guardians about school activities, examinations, results and school events (including via SMS, WhatsApp and e-mail);
• Responding to enquiries, call-back requests and feedback submitted through the website;
• Improving our website, services and marketing communications;
• Complying with legal, regulatory, audit and safeguarding obligations under Pakistani law and the rules of relevant education boards.

We rely on one or more of the following legal bases:

• Consent — where you (or, for a minor, the parent/guardian) have given us explicit consent, which may be withdrawn at any time;
• Contract — where processing is necessary to enter into or perform a contract with you (e.g. an admission or franchise agreement);
• Legal obligation — where processing is necessary to comply with applicable law or an order of a competent authority;
• Legitimate interest — where processing is necessary for our legitimate interests (such as safeguarding, network security and improving our services) and is not overridden by your rights.

We do not sell personal information. We disclose information only:

• To campuses, franchisees and academic partners within the Mazen Schools network, on a strict need-to-know basis;
• To examination boards and regulators (e.g. the Federal Board of Intermediate and Secondary Education (FBISE), provincial boards, Cambridge Assessment International Education (CAIE) and other awarding bodies) as required for registrations, examinations and certifications;
• To vetted service providers acting on our written instructions (e.g. IT hosting, communications, payment processors, insurers and auditors), bound by confidentiality obligations;
• To law enforcement, courts, the PTA, FIA (Cyber Crime Wing) or other competent authorities where required by law or in response to a valid legal process;
• In connection with a merger, acquisition, restructuring or sale of assets, subject to appropriate confidentiality arrangements.

Our website uses cookies and similar technologies to remember your preferences, secure your session and understand how the site is used. You may accept or decline non-essential cookies via the consent banner shown on your first visit, or manage cookies through your browser settings. Disabling essential cookies may affect website functionality.

We apply administrative, technical and physical safeguards designed to protect personal information against unauthorised access, alteration, disclosure or destruction, including access controls, encryption in transit (HTTPS/TLS), CCTV-monitored campus premises and staff confidentiality obligations. No system is perfectly secure; we require you to keep your account credentials confidential and to notify us immediately of any suspected unauthorised use.

We retain personal information only for as long as necessary for the purposes for which it was collected, or as required by law. Student academic records are retained for the durations mandated by the relevant examination board and the Companies Act, 2017; fee and tax records are retained for at least six (6) years in line with tax and audit obligations; recruitment records of unsuccessful candidates are retained for up to twelve (12) months.

Some of our service providers (for example, cloud hosting or communications providers) may process data outside Pakistan. Where this occurs, we take reasonable steps to ensure that adequate contractual and technical safeguards consistent with applicable Pakistani law are in place before the transfer.

Subject to applicable law, you may request to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete personal information where we no longer have a lawful basis to retain it;
• Withdraw consent for future processing based on consent;
• Object to direct-marketing communications at any time;
• Lodge a complaint with the relevant regulator (see Section 12).

To exercise any of these rights, contact us using the details in Section 11. We may verify your identity before acting on a request and will respond within a reasonable period.

Because we serve students, most of the information we process concerns minors. Parents/guardians provide consent on behalf of their child and may withdraw it in writing at any time (subject to the school's ability to continue educational services). We do not knowingly market to children. Any concern about child safeguarding should be reported immediately to the campus principal and to our Head Office at info@mazenschools.edu.pk.

If you believe your personal information has been mishandled, please first contact our Data Protection Officer using the details above. If your concern is not resolved to your satisfaction, you may escalate to the Ministry of Information Technology & Telecommunication, Government of Pakistan, or to the National Response Centre for Cyber Crime (NR3C), Federal Investigation Agency (FIA), in accordance with PECA, 2016.

We may update this Policy from time to time to reflect changes in our practices or in applicable law. Material changes will be notified through the website. Your continued use of our services after the effective date constitutes acceptance of the revised Policy.

This Policy is governed by and construed in accordance with the laws of the Islamic Republic of Pakistan. The courts at Islamabad shall have exclusive jurisdiction over any dispute arising out of or in connection with this Policy, without prejudice to any statutory forum that may have concurrent jurisdiction.