Privacy Policy

Last updated: 25 June 2026

The First Steps School ("the School", "we", "us", or "our") operates the website at tfsschool.com and the First Steps school-management platform (the "Platform"). This Privacy Policy explains what personal information we collect, how we use it, and the choices available to you. It applies to students, parents/guardians, staff, and visitors who use our website or Platform.

Because we serve children, protecting the privacy of students and their families is central to how we operate. We collect and use personal information only to run the School and to provide education-related services.

Who we are

The First Steps School is the data controller responsible for your information.
H#1, Babai Villas, Jinnah Town, Quetta, Pakistan
Email: info@tfsschool.com · Phone: 0312-3880000

Information we collect

Depending on your relationship with the School, we may collect:

• Identity & contact details — names, email addresses, phone numbers, postal address, and the relationship between a guardian and a student.
• Student records — enrolment details, class/section, attendance, academic progress, assessment results, and learning-management activity (lessons viewed, assignments, progress).
• Account credentials — the email and password (or Google sign-in identity) used to access the Platform. Passwords are handled by our authentication provider and are not visible to us in readable form.
• Fee & payment records — invoices, amounts due and paid, bank-transfer reference numbers, depositor names, and any payment receipts you upload. We do not collect or store card numbers; fee payments are made by bank transfer (IBFT).
• Communications — the announcements and notifications we send you, and correspondence you send us.
• Technical data — basic device/log information and locally stored session data needed to keep you signed in and secure (see "Cookies & local storage").

How we use your information

We use personal information to:

• enrol and manage students and run day-to-day school administration;
• deliver online learning and track academic progress;
• generate and manage fee invoices and record payments;
• communicate with parents/guardians, staff, and students about fees, calendar events, announcements, and learning updates (see "Email & notifications");
• secure accounts, prevent misuse, and meet our legal and regulatory obligations.

We do not sell personal information, and we do not use student data for advertising.

Email & notifications

Our emails and push notifications are transactional and operational — for example fee invoices, payment confirmations, calendar and event notices, school announcements, learning-management updates, and account/security messages (such as sign-in and password-reset emails). They are sent only to members of our school community who hold an account with us. We do not send marketing or promotional email, and we do not share contact lists with third parties for marketing.

Sharing & service providers

We do not sell or rent personal information. We share it only with service providers that help us operate the Platform, each under their own terms and privacy policies:

• Google Firebase / Google Cloud — authentication, database, file storage, hosting, and push notifications.
• Twilio SendGrid — delivery of the transactional email described above.
• Google Maps — the embedded map on our website.

We may also disclose information where required by law, or to protect the rights, safety, and security of the School, its students, and its staff.

Children’s privacy

The Platform is used by children as part of their enrolment at the School. Student accounts are created and overseen by the School together with the child’s parents/guardians. We collect children’s information only for educational and administrative purposes, limit access to authorised staff, and act on parental requests regarding their child’s information. Parents/guardians may contact us at any time to review or correct their child’s records.

Data security

We protect personal information using industry-standard measures, including encrypted connections (HTTPS), authenticated and role-based access — staff, guardians, and students see only what their role permits — and reputable cloud infrastructure. For your security, the Platform automatically signs you out after a period of inactivity. No system can be guaranteed perfectly secure, but we work to protect your information and to address any issues promptly.

Data retention

We keep personal information for as long as it is needed to run the School, maintain accurate academic and financial records, and meet our legal obligations. When information is no longer required, we take reasonable steps to delete or anonymise it.

Your choices & rights

You may ask us to access, correct, or update your personal information — or that of a student in your care — by contacting the school office. We will respond in line with applicable law. Some operational and security messages are necessary to use the Platform and cannot be opted out of while your account is active.

Cookies & local storage

The Platform uses cookies and browser local storage only for essential purposes — keeping you signed in, maintaining your session, and enabling security features such as inactivity sign-out. We do not use third-party advertising or tracking cookies.

Changes to this policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, where appropriate, notify you through the Platform.

Contact us

Questions about this policy or your information? Contact The First Steps School at info@tfsschool.com, 0312-3880000, or H#1, Babai Villas, Jinnah Town, Quetta, Pakistan. See also our Terms of Service.