KhiredKids – Privacy Policy 

1. Scope 

This policy applies to KhiredKids which is acting as a data controller for the following personal data processing activities.  

1. Online Booking Trial Class 
2. Online Course Enrollment  
3. Online Social Media Marketing

2. Statement 

KhiredKids confirms that the following sections give the best possible details of privacy policy for above mentioned personal data processing activities.  

3. Policy 

The following two clauses and related criteria present the privacy policy for personal data processing activities mentioned in section 1. 

A. Accountability:  The following are the criteria relevant to how an entity manages personal data protection concerns from a governance point of view to ensure its management can assume accountability.

• Policies and procedures: KhiredKids has implemented the following measures that ensure authorized management is informed, involved and accountable of personal data processing activities mentioned in section 1. 

1. Record-keeping and Documentation: KhiredKids has implemented a GDPR Register that allows authorized management to easily access and review documentation related to personal data processing. 
2. Whistleblower Mechanism: KhriedKids has implemented a whistleblower mechanism that allows employees to anonymously report potential data protection violations to the management, which ensures that authorized management is involved in reviewing and addressing reports through this mechanism.            

• Register of processing activities: KhiredKids’s management reviews and approves on a quarterly basis, the register of the personal data processing activities under its responsibility to ensure completeness and accuracy of the record.
• Data security committee (DSC): KhiredKids has established a Data Security Committee (DSC) to systematically review and safeguard personal data on a project-specific basis. The DCS committee can be approached during business hours at dsc@khiredkids.com
• Data breach: KhiredKids has been using 3rd-party platforms to deliver its services to the clients. These 3rd-party platforms are carefully analyzed by the DSC in reference to ISO27001 or similar industrial standards for management and mitigation of personal data breach.

B. Principles Relating to Processing of Personal Data (Controller): The following are the criteria relevant to how KhiredKids fulfills personal data protection requirements for the processing activities in scope when it acts as a data controller.

• Lawfulness: KhiredKids has implemented the following measures to ensure that a valid legal basis is identified for each processing activity mentioned in section 1.

1. Consent is taken on the website before booking a trial class and enrollment for the course. Legitimate interest is a legal basis used to contact parents who showed interest in online courses.

• Transparency: KhiredKids has also implemented measures to ensure that the data subject is provided with the following information at the time when personal data is obtained/collected. 

1. KhiredKids regularly updates and publishes its register for personal data processing activities at the following link:
2. KhiredKids regularly update and publishes its privacy policy at the at the following link: 

The privacy policy highlight the following content:  

1.  How do we collect your personal data? 

Clients register online for our services. (www.khiredkids.com) 

2.  How do we process your personal data?

We store the personal data on 3rd-party servers in the EU.  

iii.  Which personal data do we collect and further process? 

We collect: Name, email address, age, and phone number.  

iv. How long do we keep your personal data? 

We store the personal data till it server our legitimate interest  

v.  How do we protect and safeguard your personal data? 

We store the personal data in the EU on servers that are compliant with information security standards e.g. ISO27001.  

vi.  Who has access to your personal data and to whom is it disclosed? 

Only the internal departments of KhiredKids (e.g. IT, Marketing, etc.) have access to the personal data. 

vii.  What are clients’ rights and how can you exercise them?

Our clients have the following rights:

The right to access – You have the right to request KhiredKids for copies of your personal data. We may charge you a small fee for this service.

The right to rectification – You have the right to request that KhiredKids correct any information you believe is inaccurate. You also have the right to request KhiredKids to complete the information you believe is incomplete.

The right to erasure – You have the right to request that KhiredKids erase your personal data, under certain conditions.

The right to restrict processing – You have the right to request that KhiredKids restrict the processing of your personal data, under certain conditions.

The right to object to processing – You have the right to object to KhiredKids’s processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that KhiredKids transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: dsc@khiredkids.com

viii. How to contact us?

If you have any questions about KhiredKids’s privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us at dsc@khiredkids.com

ix.  How to contact the appropriate authorities?

Should you wish to report a complaint or if you feel that KhiredKids has not addressed your concern in a satisfactory manner, you may contact the Public Information Commissioner’s Office in your city.

x. When to expect changes in privacy policy?

KhiredKids keeps its privacy policy under regular review on a quarterly basis.

xi. Websites (www.khiredkids.com)

1. What are cookies? 

Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technology. For further information, visit allaboutcookies.org. 

2.  How do we use cookies? 

We are not using any kind of cookies on our website.  

3.  What types of cookies do we use? 

We are not using any kind of cookies on our website.  

4.  How can you manage the cookies? 

We are not using any kind of cookies on our website.  

5.  Privacy policies of other websites (if applicable) 

KhiredKids website may contain links to other websites. Our privacy policy applies only to our website and services, so if you click on a link to another website, you should read their privacy policy. 

• Purpose limitations: KhiredKids has implemented the following measures to ensure that it has assessed that the purpose(s) for which it collects the data are specific, explicit and legitimate. 

1. KhiredKids maintains a Register for personal data processing activities

• Data minimization: KhiredKids has implemented the following measures that ensure that the collection of personal data is limited to what is necessary in relation to the purposes for which they are processed.  

1. KhiredKids maintains a Register for personal data processing activities which ensure that the collection of personal data is limited to what is necessary in relation to the our purposes (services offered). 

• Accuracy: KhiredKids has implemented the following measures that ensure that the data sources used to collect personal data are relevant and processed data is accurate. 

1. KhiredKids collects data directly from its clients. There is no indirect source involved for collection of the personal data.  

• Storage limitation: KhiredKids has implemented the following measures that ensure that the retention periods for processed data is defined and communicated to concerned parties.  

1. DSC reviews legal basis for personal data protection regularly and accordingly ensures application of storage limitation principle (if applicable).  

• Security (integrity, availability, and confidentiality): KhiredKids has implemented the following organizational and technical measures that ensure protection for processed data. 

1. KhiredKids maintains a Register for personal data processing activities that include the identification of risk levels for data breaches and accordingly implementation of the security measures for the protection of the personal data. 

• Privacy by design: KhiredKids has implemented the following measures that ensure that data protection principles are integrated when the personal data processing activity mentioned is developed. 

1. KhiredKids ensures the implementation of state-of-the-art encryption techniques to protect personal data that is at rest (in storage) or when transmitted online.  

• Privacy by default: KhiredKids has implemented the following measures that ensure that the personal data processing activity when executed is by default set up in the most privacy-friendly/preserving way for the data subjects.  

1. Providing information security related training to new employees. 

• Outsourcing: KhiredKids uses a processor and has implemented the following measures  to assess that the processor is providing sufficient guarantees to implement appropriate technical and organizational measures in such a manner that processing will meet the requirements and ensure the protection of the rights of the data subject. 

1. The processor is ISO 27001 certified.  

• Exercise of rights of data subject: KhiredKids has implemented the following measures to ensure exercise of the applicable rights towards data subjects (e.g. the right of access, the right of rectification, the right of opposition, the right of information, the right of portability, the right to be forgotten, and the right to contest a decision based on automated processing). 

1. KhiredKids has established a Data Security Committee (DSC) to systematically safeguard personal data on a project-specific basis. The DCS committee can be approached during business hours at dsc@khiredkids.com 

• Transfer of personal data to third countries: KhiredKids has implemented the following measures to ensure that legal safeguards has been put in place when transferring personal data to a third country or an international organization. 

1. In employment contracts for employees from a third country who reside in that same country, a personal data protection clause binds the employees to comply with the principles and practices mentioned above in the privacy policy (where applicable).
2. In the service contracts for legal entities from a third country who reside in that same country, a personal data protection clause binds the entity to comply with the principles and practices mentioned above in the privacy policy (where applicable).

Contact Us 

If you have any questions or concerns about our Privacy Policy, please contact us at info@khiredkids.com