Privacy Policy
Effective Date: June 1, 2025
The Shirley Aninias School (“SAS,” “we,” “us,” or “our”) is committed to protecting the privacy of our students, families, and website visitors. This Privacy Policy describes how we collect, use, protect, and share your information—including personal, financial, and student-related data—particularly in connection with online services and payment platforms such as Stripe Financial Connections.
1. Information We Collect
We collect the following types of information when you interact with our website or school:
- Personal Information: Full name, address, phone number, email address, student name, date of birth, and other identifying or demographic information.
- Student Information: Educational records, evaluations, medical/developmental history, and enrollment data submitted by parents or guardians.
- Financial Information: When submitting payments (e.g., via ACH), we may collect bank account numbers, routing numbers, and transaction history. This includes data obtained through integrations such as Stripe Financial Connections.
- Technical Information: Browser type, device ID, IP address, pages visited, and other analytics collected via cookies and website tracking tools
2. Use of Stripe Financial Connections
When you choose to link your bank account for tuition or fee payments, we may use Stripe Financial Connections, a secure service that enables SAS to verify your financial account details and process ACH payments. Through Stripe, we may receive:
- Confirmation of account ownership
- Current balance or transaction history (only when explicitly authorized)
- Payment authorization for tuition or service fees
All financial account access is handled securely by Stripe, which complies with industry-standard security and privacy protocols. You can learn more about Stripe’s privacy practices at stripe.com/privacy. SAS does not retain or have access to your login credentials.
3. How We Use Your Information
We use the information we collect to:
- Process tuition and fee payments
- Manage enrollment and student records
- Communicate with families, caregivers, and staff
- Administer educational and therapeutic services
- Maintain our website and improve user experience
- Comply with legal, financial, and regulatory obligations
4. Information Sharing and Disclosure
We do not sell or rent your personal or financial information. We may share data only in the following limited situations:
- With third-party service providers such as Stripe or our student information systems, who assist us in delivering school services and payment processing under strict confidentiality agreements
- To comply with legal obligations or regulatory requirements (e.g., subpoenas, audits)
- To protect the safety and security of our students, families, and staff
All shared data is limited to the minimum necessary for the intended purpose.
5. Data Security
We use reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access or disclosure. These include:
- Secure servers and encrypted data transfers
- Access controls and permissions for staff handling sensitive data
- Regular review and management of third-party processors for security compliance
Financial data transmitted via Stripe is encrypted and processed in accordance with PCI-DSS standards.
6. Children’s Privacy
We do not knowingly collect personal information from children under 13 via our website. All student-related data is provided voluntarily by a parent or legal guardian for school enrollment and service purposes.
7. Compliance with FERPA and New York State Privacy Laws
The Shirley Aninias School complies with applicable privacy laws, including:
- FERPA (Family Educational Rights and Privacy Act):
We protect the confidentiality of student education records as required by federal law. Parents and guardians have the right to access, inspect, and request corrections to their child’s educational records, as well as limit certain disclosures. - New York State SHIELD Act:
We maintain reasonable safeguards to protect private information belonging to New York residents—including student, parent, and staff data. These include secure data handling, employee training, and breach notification protocols.
Requests to review or update information under FERPA or SHIELD may be submitted to our administration office (see contact below).
8. Cookies and Website Analytics
Our website may use cookies or third-party analytics tools to better understand user behavior and improve site functionality. You may disable cookies via your browser settings. Note that some features of our site may not function properly without them.
9. Your Rights and Choices
You may:
- Request access to or correction of your personal data
- Withdraw consent to data collection (where applicable)
- Request deletion of non-essential personal information
- Revoke data access granted to Stripe via their user portal or your financial institution
We will respond to requests in accordance with applicable federal and state privacy laws.
10. Updates to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Updates will be posted with a revised "Effective Date." Please check this page periodically to stay informed.
11. Contact Us
For questions about this Privacy Policy or your rights, please contact:
The Shirley Aninias School Attn: Chief Operating Officer291 Broadway, 1103 New York, NY 10007 admissions@thesaschool.com (212) 229-5021