Privacy Policy

Last updated: [DATE]

This Privacy Policy explains how [LEGAL ENTITY NAME] (“Zen Mind Analytics”, “ZMA”, “we”, “us”) collects, uses, shares and protects your personal data when you use academy.zenmindanalytics.com or enrol in our programmes. We are the “Data Fiduciary” for your personal data under the Digital Personal Data Protection Act, 2023.

This policy follows the Information Technology Act, 2000 and its rules, the Digital Personal Data Protection Act, 2023, and, for learners in the European Union or United Kingdom, the General Data Protection Regulation (GDPR).

1. Information we collect

Information you give us

• Contact and enquiry details: name, email address, phone or WhatsApp number, city, and the information you share in enquiry or counselling forms.

• Profile and education details: current class, course or qualification, institution, work experience and career goals.

• Enrolment and billing details: billing name and address, GSTIN (for business invoices) and payment records. Card, UPI and bank details are collected and processed by our payment gateway, not by us.

• Parent or guardian details: for learners under 18, the parent’s or guardian’s name and contact details.

• Corporate client details: name, designation, company and contact details of the person arranging training.

Information created while you learn

• Course progress, attendance, quiz and assessment results, assignments, certificates and feedback.

• Questions and messages you post in sessions, forums or groups.

• Session recordings, which may include your voice, video or chat messages if you turn them on during a live session.

Information collected automatically

• IP address, browser and device type, pages visited, time spent and referring website.

• Cookies and similar technologies (see Section 8).

2. How we use your information

We do not sell your personal data. We do not use it for any purpose not listed here without telling you first and, where required, asking for your consent.

3. Your consent

When you submit a form, enrol or accept our cookie banner, we ask for your consent for the purposes described. You can withdraw consent at any time by writing to [SUPPORT EMAIL] or using the unsubscribe link in our emails. Withdrawing consent does not affect processing already carried out. If you withdraw consent needed to deliver a programme, we may be unable to continue providing it.

4. Children’s data

• We collect personal data of learners under 18 only with verifiable consent from a parent or legal guardian.

• We use children’s data only to deliver their programme and communicate with their parent or guardian.

• We do not track, profile or monitor the behaviour of children, and we do not direct targeted advertising at them.

• A parent or guardian may contact us at any time to review, correct or delete their child’s data.

5. Who we share information with

We share personal data only where needed for the purposes above, and only with parties bound to protect it:

6. Transfers outside India

Some of our service providers may store or process data outside India. Where this happens, we take reasonable steps to make sure your data receives a level of protection consistent with this policy and Indian law, and we follow any restrictions notified by the Government of India.

7. How long we keep your information

After these periods, we delete or anonymise your data unless the law requires us to keep it longer.

8. Cookies

Cookies are small files stored on your device. We use:

• Essential cookies to keep you logged in and the Website working. These cannot be switched off.

• Analytics cookies to understand how visitors use the Website. These are used only with your consent.

• Marketing cookies, if any, to measure the effectiveness of our advertising. These are used only with your consent.

You can change your choice through our cookie banner or your browser settings. Blocking essential cookies may stop parts of the Website from working.

9. How we protect your information

We use reasonable security practices, including encrypted (HTTPS) connections, access controls limited to staff who need the data, secure passwords, and payment processing through a PCI-DSS compliant gateway. No system is completely secure. If a personal data breach occurs, we will notify affected users and the relevant authorities as required by law.

10. Your rights

Under Indian law you have the right to:

• get a summary of the personal data we hold about you and how we use it;

• correct, complete or update inaccurate or incomplete data;

• ask us to erase data that is no longer needed, unless the law requires us to keep it;

• withdraw consent at any time;

• have your grievances addressed by our Grievance Officer;

• nominate another person to exercise your rights in the event of your death or incapacity.

If you are in the EU or UK, you also have the right to data portability, to object to or restrict processing, and to complain to your local data protection authority.

To exercise any right, email [SUPPORT EMAIL] from your registered email address. We may need to verify your identity. We aim to respond within 30 days.

11. Marketing communications

We send marketing emails and WhatsApp messages only with your consent. You can opt out at any time by clicking “unsubscribe” in an email, replying “STOP” on WhatsApp, or writing to us. You will still receive service messages about programmes you are enrolled in.

12. Links to other websites

Our Website may link to other websites, such as exam bodies or free learning resources. We are not responsible for their privacy practices. Please read their policies before sharing your data with them.

13. Changes to this policy

We may update this policy to reflect changes in our services or the law. The “Last updated” date shows the latest version. We will notify you by email of any significant change.

14. Grievance Officer and contact

If you are not satisfied with our response, you may approach the Data Protection Board of India once it is available to receive complaints.