Your data

Privacy Notice

Version 2026-10-19 · Effective from 19 October 2026

This notice tells you, in plain words, what personal data we collect when you book a place in the CBSE Class 11 or Class 12 batch, why we collect it, how it is protected, how long we keep it, and how you can control it. It follows India's Digital Personal Data Protection Act, 2023 and its Rules. हिंदी में पढ़ें.

1. Who we are

Pranav Golechha ("we") decides why and how your data is used (the "Data Fiduciary"). He is also the person to contact about your data and any complaint: hello@pranavgolechha.in.

2. What we collect, and why

We collect only what each purpose needs, and we use it only after you agree to this notice by ticking the box on the booking form. Every purpose is listed here.

To book your place: your name, mobile number, email address, city and pincode. We use these to create your booking, take payment, tell you your admission status, contact you about the batch, and understand where our students join from.
To take payment and make refunds: a payment reference, the amount and status from Razorpay, and refund details. We never receive your card, UPI or bank details. Razorpay collects them on its own page.
If you are under 18: your parent or guardian's name, mobile number and email address, and a record of their consent (section 5).
To prove your consent: what you agreed to, when, and which version of this notice you saw.
After you are admitted (the student portal): a login ID and a password (we keep only a one-way hash of the password). If you are 18 or older, we also record which study materials you open and your quiz scores, to trace copies shared outside the batch and to follow your progress. For students under 18 we do not record which pages are opened. We keep only sign-in security events, and quiz results are for the student and teacher to help you study.
To answer your data requests: your name, email address, what you write to us and our reply.
For security: your IP address is turned into an irreversible code and kept in security logs for one year, only to detect abuse and because the law requires logs to be kept.

We do not collect identity documents or photographs, and we never ask for a password to any other account.

3. What we do not do

We never sell your data, share it for advertising, profile you, or use it to send marketing. Any future marketing would need your separate, optional consent.
The site has no analytics, no advertising trackers, no third-party scripts and no cookies except the sign-in session of the student portal and the admin area.
We make no automated decision about you other than the booking status: whether you are admitted to the batch depends on the places available when your payment is received. If you are not admitted into the batch, the full amount is refunded within seven working days.

4. Your consent, and how to withdraw it

You give consent by ticking the box on the booking form, after reading this notice. It is for the purposes in section 2 only. You can withdraw it at any time, as easily as you gave it, from Your data rights (or by writing to us). Withdrawing ends your booking or portal access, we then erase your data unless the law requires us to keep it, and we refund as described in the Terms. Withdrawal does not affect what was done lawfully before you withdrew.

5. Students under 18

If you are under 18, we need a parent or guardian's consent, not only yours. When you book, we email your parent or guardian a private link. They read what we hold and choose Consent or Do not consent, and we record their answer. We may also call them. Until your parent or guardian confirms, we do not give you portal access, and if they refuse we do not admit you, we refund any payment within seven working days and we erase your data. We do not track or monitor children, we do not show them advertising, and we do not use their data for anything except running the batch. A parent or guardian can withdraw consent or ask for erasure at any time from Your data rights.

6. Who handles your data

Hostinger hosts this website and delivers our emails for us, under its own security commitments. Its servers may be outside India. The Act allows this except to countries the Government of India restricts, and we will move hosting if that ever changes.
Razorpay is the licensed payment company that collects your payment and processes refunds. It has its own privacy policy.

We disclose data to no one else, unless the law or a court requires it. Links to Instagram take you to a service with its own privacy policy.

7. How it is protected

The site is served over HTTPS only. Bookings, student accounts and requests are stored encrypted (AES-256) in a private area that cannot be reached from the web.
Passwords are never stored, only a one-way hash. The admin area and student portal have rate-limited, lockout-protected sign-in. Only we, and each student for their own account, can see the data.
Fonts and scripts are served from this site. Abuse limits and duplicate checks protect the booking form.

No system is perfectly secure. If a breach affects your data, we will tell you and the Data Protection Board of India, as the law requires.

8. How long we keep it

A booking where payment was never completed: erased within 30 days.
Students not admitted, whose payment is refunded: erased within 90 days after the refund, except the payment and refund record.
Admitted students: while the batch runs, and then erased within 90 days after it ends, including the student portal account and logs.
Payment and refund records: for as long as tax and accounting law requires (generally six to eight years).
Parent consent records and data-request records: three years, as proof that we handled your data properly.
Security logs: one year.
Encrypted backups are overwritten in the normal course and are used for nothing else.

9. Your rights

You can ask us to: show you the data we hold about you and how we use it; correct, complete or update it; erase it; or withdraw your consent. You can also nominate another person to exercise these rights for you if you die or cannot act. Use Your data rights. We will check that the request really comes from you (or your parent or guardian), and we will reply within 30 days.

10. Complaints

For any complaint about your data, use Your data rights and choose "Make a complaint", or write to Pranav Golechha at hello@pranavgolechha.in. We reply within 30 days. If you are not satisfied with our reply, you may complain to the Data Protection Board of India.

11. Changes to this notice

If this notice changes, the new version and its date will be published here, and what you agreed to is recorded against the version you saw. This notice is available in English and in Hindi (हिंदी).