Privacy Policy — ConfirmYourCollege

This policy explains what personal data ConfirmYourCollege ("ConfirmYourCollege", "we") collects, why, and what you can require us to do with it. It is written to comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act), which is the law that governs us.

The short version

We collect only what you type into a form on this site. Nothing else.
We use it to reply to your enquiry and arrange counselling. That is all.
We do not sell it, rent it, or share it with colleges, coaching centres or lenders.
We set no cookies and run no tracking or advertising pixels.
You can ask us to delete everything we hold about you, and we will.

Who is responsible for your data

ConfirmYourCollege is the Data Fiduciary for the personal data described here. Our registered address is Elite Homz, Gamma 1, Greater Noida, Uttar Pradesh,201310, India.

What we collect, and why

Data	Why we need it
Name	To address you correctly
Phone number	To reply, usually by WhatsApp, and to arrange sessions
Email address	To send confirmations and session summaries
Stage of study and area of interest	To route you to the right mentor
Your message	To answer the question you actually asked
Parent or guardian name and phone, where the student is under 18	Required by law before we may process a child's data (see below)

We do not ask for your date of birth, address, identity documents, marks sheets or payment details through this website. If you send them to us by email or WhatsApp, we hold them only as long as needed to advise you.

Children under 18

Many of the students we work with are minors, and the DPDP Act treats their data more protectively than an adult's. Accordingly:

We require verifiable parental consent. Where an enquiry concerns a student in a JEE candidate and is submitted by the student, our form requires a parent or guardian's name, contact number and explicit confirmation before we will process it.
We contact the parent or guardian, not the child, for anything relating to that enquiry.
We never track children's behaviour and never serve targeted advertising to them.Section 9(3) of the DPDP Act prohibits both outright. This is one reason we run no advertising or behavioural analytics anywhere on this site, for anyone.

If you believe we hold data about a child without proper consent, emailsatyamraj.cyc@gmail.com and we will delete it.

The legal basis

We process your data on the basis of your consent, given by ticking the box on our enquiry form. That consent is specific to replying to your enquiry and providing counselling. You may withdraw it at any time — see "Your rights" below — and withdrawing it is as easy as giving it.

Who we share it with

We do not sell or rent your data, and we do not pass it to any college, university, coaching institute, lender or agent. We have no commercial arrangements with any of them.

We use a small number of service providers to run the site:

Cloudflare — hosting, spam protection and cookieless analytics.
Resend — sending transactional email such as confirmations.
Cal.com — session scheduling, if you book through the calendar.
Meta (WhatsApp) — if you choose to message us there, WhatsApp's own terms apply to that conversation.

Each is bound to process data only on our instructions. Some may store data outside India; the DPDP Act permits this except to countries specifically restricted by the Central Government.

How long we keep it

Enquiries that do not become clients: 24 months, then deleted automatically.
Client records: for the duration of the mentorship and 3 years afterwards, so we can answer questions about advice we gave.
Anything you ask us to delete: removed within 30 days, regardless of the above.

How we protect it

The entire site is served over HTTPS with HSTS enforced.
Enquiry data is stored in an access-controlled database, reachable only by our mentors.
Every account with access requires two-factor authentication. There are no shared logins.
Personal data is excluded from our application logs and error reports.
We keep encrypted backups and test that they restore.

No system is perfectly secure. If a breach affects your data we will notify you and the Data Protection Board of India as the DPDP Act requires.

Your rights

Under the DPDP Act you may:

Access the personal data we hold about you.
Correct or complete anything inaccurate.
Erase your data, where we are not required to keep it.
Withdraw consent at any time, after which we stop processing and delete.
Nominate another person to exercise these rights if you die or become incapacitated.
Complain to us, and then to the Data Protection Board of India if unsatisfied.

To exercise any of these, email satyamraj.cyc@gmail.com. We do not charge for this and we will not ask why.

Grievance Officer

As required by Section 13 of the DPDP Act, we publish a contactable grievance officer:

Name: Satyam Raj
Designation: Grievance Officer
Email: satyamraj.cyc@gmail.com
Response time: within 30 days

Cookies and tracking

This website sets no cookies. Our analytics are anonymous and cookieless, and we run no advertising or behavioural tracking of any kind. See our Cookie Policy for the detail.

Changes

If we change this policy materially we will update the date at the top and, where the change affects how we use data you have already given us, tell you directly.

Questions: satyamraj.cyc@gmail.com ·+91 88487 57374 · confirmyourcollege.com