Privacy Policy

1. General

We are committed to protecting your privacy. This Policy applies to all individuals, schools, and institutions ('you') that interact with us — whether through our website, service agreements, training programmes, or correspondence. We collect only the data we need, use it responsibly, and safeguard it at all times.

Key Terms: "Personal Data" means any information that identifies you. "Processing" means any operation performed on that data. "Data Fiduciary" refers to Birla Smart Path (the entity deciding how data is used). "Data Principal" refers to you, the individual whose data it is.

2. Collection of Data

We collect the following types of information:

• Identity & Contact Data:

  Your name, designation, email address, phone number, and institutional address

• Institutional & Professional Data:

  School infrastructure details, teacher profiles, academic standards, and performance metrics shared during service delivery

• Financial Data:

  Bank or payment details collected solely for billing and statutory compliance purposes

• Technical & Usage Data:

  IP address, browser type, pages visited, and cookies collected automatically when you use our website

We do not collect Personal Data from children below 18 years directly. Student data, if any, is received from your institution which is responsible for obtaining the necessary parental consents.

3. Use of Information

We use your information only for the following purposes:

• To deliver our school transformation, curriculum, and teacher training services;

• To communicate service updates, progress reports, and relevant notifications;

• To process payments and maintain financial records as required by law;

• To improve our website, tools, and service offerings;

• To comply with legal and regulatory obligations under Indian law;

• To send promotional communications about our programmes — only with your consent, which you may withdraw at any time

Legal basis: We process your data based on your consent, performance of a contract, compliance with a legal obligation, or legitimate purposes as recognised under the DPDPA, 2023.

4. Sharing and Disclosure

We do not sell or rent your data. We may share it only in these limited situations:

• Service Providers:

  Trusted third-party vendors (e.g. cloud hosting, payment gateways, training platforms) who process data strictly on our instructions and under binding confidentiality agreements

• Legal Authorities:

  Government agencies, courts, or regulators when required by law or to protect the rights and safety of any person

• Business Transfers:

  In case of a merger or acquisition, your data may be transferred to the successor entity under equivalent data protection obligations

5. Storage, Retention and Security

Your data is stored on secure servers in India. We keep it only as long as necessary under the relevant laws of India.

We protect your data using encryption, role-based access controls, firewalls, regular security audits, and staff training. In the unlikely event of a data breach, we will notify the Data Protection Board of India and affected individuals as required by law.

Your Rights: Under the DPDPA, 2023, you have the right to access, correct, or erase your Personal Data; withdraw consent; seek grievance redressal; and nominate a representative. To exercise these rights, please contact our Grievance Officer (see Section 7).

6. Third Party Websites, Applications and Services

Our website may contain links to third-party websites or use third-party tools (such as analytics, payment gateways, or video platforms). We are not responsible for their privacy practices. Please review their privacy policies before sharing any personal information with them.

Cookies: We use strictly necessary cookies (for website operation), analytics cookies (to understand usage), and, with your consent, advertising cookies. You can manage cookie preferences through the banner on our website or your browser settings. Disabling certain cookies may affect website functionality.

7. Queries and Complaints

We take your privacy concerns seriously. If you have any questions about this Policy, wish to exercise your data rights, or have a complaint about how we handle your information, please contact our Grievance Officer:

We will acknowledge your query within 48 hours and resolve it within 30 days. If you remain unsatisfied, you may escalate the matter to the Data Protection Board of India, once constituted under the DPDPA, 2023.