Privacy Policy

1Information We Collect

We collect only the information necessary to deliver quality education services to you.

Personal Information

Identity: Full name, date of birth, gender, qualification
Contact: Email address, mobile number, postal address, city, state
Account: Username, encrypted password, profile photo (optional)
Educational: Course preferences, enrollment history, lesson progress, quiz attempts, certificates earned

Payment Information

UPI ID, transaction reference (UTR), payment screenshot
For Razorpay and Cashfree gateways, card details are captured directly by the gateway. We never store them.

Technical & Usage Data

IP address, browser type, device information, operating system
Pages visited, time spent, click patterns (for site improvement)
Login timestamps and session information

Sensitive Data

We do not collect Aadhaar numbers, PAN, biometric data, or health records. If any additional identity documents are required during admission (for example, ID proof for certificate issuance), they are deleted immediately after verification.

2How We Use Your Data

Your data is used only for the following purposes:

Creating your account and providing access to the LMS
Completing admission, verifying payments, and issuing certificates and ID cards
Sending course content, schedules, exam reminders, and important updates by email or SMS
Handling support tickets and responding to your queries
Improving website usability and preventing fraud
Meeting legal requirements (Income Tax, GST, court orders where applicable)

We never sell your data to marketing companies. Any promotional content is limited to our own services, and you can unsubscribe at any time.

3Sharing & Disclosure

Your personal information is shared only in the following cases:

Service Providers: Hosting providers, email delivery services (Brevo, SendGrid), and payment gateways (Razorpay, Cashfree) — only to deliver the service. All providers operate under GDPR or DPDP-compliant data processing agreements.
Franchise Partners: If you enroll at a franchise branch, the authorized branch admin can view your contact and course information strictly for operational purposes.
Legal Compliance: Where required by a court order, government investigation, or fraud prevention activity.
Business Transfer: In the event of a merger or acquisition, you will be given prior notice and an opt-out option.

4Payments & Financial Data

We support three payment methods:

UPI QR (Manual): You pay via UPI and submit a screenshot plus UTR. This data is stored in our encrypted private storage and accessible only to authorized admins.
Razorpay: Card and net banking details are processed on Razorpay's PCI-DSS Level 1 certified servers. We only receive the payment status.
Cashfree: Similarly, we only receive the payment session ID and final status.

We never store your card number, CVV, or bank password.

5Cookies & Tracking

Our website uses a small number of cookies. Full details are available on our Cookie Policy page. In short:

Essential: Login session and security tokens (required)
Functional: Language, theme, and course progress preferences
Analytics: Anonymous traffic patterns used only to improve the site

6Data Retention

As long as your account is active, your data remains securely stored
Inactive accounts: retained for up to 3 years, then automatically deleted
Certificates and transcripts: retained for life so verification remains possible
Payment records: retained for 8 years (mandatory under the Income Tax Act)
Support tickets: retained for 2 years

7Your Rights (DPDP Act 2023)

Under the Indian Digital Personal Data Protection Act, you have the following rights:

Access: View all data we hold about you (by request)
Correction: Correct inaccurate or outdated information
Erasure: Request account deletion (subject to legal retention requirements)
Withdraw Consent: Stop marketing communication at any time
Grievance: Raise concerns with our Data Protection Officer

To exercise any of these rights, email info@rkshiksha.com. We respond within 30 days.

8Security Measures

HTTPS encryption (SSL/TLS) across the entire website
Passwords stored using bcrypt hashing — never in plain text
Payment screenshots kept in a private, auth-gated directory
Role-based access control: branch admins can only see data for their own branch
Rate-limiting and nonce protection on all forms (CSRF prevention)
Regular security audits and backups

Despite our best efforts, no internet service can guarantee 100% security. If you suspect any unauthorized access or breach, please contact info@rkshiksha.com immediately.

9Children's Privacy

Our services are not intended for children under 13 years of age. If you are under 18, enrollment requires consent from a parent or guardian. We do not knowingly collect data from children under 13; if such data is collected by mistake, it is deleted promptly.

10Changes to This Policy

This policy may be updated from time to time. For material changes, we will notify you by email at least 30 days in advance. The "Updated" date at the top reflects the latest revision, and this page always shows the current version.

11Contact Us

For any privacy-related question, complaint, or request, please contact:

Data Protection Officer: Rishikul Shiksha Career Academy
Brahamdutt Chowk, Barotiwala, Vikasnagar
Dehradun, Uttarakhand 248198
Email: info@rkshiksha.com
Phone: +91 89797 75664 (Mon–Sat, 9 AM – 7 PM)