Legal
Privacy Policy
Effective date: 1 August 2026
[PLACEHOLDER] values before going live — it is not legal advice.1. Introduction — who we are
This Privacy Policy explains how [PLACEHOLDER — Legal Entity Name] (“we”, “us”, “our”), operating the website [PLACEHOLDER — https://yourdomain.com] and offering German language courses in Bengaluru, Karnataka, India, collects and processes your personal data. We act as the Data Fiduciary for the personal data described below, and you are the Data Principal, as those terms are used in the DPDP Act, 2023.
Registered address: [PLACEHOLDER — full registered address]. Contact: [PLACEHOLDER — contact email], +91 98118 66959.
2. What personal data we collect
Through our enquiry forms we collect only what we need to respond to you:
- Full name — required, so we can address you correctly.
- Mobile number — required, so a counsellor can call or message you.
- Email address — optional, used to send course details.
- German level of interest (A1, A2, B1, B2, or “assess me”) — required.
- Your message — optional free text you choose to share.
- Consent record, the form location on the page, the page URL and a submission timestamp.
We also receive data when you contact us directly by phone call or WhatsApp (your number and the content of your message), and technical data such as IP-derived approximate location, device and browser information collected by analytics cookies where those are enabled.
We do not ask for financial data, government ID numbers, health data or any other sensitive category through this website.
3. Purpose of processing
We process your personal data only for these specified purposes:
- To respond to your enquiry and share batch timings, fees and syllabus.
- To invite you to the free masterclass and recommend a suitable online batch.
- To follow up about your enrolment, and to deliver the course if you enrol.
- To send service messages about your batch, schedule changes or exams.
- To measure the performance of our advertising and website, in aggregate.
- To keep records required for our own legal and accounting obligations.
We do not sell your personal data, and we do not rent or trade contact lists.
4. Consent and withdrawal of consent
You give consent by ticking the consent checkbox on an enquiry form before submitting it. That checkbox is mandatory, unticked by default, and links to this policy — so consent is free, specific, informed, unconditional and unambiguous, with a clear affirmative action, as the DPDP Act requires.
You may withdraw consent at any time by emailing [PLACEHOLDER — grievance officer email] or replying “STOP” to our WhatsApp message. Withdrawal is as easy as giving consent. Once you withdraw, we stop processing your data for the purposes above within a reasonable period and erase it unless retention is required by law. Withdrawal does not affect the lawfulness of processing already carried out.
7. Data retention
We keep enquiry data for [PLACEHOLDER — e.g. 24 months] from your last interaction with us, after which it is deleted or anonymised. If you enrol, we retain course and payment records for as long as required under applicable tax and company law. If you withdraw consent earlier, we erase your data except where law requires us to retain it.
8. Data security
We apply reasonable security safeguards to prevent personal data breaches: HTTPS/TLS on all pages, access-restricted storage of the enquiry sheet, access limited to staff who need it, credential hygiene for third-party accounts, and periodic review of who holds access. In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required by the DPDP Act.
No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.
9. Your rights under the DPDP Act, 2023
As a Data Principal you have the right to:
- Access — a summary of the personal data we process about you and the processing activities involved.
- Correction, completion and updating — of inaccurate or incomplete data.
- Erasure — of your personal data, unless retention is required for a legal purpose.
- Grievance redressal — a readily available means to raise a complaint with us (see below).
- Nominate — another individual to exercise your rights in the event of your death or incapacity.
- Withdraw consent — at any time, as described in section 4.
To exercise any right, email [PLACEHOLDER — grievance officer email] from the email address or with the phone number you used. We respond within [PLACEHOLDER — e.g. 30 days]. You also have a duty not to submit false particulars or impersonate another person when making a request. If you are not satisfied with our response, you may approach the Data Protection Board of India.
10. Grievance Officer / data protection contact
Name: [PLACEHOLDER — Grievance Officer name]
Designation: [PLACEHOLDER — e.g. Data Protection Officer]
Email: [PLACEHOLDER — grievance officer email]
Phone: +91 98118 66959
Address: [PLACEHOLDER — full registered address]
11. Children's data
We do not knowingly process the personal data of anyone under 18 without verifiable consent from a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children, as prohibited by the DPDP Act. Enquiries for a minor learner must be submitted by a parent or guardian. If you believe a child's data has reached us without such consent, contact our Grievance Officer and we will erase it.
12. Changes to this policy
We may update this policy as our services, tools or the law change. The effective date at the top always reflects the current version, and material changes will be highlighted on this page. Where a change requires fresh consent, we will ask for it.
13. Contact us
[PLACEHOLDER — Legal Entity Name]
[PLACEHOLDER — full registered address]
Email: [PLACEHOLDER — contact email] · Phone: +91 98118 66959