Privacy Policy

1. Who we are

GyaanLab is the brand of GYAANLAB ACADEMY, a sole proprietorship registered under MSME, a K-12 coaching academy based at Survey No. 36, Kharadi, Haveli, Pune — 411014, Maharashtra, India. For the personal data described here, we are the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023 (DPDP) — the people responsible for deciding how and why your data is used. You can reach us about anything in this policy at contact@gyaanlab.in.

2. What we collect

We only collect what you choose to give us, plus a little technical information needed to keep the site secure:

• Enquiry, demo and enrolment forms:the student’s name, a parent or guardian’s phone number, an optional email address, the grade, the area of interest, and any message you write.
• Resource requests: your name, email, grade, subject, topic, and any notes you add.
• Newsletter: just your email address.
• Technical and usage data:when you submit a form, we store the IP address and browser user-agent with that submission for security and anti-spam. If you accept analytics in our cookie banner, we run our own first-party, anonymous analytics — the page path, the referring site’s host, an anonymous visitor id, your viewport size, and a coarse country guess — and we also use Google Analytics, a third-party service from Google that sets its own cookies and processes usage data under Google’s privacy policy. We use analytics only to understand how the site is used, never for advertising — and nothing analytics-related, first-party or Google, loads until you accept.

3. Children’s data

Most of our students are minors, and our forms collect a student’s name and grade. We process a child’s personal data onlyon the basis of consent given by a parent or legal guardian. The tick-box on each online form records the parent/guardian’s consent for us to act on your enquiry; as we are an in-person coaching academy, full verifiable parental consent is confirmed in writing at the centre when a student joins. We do not run targeted advertising directed at children, and we never link our analytics to a named student. Our analytics — our first-party measurement and Google Analytics — is anonymous and aggregate, and runs only if a parent or guardian accepts it in the cookie banner; you can decline, or withdraw, at any time.

Achievements wall.With a parent or guardian’s consent obtained in person, we may feature a student’s first name, photo, grade, year and achievementon the public Achievements page. We never publish a student’s school or any contact details, and that page is excluded from search engines. You can ask us to remove any entry at any time by emailing contact@gyaanlab.in.

4. Why we use it

We use your details to respond to your enquiries, schedule demo classes, manage your interest in enrolment, deliver the newsletter you asked for, and keep the website secure and working. Under the DPDP Act, our lawful basis for all of this is your consent.

5. Consent & withdrawal

We collect your consent through a clear, affirmative tick-box on each form — it is never pre-ticked or assumed. You can withdraw your consent at any time by emailing contact@gyaanlab.in, and withdrawing is as easy as giving it. Withdrawing consent does not affect any processing we had already carried out lawfully before you withdrew.

6. Cookies & analytics

We use one essential cookie — the admin session cookie used when our staff sign in (set as HttpOnly, SameSite=Strict and Secure). Beyond that, the only cookies are set with your consent: our own first-party analytics and preferences cookie, and the cookies set by Google Analytics. Our cookie banner lets you accept or decline analytics, and nothing optional — including Google Analytics — is set or loaded until you accept. A small “grade you last viewed” preference is kept in your browser’s local storage so the site remembers where you were.

7. Sharing & third parties

We do not sell or rent your personal data to anyone, ever. To run the service we rely on a transactional email/SMTP provider that sends admin one-time codes and any newsletter you subscribe to, and a hosting provider that runs the website. They process data only to provide these services to us, and your data otherwise stays exactly as described in this policy. If you accept analytics, we also use Google Analytics to measure how the site is used; Google acts as a third party and may set its own cookies. Our contact page additionally embeds a Google Mapsview of the campus; it only loads when you choose to (“Load map”), and when loaded Google may set cookies too. Both Google services are governed by Google’s privacy policy.

8. Where data is stored & security

Your data is hosted with a reputable hosting provider on a secured server. We follow reasonable security practices in line with the IT Rules and DPDP §8(5), including: encryption in transit (HTTPS/TLS), admin passwords stored only as scrypt hashes (never in plain text), secrets encrypted at rest, rate limiting against abuse, and strict access controls so only authorised staff can reach personal data.

9. How long we keep it

We keep your data only as long as we need it for the purpose you gave it, and deletion is enforced automatically:

• Enquiry, demo and resource-request records (which may include a student’s name and grade) are automatically deleted once they are older than 24 months — or sooner if you ask us to erase them.
• Newsletter emails are kept only until you unsubscribe.
• First-party analyticsis anonymised and automatically trimmed after about six months, so it is never retained indefinitely. Any data held by Google Analytics is kept under Google’s own retention settings and policy.

10. Your rights

Under the DPDP Act (§§11–14), you have the right to:

• access a summary of the personal data we hold and how we process it;
• have your data corrected, completed or updated;
• have your data erased;
• raise a grievance and have it redressed; and
• nominate someone to exercise these rights on your behalf.

To exercise any of these, email contact@gyaanlab.in. We will respond within 7 working days.

11. Grievance Officer

If you have a concern about your data, you can contact The Proprietor, GYAANLAB ACADEMY at contact@gyaanlab.in, or by post at Survey No. 36, Kharadi, Haveli, Pune — 411014, Maharashtra, India. If you are not satisfied with our response, you may make a complaint to the Data Protection Board of India.

12. Data breaches

If a personal data breach affects your data, we will notify you and the Data Protection Board of India as required by the DPDP Act.

13. Changes & governing law

We update this page whenever our practices change; the date below tells you when it was last revised. This policy is governed by the laws of India.