Privacy Policy
Privacy Ecole Solutions Pvt Ltd (“Ecole”, “we”, “us”, “our”) is committed to protecting the privacy and security of the personal information of all users of our websites, platforms,services, and solutions.
This Privacy Policy explains how we collect, use, disclose, store,
and safeguard your personal data in accordance with applicable Indian and international data protection laws.
By accessing or using our website or services, you consent to the practices described in
this Privacy Policy.Policy
1. Data We Collect
We may collect the following categories of information:
1.1 Personal Information
-
Name, email address, mobile number, organisation name
-
User account details
-
Billing and transaction information
-
Communication preferences
1.2 Sensitive Personal Data (only where required)
-
Government-issued IDs for verification (e.g., Aadhaar/Passport only when strictly necessary)
-
Assessment-related identity details
-
Information related to students, test takers, faculty, and exam administrators
1.3 Technical & Usage Data
-
IP address and location (approximate)
-
Browser type, device information
-
Pages visited, time spent, and clickstream data
-
Cookies and similar technologies
1.4 Assessment, Onboarding, and Proctoring Data (If Applicable)
-
Webcam video, microphone audio, and screen capture
-
Exam logs, behaviour alerts, and recorded responses
-
Identity verification images or documents
2. How We Use Your Information
We may collect the following categories of information:
-
To provide and maintain our services, platforms, and assessments
-
To deliver learning, testing, reporting, analytics, and evaluation
-
To personalise user experience and communicate platform updates
-
To comply with legal and regulatory requirements
-
To improve security, prevent fraud, and ensure academic integrity
-
To process payments and manage customer relationships
We do not sell personal data under any circumstance.
3. Legal Basis for Processing
Under Indian Law (DPDP Act 2023 & IT Act 2000):
-
Consent of the Data Principal
-
Performance of services requested
-
Compliance with legal obligations
-
Employment-related purposes
-
Reasonable purposes, such as fraud prevention
Under GDPR / UK GDPR (where applicable):
-
Consent
-
Contractual necessity
-
Legitimate interests
-
Legal compliance
-
Protection of vital interests
Under CCPA (California):
-
Notice at collection
-
Right to access, delete, correct, and opt-out of data sharing
4. Cookies and Tracking Technologies
We may use:
-
Essential cookies
-
Analytics cookies
-
Performance cookies
-
Session identifiers
-
Third-party tools (e.g., Google Analytics, reCAPTCHA, payment gateways)
Users may manage cookie preferences through browser settings.
5. Data Sharing and Disclosure
We may share data with:
-
Technology service providers (hosting, cloud, analytics, payments)
-
Proctoring and assessment partners (where applicable)
-
Affiliated companies within Ecole Solutions group
-
Regulatory or law enforcement authorities where required by law
All third parties are bound by data protection agreements and confidentiality obligations.
6. International Data Transfers
Where personal data is transferred outside India, the European Union, or other jurisdictions:
-
Transfers are made under legal safeguards, including Standard Contractual Clauses (SCCs), Data Transfer Agreements, or government-approved mechanisms.
-
We ensure an adequate level of protection consistent with GDPR and DPDP requirements.
7. Data Retention
We retain personal data only for as long as necessary for the purpose collected, or as required by:
-
Education and testing regulations
-
Contractual obligations
-
Legal and audit requirements
-
Applicable national or international laws
Assessment/proctoring data may be stored for a limited period (e.g., 30–180 days) unless contractually required otherwise.
8. Data Security
We implement administrative, technical, and physical safeguards including:
-
Encryption at rest and in transit
-
Secure access controls and authentication
-
Audit logs and monitoring
-
Regular security testing
-
GDPR- and DPDP-aligned breach response protocols
9. Your Rights
Under Indian DPDP Act (2023):
-
Right to access
-
Right to correction
-
Right to erasure
-
Right to grievance redressal
-
Right to withdraw consent
Under GDPR / UK GDPR:
-
Right to be informed
-
Right of access and portability
-
Right to rectification
-
Right to restrict/ object
-
Right to erasure (“right to be forgotten”)
Under CCPA:
-
Right to know what data is collected
-
Right to delete
-
Right to correct
-
Right to opt-out of data sharing
Requests may be made through our Data Protection Officer (DPO).
10. Children’s Data
We do not knowingly collect data from children under applicable age thresholds without appropriate parental or institutional consent, as required by Indian and international laws.
11. Third-Party Links
Our websites or platforms may contain links to third-party sites. We are not responsible for their privacy practices.
12. Updates to This Policy
We may update this Privacy Policy periodically. Any changes will be posted on the website with the updated date.
13. Contact Information
Ecole Solutions Pvt Ltd
Email: privacy@ecoleglobal.com
Phone: {{Insert number}}
Address: {{Official registered address}}