Privacy Policy

Privacy Ecole Solutions Pvt Ltd (“Ecole”, “we”, “us”, “our”) is committed to protecting the privacy and security of the personal information of all users of our websites, platforms,services, and solutions.

This Privacy Policy explains how we collect, use, disclose, store,
and safeguard your personal data in accordance with applicable Indian and international data protection laws.

By accessing or using our website or services, you consent to the practices described in
this Privacy Policy.Policy

1. Data We Collect

We may collect the following categories of information:

1.1 Personal Information

Name, email address, mobile number, organisation name
User account details
Billing and transaction information
Communication preferences

1.2 Sensitive Personal Data (only where required)

Government-issued IDs for verification (e.g., Aadhaar/Passport only when strictly necessary)
Assessment-related identity details
Information related to students, test takers, faculty, and exam administrators

1.3 Technical & Usage Data

IP address and location (approximate)
Browser type, device information
Pages visited, time spent, and clickstream data
Cookies and similar technologies

1.4 Assessment, Onboarding, and Proctoring Data (If Applicable)

Webcam video, microphone audio, and screen capture
Exam logs, behaviour alerts, and recorded responses
Identity verification images or documents

2. How We Use Your Information

We may collect the following categories of information:

To provide and maintain our services, platforms, and assessments
To deliver learning, testing, reporting, analytics, and evaluation
To personalise user experience and communicate platform updates
To comply with legal and regulatory requirements
To improve security, prevent fraud, and ensure academic integrity
To process payments and manage customer relationships

We do not sell personal data under any circumstance.

3. Legal Basis for Processing

Under Indian Law (DPDP Act 2023 & IT Act 2000):

Consent of the Data Principal
Performance of services requested
Compliance with legal obligations
Employment-related purposes
Reasonable purposes, such as fraud prevention

Under GDPR / UK GDPR (where applicable):

Consent
Contractual necessity
Legitimate interests
Legal compliance
Protection of vital interests

Under CCPA (California):

Notice at collection
Right to access, delete, correct, and opt-out of data sharing

4. Cookies and Tracking Technologies

We may use:

Essential cookies
Analytics cookies
Performance cookies
Session identifiers
Third-party tools (e.g., Google Analytics, reCAPTCHA, payment gateways)

Users may manage cookie preferences through browser settings.

5. Data Sharing and Disclosure

We may share data with:

Technology service providers (hosting, cloud, analytics, payments)
Proctoring and assessment partners (where applicable)
Affiliated companies within Ecole Solutions group
Regulatory or law enforcement authorities where required by law

All third parties are bound by data protection agreements and confidentiality obligations.

6. International Data Transfers

Where personal data is transferred outside India, the European Union, or other jurisdictions:

Transfers are made under legal safeguards, including Standard Contractual Clauses (SCCs), Data Transfer Agreements, or government-approved mechanisms.
We ensure an adequate level of protection consistent with GDPR and DPDP requirements.

7. Data Retention

We retain personal data only for as long as necessary for the purpose collected, or as required by:

Education and testing regulations
Contractual obligations
Legal and audit requirements
Applicable national or international laws

Assessment/proctoring data may be stored for a limited period (e.g., 30–180 days) unless contractually required otherwise.

8. Data Security

We implement administrative, technical, and physical safeguards including:

Encryption at rest and in transit
Secure access controls and authentication
Audit logs and monitoring
Regular security testing
GDPR- and DPDP-aligned breach response protocols

9. Your Rights

Under Indian DPDP Act (2023):

Right to access
Right to correction
Right to erasure
Right to grievance redressal
Right to withdraw consent

Under GDPR / UK GDPR:

Right to be informed
Right of access and portability
Right to rectification
Right to restrict/ object
Right to erasure (“right to be forgotten”)

Under CCPA:

Right to know what data is collected
Right to delete
Right to correct
Right to opt-out of data sharing

Requests may be made through our Data Protection Officer (DPO).

10. Children’s Data

We do not knowingly collect data from children under applicable age thresholds without appropriate parental or institutional consent, as required by Indian and international laws.

11. Third-Party Links

Our websites or platforms may contain links to third-party sites. We are not responsible for their privacy practices.

12. Updates to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on the website with the updated date.

13. Contact Information

Ecole Solutions Pvt Ltd
Email: privacy@ecoleglobal.com
Phone: {{Insert number}}
Address: {{Official registered address}}