Privacy policy

1. Scope and who we are

This Privacy Policy applies to edumonk.in, our course catalogue, enrolment and support journeys, certificate-verification service, communications and any learner experience that links to this policy (together, the “Services”).

The Services are offered under the brand EduMonk by PRAGYASHAL PRIVATE LIMITED (“Company”, “EduMonk”, “we”, “us” or “our”). For personal data for which we determine the purpose and means of processing, the Company acts as the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”).

Some parts of the learning experience may be hosted by an external learning-management platform or other service provider. Its own privacy notice may also apply where it independently determines how it processes your information.

2. Personal data we collect

Depending on how you interact with us, we may collect the following categories:

Identity and contact

Name, email address, mobile number, postal location or address where needed, account identifier and profile photo if you choose to provide one.

Profile and eligibility

Age or date-of-birth confirmation, college, educational background, profession, experience level, learning goals and guardian details where relevant.

Account and enrolment

Programme selected, enrolment date, learner-platform identifier, access status, preferences, support history and account-authentication records.

Learning activity

Lesson activity, progress, attendance where applicable, quiz and assessment results, assignments, projects, feedback, completion status and certificate eligibility.

Payment information

Order value, currency, payment status, transaction or reference ID, payment method category, invoice details and limited fraud-prevention signals. We do not intend to store your full card number, CVV, UPI PIN or banking password.

Device and usage

IP address, browser and device type, operating system, referring page, pages viewed, timestamps, approximate region, error logs and security events.

Communications

Enquiries, emails, form submissions, survey responses, complaints, consent records and calls or chats where that channel is offered.

Credential and dispatch records

Certificate ID, learner name, programme, result or credential status, issue date, Letter of Recommendation details, postal address, dispatch reference and the data required to issue, deliver or verify completion documents.

Please do not send government identifiers, financial credentials, health information or other highly sensitive information unless we specifically request it for a clearly explained and lawful purpose.

3. How we receive personal data

We receive data directly from you when you create an account, enrol, make a payment, submit coursework, request support, complete a form or communicate with us. We also receive data automatically from your device and from service providers that help us operate the Services.

Where another person, college, employer or guardian purchases or coordinates a programme for you, they may provide enrolment information. They must be authorised to do so, and we may ask you to confirm or correct that information.

4. How and why we use personal data

We process personal data for specified, lawful purposes, including to:

• respond to enquiries and recommend an appropriate Certificate of Specialisation;
• create and secure your account, confirm eligibility and process enrolment;
• provide access to learning content, labs, assessments, projects and learner support;
• track progress, evaluate submissions, determine completion and issue certificates;
• process payments, invoices, payment failures, approved reversals and fraud checks;
• issue soft-copy and hard-copy Certificates of Specialisation and Letters of Recommendation, arrange postal dispatch, support delivery and verify certificates;
• send service notices about access, schedules, assessments, security and policy changes;
• analyse and improve performance, content, accessibility and learner outcomes;
• prevent misuse, investigate incidents and enforce our Terms and Conditions;
• comply with tax, accounting, corporate, consumer-protection, law-enforcement and other legal duties; and
• send optional programme news or offers where you have consented or where otherwise permitted, with a way to opt out.

Where consent is the basis for processing, you may withdraw it using the method made available when consent was collected or by contacting us. Withdrawal does not invalidate processing already carried out and may prevent us from providing a feature that genuinely requires that data. We may also process data for uses expressly permitted by applicable law.

5. Payments and transaction data

Payments may be handled by the payment processor shown at checkout, including Razorpay where enabled. Payment credentials are entered into the processor's secure environment and are governed by its terms and privacy practices.

We receive limited transaction information needed to confirm payment, activate enrolment, issue an invoice, reconcile accounts, detect fraud and handle an approved exception under our No Refund Policy. Your bank, UPI app, card network and payment processor may independently process information under their own notices.

6. External learning platform

EduMonk may connect you to an external learning-management system (“External LMS”) for lessons, assessments, projects and progress tracking. To provision and support that access, we may share necessary information such as your name, email, programme, cohort, enrolment status and learner identifier with the External LMS provider.

The External LMS may collect its own device, usage and learning records. We will select providers under appropriate contractual and security arrangements where required. You should also review the privacy notice presented by the External LMS before using it.

7. Public certificate verification

Our verification service is designed to let employers, colleges and other third parties confirm whether an EduMonk credential is genuine. When a valid certificate ID is searched, we may display a limited verification record such as the learner's name, Certificate of Specialisation title, certificate ID, issue date and validity status.

We do not intend to publish grades, contact details, assessment submissions or payment information through this service. If a verification record is inaccurate, contact us with the certificate ID and evidence of the correction requested.

8. Cookies, local storage and analytics

We may use cookies, pixels and similar browser storage that are necessary to keep the site secure, remember preferences, maintain a session, support checkout and diagnose errors. If optional analytics or advertising technologies are enabled, we will provide notice and seek consent where applicable.

You can control non-essential browser storage through any consent controls we provide and through your browser settings. Blocking essential storage may affect login, checkout or other core functions. We do not respond to every browser “Do Not Track” signal because there is no single universally accepted standard for those signals.

9. When we share personal data

We may share only the data reasonably necessary with:

• service providers and data processors supporting hosting, email, customer support, identity, analytics, security, cloud storage, the External LMS, document printing and postal or courier dispatch;
• payment and financial providers for payment authorisation, settlement, invoicing, fraud prevention and dispute handling;
• professional advisers such as auditors, accountants, insurers and legal advisers subject to confidentiality duties;
• authorities or other parties where required by law, a valid legal process, protection of rights and safety, investigation of fraud or defence of legal claims;
• transaction participants in a proposed or completed merger, financing, reorganisation or transfer of business, subject to appropriate safeguards; and
• the public only to the limited extent described for certificate verification or where you deliberately publish content.

10. International processing

Some technology providers may process or store data outside the state or country where you live. Where personal data is transferred outside India, we will do so subject to applicable restrictions, contractual safeguards and any requirements notified by the Government of India.

11. How long we keep data

We retain personal data only for as long as necessary for the purpose stated in this policy or as required by law. Retention depends on the type of record, our relationship with you, account activity, certificate-verification needs, limitation periods and tax, accounting, fraud-prevention or regulatory obligations.

• Enquiry and optional marketing data is kept until it is no longer useful for the stated purpose, you opt out or applicable rules require deletion.
• Account, enrolment, transaction and learning records may be kept for the programme period and a reasonable period afterwards for support, credential integrity, disputes and legal compliance.
• Certificate, Letter of Recommendation and dispatch records may be retained longer so issued documents can remain accurate, supportable, verifiable and fraud-resistant.
• Security logs, backups and records subject to a legal hold may remain for their applicable operational or statutory period.

When retention is no longer necessary, we will delete, de-identify or securely isolate the data, subject to technical backup cycles and lawful exceptions.

12. Security and personal-data breaches

We use reasonable technical and organisational safeguards appropriate to the nature of the data and risk. These may include access controls, encryption in transit, secure configuration, logging, backups, vendor controls, restricted staff access and incident-response procedures.

No online service can guarantee absolute security. You are responsible for protecting your password, device and one-time codes and for notifying us promptly if you suspect unauthorised account use. If a personal-data breach occurs, we will investigate, mitigate it and provide notifications to affected individuals and the competent authority as required by applicable law.

13. Your privacy rights

Subject to the DPDP Act, its rules and other applicable law, you may have the right to:

• obtain a summary of personal data being processed and the processing activities;
• ask for correction, completion or updating of inaccurate or incomplete personal data;
• ask for erasure where the data is no longer required and retention is not legally necessary;
• withdraw consent with comparable ease where processing is based on consent;
• use our grievance-redressal process; and
• nominate another individual to exercise applicable rights in the event of your death or incapacity.

How to make a request

Email support@edumonk.in from your registered address with the subject “Privacy Request”. Describe the right you wish to exercise and provide the account or certificate identifier needed to locate the record. We may verify your identity before acting, ask for clarification and retain a record of the request where legally required.

We will respond within the period required by applicable law. If you are dissatisfied, first raise the matter with our Privacy and Grievance Contact. After exhausting that process, you may approach the Data Protection Board of India or another competent authority where the law permits.

14. Children and guardian consent

Under the DPDP Act, a child is an individual who has not completed eighteen years of age. A child may use the Services only with verifiable consent and supervision of a parent or lawful guardian where required.

Parents and guardians must review the programme, provide accurate information, supervise the child's use and contact us to exercise applicable rights on the child's behalf. We do not knowingly undertake tracking or behavioural monitoring of children, or targeted advertising directed at children, in a manner prohibited by applicable law. If we learn that a child's data was collected without required consent, we will take appropriate steps to restrict or delete it.

15. Service and marketing communications

We may send essential messages concerning your account, payment, access, assessments, certificates, security or material policy changes. Because these are operational, opting out of promotional messages will not stop them.

You may unsubscribe from marketing using the link in the message or by emailing us. We may retain a suppression record so we can honour your preference. Opt-out requests can take a reasonable period to apply across systems.

16. Your responsibilities as a Data Principal

Please provide accurate and authentic information, do not impersonate another person, do not suppress material information when submitting documents and do not register a false or frivolous grievance. Tell us when your information changes so that account, payment and certificate records remain accurate.

17. Changes, grievance contact and related policies

We may update this policy to reflect changes in law, technology, providers or the Services. The “last updated” date will show when the current version took effect. If a change materially affects how we use personal data, we will provide an additional notice where required.

Privacy and Grievance Contact

Grievance Officer / Privacy Contact
PRAGYASHAL PRIVATE LIMITED
EduMonk · edumonk.in
support@edumonk.in

For programme and payment terms, also review our Terms and Conditions and No Refund Policy.