1. Introduction

Vels Institute of Science, Technology and Advanced Studies (VISTAS),Chennai was declared a Deemed-to-be University by the Ministry of Education, Government of India, in 2008 is committed to safeguarding your privacy and ensuring appropriate management of your personal information. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information in accordance with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDPA) and the General Data Protection Regulation (GDPR).

2. Scope of the Policy

This policy applies to all personal information collected through our websites, mobile applications, and other online interfaces (collectively, the "Platforms"). By accessing or using our Platforms, you agree to the collection and use of your personal information as outlined in this policy.

3. Personal Information We Collect

We may collect the following types of personal information based on your interaction with our services:

• Identifiers : Full name, email address, phone number, contact preferences
• Account Information : Username, password, and other account-related data
• Location Information : IP address, geolocation data
• Payment Information : Payment methods, transaction history
• Usage Data : Interaction with our Platforms, including browsing patterns and preferences
• Technical Data : Device details, operating system, browser type
• Educational Information : Educational background, qualifications, and work experience
• Sensitive Personal Information : Collected with explicit consent (e.g., health data, race, ethnicity, etc.)

4. How We Use Your Personal Information

We use your personal information for the following purposes:

• To provide and maintain our services
• To personalize user experiences
• To respond to inquiries or requests
• To communicate about account-related matters, offers, services, and updates
• To send marketing materials (if you have opted in)
• To comply with legal, regulatory, and contractual obligations
• To analyse and improve our services
• To detect, prevent, and address technical issues and security threats
• Cross-Selling and Upselling: As part of our cross-selling and upselling activities, we may offer educational programs, courses, or services that align with your interests and needs based on your interaction with our Platforms.

5. Legal Basis for Processing Personal Information

Our legal basis for processing personal information includes:

• Consent: Where we have obtained your explicit consent
• Performance of Contract: Where processing is necessary to fulfil contractual obligations
• Legal Obligations: Where processing is required to comply with legal regulations
• Legitimate Interests: Where processing is based on our legitimate business interests, provided your rights do not override these interests

6. Opt-Out Process

You have the right to opt-out of marketing, up-selling, or cross-selling activities at any time. To opt-out:

• Log into your account and navigate to the Privacy Settings section.
• Manage your marketing preferences by unchecking marketing options.
• Click the 'Unsubscribe' link provided in any marketing email or SMS.
• Opt-out requests will be processed within 7 business days.

7. Compliance with Legal Obligations

We comply with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDPA) and guidelines from the University Grants Commission (UGC). We ensure that personal data is processed fairly, lawfully, and transparently, with appropriate consents obtained for sensitive data where required.

8. Transparency Data Collected and Purpose

We collect the following personal data:

• Identifiers: Full name, email address, phone number
• Account Information: Username, password
• Location Data: IP address, geolocation
• Payment Data: Payment methods, transaction history
• Educational Information: Qualifications, work experience

This data is collected for the following purposes:

• To provide and improve our services
• To personalize user experience
• To communicate offers and updates
• To comply with legal obligations
• To prevent fraud and enhance security

9. Data Security and Consent Management

We have implemented the following measures to protect your personal data:

• Encryption : Data at rest and in transit is encrypted using industry-standard encryption protocols (e.g., AES-256).
• Access Controls : Strict role-based access controls ensure only authorized personnel can access sensitive data.
• Consent Management : We obtain your consent through opt-in mechanisms (e.g., checkboxes) for marketing communications, data sharing, and processing of sensitive data. All consents are recorded and managed within our systems, and you may review or modify your consent settings via your account at any time.

10. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. Once personal information is no longer necessary, it will be securely deleted or anonymized.

11. Sharing of Personal Information

We may share your personal information with:

• Trusted partners providing services on our behalf
• Third parties in the event of a business transaction (e.g., transfer, assignment)
• Legal authorities as required by law

We ensure all third parties respect the security of your personal data and process it in accordance with applicable law.

12. Data Transfers

Your personal information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your information during these transfers.

13. Cookies and Similar Technologies

We use cookies and similar tracking technologies to collect information about your interaction with our Platforms. For more details, refer to our [Insert Link to Cookie Policy].

14. Children's Privacy

Our Platforms are not intended for use by children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children without verifiable parental consent.

15. Changes to this Policy

We may update this policy from time to time. Any changes will be posted on our Platforms, and the updated "Effective Date" will reflect the changes. We encourage you to review this policy periodically.