Privacy Policy

Document Control	Official Company Privacy Policy
Effective Date	30-07-2026
Policy Version	1.0
Policy Owner	Raja Rani Coaching Private Limited

1. Introduction and Scope

Raja Rani Coaching Private Limited ("Company", "Raja Rani Coaching", "RRC", "we", "us" or "our") respects your privacy and is committed to handling personal data responsibly. This Privacy Policy explains the categories of personal data we may collect, the purposes for which we process it, the circumstances in which it may be shared, the safeguards we apply and the choices and rights available to you.

This Policy applies when you visit or use the Company website, mobile application, learning management system, live or recorded classes, community channels, support services, payment and enrolment processes, or other related educational services (collectively, the "Platform"). It also applies to communications and interactions connected with the Platform.

This Policy should be read together with the Terms & Conditions, the No Refund, No Cancellation, No Course Transfer or Course Change Policy (the "Refund Policy"), and any course-specific or consent notice displayed at the time personal data is collected. Where applicable law requires a separate or more specific notice or consent, that notice or consent will apply to the relevant processing activity.

2. Definitions and Applicable Role

• "Personal Data" means information relating to an identified or identifiable individual, as understood under applicable data-protection law.
• "Processing" includes collecting, recording, organising, storing, using, sharing, transmitting, updating, analysing, restricting or deleting personal data.
• "User", "Student", "Learner", "you" and "your" mean an individual who visits, registers on, purchases from or uses the Platform.
• Where the Company determines the purpose and means of processing personal data, it acts as the relevant data fiduciary or controller, as applicable under law.

This Policy is intended to operate in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, to the extent brought into force and applicable from time to time, the Information Technology Act, 2000 and applicable rules, and other relevant laws and regulations.

3. Personal Data We May Collect

3.1 Information You Provide Directly

• Name, email address, mobile number, city, postal address and other contact details.
• Account registration details, login identifiers, profile information and communication preferences.
• Course selection, enrolment details, batch information, attendance, assignments, assessments, progress, results and certificate-related information.
• Support requests, complaints, feedback, survey responses, call or chat records, and other communications with the Company.
• Identity, eligibility or verification information where reasonably required for enrolment, assessment, certification, fraud prevention or legal compliance.

3.2 Payment and Transaction Information

Payments are generally processed through authorised third-party payment gateways, banks, UPI providers or other payment service providers. Those providers process payment credentials under their own terms and privacy practices. The Company may receive and retain limited transaction information such as the payer name, billing contact details, order number, transaction identifier, amount, payment status, invoice details, refund status and fraud or risk indicators.

3.3 Technical, Device and Usage Information

• Internet Protocol address, device type, operating system, browser type, application version, language, time zone and approximate location derived from technical data.
• Login time, pages or screens visited, clicks, course access, video progress, session duration, error logs, diagnostics and interactions with Platform features.
• Cookie identifiers, advertising or analytics identifiers, referral source and similar technical information, subject to applicable consent and settings.

3.4 Information from Third Parties

We may receive information from payment providers, communication platforms, marketing partners, learning technology vendors, assessment or certification partners, authorised representatives, referral sources, social media platforms or other service providers where you have interacted with them or permitted the disclosure. We process such information only for legitimate and stated purposes and subject to applicable law.

4. How We Collect Personal Data

• Directly from you when you register, enrol, pay, attend classes, submit assignments, contact support, complete a form or otherwise communicate with us.
• Automatically when you use the Platform, through cookies, server logs, analytics tools, security controls and similar technologies.
• From authorised third parties that support payment, communications, hosting, analytics, verification, assessment, certification, marketing or Platform administration.
• From publicly available sources or lawful business records where reasonably necessary for verification, fraud prevention, legal claims or compliance.

5. Purposes for Which We Use Personal Data

We may process personal data for one or more of the following purposes, depending on your interaction with the Platform:

• To create and manage accounts, verify users, process enrolments and activate course access.
• To process payments, issue invoices or receipts, maintain transaction records and administer approved refunds or payment corrections.
• To deliver recorded and live courses, assignments, assessments, mentoring, support, certificates and other purchased services.
• To send transactional messages, class reminders, service notices, policy updates, account alerts and responses to support or grievance requests.
• To provide relevant offers, programme information or promotional communications where permitted and subject to available opt-out choices.
• To personalise the learning experience, remember preferences, maintain progress and improve course content, Platform functionality and service quality.
• To monitor security, prevent fraud, detect credential sharing, investigate misuse, enforce the Terms & Conditions and protect the Company, Users and third parties.
• To conduct internal reporting, analytics, auditing, quality assurance, staff training and business planning using data that is proportionate to the purpose.
• To comply with accounting, tax, regulatory, legal, law-enforcement and record-keeping obligations, and to establish, exercise or defend legal claims.

6. Basis for Processing, Consent and Withdrawal

We process personal data where permitted by applicable law, including on the basis of your consent, for specified legitimate uses, to perform or administer services requested by you, to comply with legal obligations, or for other lawful purposes recognised by applicable law.

• Where consent is required, you may withdraw it using the method stated in the relevant notice or by contacting us. Withdrawal will apply prospectively and will not affect processing lawfully carried out before withdrawal.
• Withdrawal of consent may prevent us from providing features or services that require the relevant data. We will explain material consequences where reasonably possible.
• We may continue to retain or process limited data after withdrawal where required or permitted for legal compliance, fraud prevention, dispute resolution, accounting, security or enforcement of contractual rights.
• Withdrawing consent, requesting deletion or closing an account does not automatically cancel an enrolment, remove payment obligations or create a refund right.

7. Cookies and Similar Technologies

The Platform may use cookies, local storage, pixels, software development kits and similar technologies to keep users signed in, remember preferences, maintain security, measure performance, understand usage and support analytics or permitted marketing activities.

• Strictly necessary technologies may be required for account login, payment flow, security and core Platform functions.
• Analytics technologies help us understand traffic, errors, course engagement and feature performance.
• Preference technologies remember selected settings and improve continuity between sessions.
• Marketing technologies, where used, may support campaign measurement or relevant communications and will be subject to applicable consent requirements.

You can manage cookies through browser or device settings and, where available, through the Platform cookie controls. Blocking certain technologies may cause login, payment, video, preference or other features to operate incorrectly.

8. Communications and Marketing Preferences

We may contact you by email, phone, SMS, WhatsApp, in-app notification or another official channel for account administration, enrolment, payment, class delivery, support, security and other service-related purposes. These essential communications may continue while necessary to provide the service or comply with law.

Where permitted, we may also send information about courses, events, offers or services. You may opt out of promotional communications using the unsubscribe or preference option provided, or by contacting us. Opting out of marketing does not stop necessary transactional, legal, security or service communications.

9. Payment Service Providers

The Company does not control the independent privacy and security practices of banks, card networks, UPI applications, payment gateways or other financial service providers. You should review their applicable terms and privacy notices. We may exchange limited information with them to initiate or verify payments, prevent fraud, reconcile transactions, manage disputes and process approved refunds.

10. Sharing and Disclosure of Personal Data

We do not sell personal data. We may disclose personal data only to the extent reasonably necessary for the purposes stated in this Policy, including to the following categories of recipients:

• Hosting, cloud, learning management, video delivery, communication, customer support, analytics, cybersecurity and technical service providers.
• Payment gateways, banks, accounting providers, auditors, tax advisers and other transaction or finance-related service providers.
• Faculty, mentors, assessors, certification or academic partners and operational vendors where access is required to deliver the enrolled service.
• Professional advisers, insurers, investigators and authorised representatives where necessary for compliance, risk management or legal claims.
• Government authorities, courts, regulators, law-enforcement bodies or other persons where disclosure is required by law, binding process or a valid official request.
• A purchaser, investor, successor or adviser in connection with a proposed or completed merger, restructuring, financing, transfer of business or assets, subject to appropriate confidentiality and legal safeguards.

Service providers are expected to process personal data only for authorised purposes, apply appropriate safeguards and comply with their contractual and legal obligations. The Company remains responsible for its own duties under applicable law but is not responsible for independent processing carried out by third parties for their own purposes.

11. International Processing and Data Transfers

Some service providers or technical systems may process or store personal data outside the state in which you reside or outside India. Where such processing or transfer occurs, we will take reasonable steps to ensure that it is carried out in accordance with applicable Indian law, including any restrictions, directions or safeguards applicable to cross-border transfers from time to time.

12. Data Retention and Deletion

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, to maintain course and account records, provide support, comply with legal, tax, accounting, audit and regulatory obligations, resolve disputes, prevent fraud and enforce agreements.

• Retention periods may vary according to the type of data, course access period, account status, transaction, certification requirement, legal obligation and risk of a dispute or claim.
• When data is no longer required, we may delete, anonymise, aggregate or securely archive it in accordance with applicable law and operational procedures.
• Deletion from active systems may not immediately remove data from encrypted backups, audit logs or records retained for legal compliance; such data will remain protected and be removed or overwritten according to the applicable retention cycle.
• We may refuse or limit a deletion request where retention is required or permitted by law, necessary to complete an ongoing service, protect security, prevent fraud, resolve a dispute or establish, exercise or defend legal claims.

13. Data Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, destruction or misuse. Depending on the nature of the data and processing, measures may include access controls, authentication, role-based permissions, secure hosting, encryption where appropriate, backups, monitoring, vendor controls, staff confidentiality obligations and incident-response procedures.

No method of transmission over the internet, mobile network, email or electronic storage is completely secure. Accordingly, we cannot guarantee absolute security. You are responsible for keeping your credentials confidential, using secure devices and networks, and notifying us promptly of suspected unauthorised access.

Where a personal data breach requires notification under applicable law, we will take appropriate steps to notify affected individuals and/or the competent authority in the manner and within the timeline legally required.

14. Accuracy and User Responsibilities

• You should provide accurate, complete and current personal data and update account or contact information when it changes.
• You must not submit another person's personal data without authority, consent or another lawful basis.
• You should protect passwords, one-time passwords and account access and avoid sharing course or payment credentials.
• If you believe information held about you is incorrect or incomplete, you should request correction through the contact details in this Policy.

15. Your Rights and Choices

Subject to applicable law, identity verification, available exemptions and the nature of the processing, you may have the right to:

• Obtain information about the personal data being processed and the processing activities carried out by the Company.
• Request access to a summary of personal data and information about relevant recipients or categories of recipients, where legally applicable.
• Request correction, completion or updating of inaccurate or incomplete personal data.
• Request deletion or erasure of personal data that is no longer necessary, subject to lawful retention requirements and applicable exceptions.
• Withdraw consent where processing is based on consent.
• Raise a grievance concerning the processing of personal data or the handling of a prior request.
• Nominate another individual to exercise applicable rights in the event of death or incapacity, in the manner permitted by law.
• Lodge a complaint with the competent authority after following the Company's grievance process, where required or available under applicable law.

These rights are not absolute. We may request additional information to verify your identity and authority, and may refuse, defer or limit a request where permitted by law. We will communicate the outcome or any material limitation in accordance with applicable requirements.

16. How to Submit a Privacy Request

To submit an access, correction, deletion, consent-withdrawal or grievance request, email support@rajaranicoaching.com with the subject line "Privacy Request" and include:

• Your full name, registered email address and registered mobile number.
• The relevant account, course, order or transaction reference, where applicable.
• A clear description of the request and the personal data or processing activity concerned.
• Reasonable proof of identity or authority if required to protect your account and prevent unauthorised disclosure or deletion.
• Any supporting document or information reasonably required to locate the relevant records and assess the request.

We will acknowledge, review and respond within the period prescribed by applicable law or, where no specific period applies, within a reasonable period after receiving a complete and verifiable request. Repeated, manifestly unfounded, fraudulent or technically impossible requests may be handled as permitted by law.

17. Children and Users Below 18 Years

Where a User is below 18 years of age, the parent or legal guardian must review the applicable terms, authorise the enrolment and provide verifiable consent where required by law. We may take reasonable steps to verify the identity and age of the parent or guardian and to confirm their authority.

Personal data relating to children will be processed only for lawful educational, account, safety, support, assessment, certification or administrative purposes and in accordance with applicable restrictions. If you believe that a child has provided personal data without the required authorisation, contact us promptly so that we can review and take appropriate action.

18. Third-Party Websites, Applications and Services

The Platform may contain links to or integrations with third-party websites, applications, communication services, social media platforms, payment services or tools. Their collection and use of personal data is governed by their own privacy notices and terms. The Company is not responsible for independent third-party practices, and Users should review those policies before providing personal data.

19. Legal Requests, Fraud Prevention and Protection of Rights

We may preserve, use or disclose personal data where reasonably necessary to comply with applicable law, respond to a binding legal process or valid governmental request, investigate fraud or security incidents, enforce the Terms & Conditions, protect the rights and safety of Users or third parties, or establish, exercise or defend legal claims. Any disclosure will be limited to what is reasonably necessary and legally permitted.

20. Grievance Redressal and Contact Information

Questions, requests or complaints concerning this Privacy Policy or the processing of personal data may be sent to:

Company	Raja Rani Coaching Private Limited
Email	support@rajaranicoaching.com
Phone	+91 6351112680
Working Hours	Mon – Sat 9:00 AM to 7:00 PM

The Company may publish an updated contact person or grievance mechanism on the Platform. Users should first provide the Company a reasonable opportunity to investigate and resolve the grievance. This does not restrict any non-waivable statutory right or remedy.

21. Changes to This Privacy Policy

We may revise this Privacy Policy prospectively to reflect changes in law, technology, Platform features, service providers or business practices. The updated Policy will be posted on the Platform with a revised effective or last-updated date. Where required by law or where a change materially affects consent-based processing, we may provide additional notice or request fresh consent.

Your continued use of the Platform after an update will not be treated as consent where applicable law requires a separate affirmative consent. The policy version applicable to a particular processing activity will be determined according to the relevant notice, consent and law in force at that time.

22. Governing Law and Jurisdiction

This Privacy Policy shall be governed by the applicable laws of India, including data-protection, information-technology, consumer-protection and other relevant laws and regulations, as amended and brought into force from time to time.

Subject to any mandatory forum, jurisdiction, complaint mechanism or remedy available under applicable law, civil and commercial disputes relating to this Policy or the Company's processing activities shall be subject to the jurisdiction of the competent courts at Surat, Gujarat, India.

23. Severability and Preservation of Statutory Rights

If any provision of this Policy is invalid or unenforceable, the remaining provisions shall continue in effect. Nothing in this Policy limits any statutory right, duty, remedy or liability that cannot lawfully be limited.

24. Failed or Pending Third-Party Payment Transactions

If an amount is debited from the Student's bank account, card, UPI account, wallet, or other payment instrument due to a technical error, processing failure, timeout, or interruption involving a third-party payment gateway, bank, payment service provider, or network, but the transaction is not successfully confirmed in favour of Raja Rani Coaching Private Limited, the amount will ordinarily be automatically reversed or refunded by the relevant bank or payment service provider.

The reversal or refund will be processed within the timeline prescribed by the applicable bank, payment gateway, payment service provider, or regulatory guidelines, which may ordinarily take up to seven business days or such other period as may apply to the relevant payment method.

Raja Rani Coaching Private Limited does not receive or control funds relating to an unsuccessful transaction and shall not be responsible for any delay, failure, banking charge, or processing issue attributable solely to the relevant bank, payment gateway, payment service provider, or payment network, except to the extent required under applicable law.

The Student should first contact the relevant bank or payment provider using the transaction reference number. Upon receiving complete transaction details and supporting evidence, the Company will provide reasonable assistance in verifying the payment status. Course access will be activated only after successful receipt and confirmation of payment by the Company.