Data Policy

Effective Date: 2nd May 2026 | Last Updated: 31 May 2026

Legal Basis: This Data Policy is issued in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

This Data Policy explains the types of data we collect, how we process it, your rights, and the safeguards we maintain. It applies to all data collected through the website www.onlinedegree247.com, operated by OnlineDegree247, Kanpur, Uttar Pradesh.

1. Data Controller

OnlineDegree247
13-F, Ground Floor, Barra-2, Kanpur, Uttar Pradesh – 208027
📞 +91 6390001638
📧 info@onlinedegree247.com

2. Categories of Data Collected

Category	Examples	Purpose	Legal Basis (IT Rules)
Identity Data	Name, gender	Personalised counselling	Consent (Rule 5)
Contact Data	Mobile number, email, city	Communication & follow-up	Consent / Legitimate Interest
Academic Data	Qualification, preferred course, university	Course matching & admission support	Consent (Rule 5)
Technical Data	IP address, browser, device type, pages visited	Site analytics & security	Legitimate Interest
Communication Data	Enquiry messages, WhatsApp chats	Support & record-keeping	Consent / Contract

3. Lawful Basis for Processing

We process your data only when we have a lawful basis to do so, including:

Consent: You have given explicit consent for processing (e.g., by submitting an enquiry form).
Contract: Processing is necessary to provide the services you have requested.
Legal Obligation: We are required to process data under Indian law.
Legitimate Interest: We process technical data to improve security and user experience, ensuring this does not override your rights.

4. How Long We Keep Your Data

Data Type	Retention Period
Enquiry / Contact Form Data	3 years from date of submission
Application / Admission Data	5 years from date of admission or rejection
Server Logs (Technical Data)	90 days (as per IT intermediary rules)
Marketing Communications Consent	Until opt-out or 3 years, whichever is earlier

After the retention period, data is securely deleted or anonymised.

5. Data Security Measures

As required under Rule 8 of the IT Rules, 2011, we implement reasonable security practices including:

✅ SSL/TLS encryption for all data transmitted over the internet (HTTPS).
✅ Password hashing using industry-standard algorithms (bcrypt).
✅ Access controls: only authorised personnel can access personal data.
✅ Regular security reviews of our systems and codebase.
✅ Database protection with restricted remote access.
✅ Regular data backups with secure storage.

6. Data Sharing and Disclosure

We share data only in the following circumstances:

With Partner Universities: Your academic and contact data is shared with the university you are applying to, only to the extent necessary for processing your admission.
With Authorised Service Providers: Hosting providers, email/SMS gateways, and analytics providers who process data on our behalf under confidentiality agreements.
With Law Enforcement: When legally compelled to do so under applicable Indian law (e.g., CERT-In directives, court orders).

We do not sell your data to advertisers or data brokers.

7. Cross-Border Data Transfers

We primarily store data on servers located in India. If any data processing involves servers outside India (e.g., cloud analytics tools), we ensure adequate safeguards are in place and such transfers comply with applicable Indian law. We use only reputed international service providers with strong privacy commitments.

8. Your Data Rights

You have the following rights in relation to your personal data:

Right to Know: What data we hold about you and how it is being used.
Right to Correction: Rectify inaccurate or incomplete personal data.
Right to Withdraw Consent: At any time, with prospective effect.
Right to Deletion: Request deletion of your data (subject to legal retention requirements).
Right to Grievance Redressal: As guaranteed under Rule 5(9) of the IT Rules, 2011.

To exercise any of these rights, please contact our Grievance Officer at info@onlinedegree247.com or call +91 6390001638. We will respond within 30 days.

9. Cookies and Tracking

We use cookies for essential website functionality and analytics. By continuing to use our Site, you consent to our use of cookies. You can manage cookie preferences through your browser settings. Disabling cookies may affect the functionality of some parts of the Site.

10. Data Breach Notification

In the unlikely event of a personal data breach, we will notify affected Users and relevant authorities (CERT-In, if applicable) in accordance with the requirements of the IT Act, 2000 and applicable rules, within the prescribed timeframes.

11. Children's Data

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from persons below 18 years of age. If we become aware that we have inadvertently collected such data, we will delete it promptly.

12. Changes to This Policy

We may update this Data Policy from time to time. The updated version will be posted on this page with a revised "Last Updated" date. Continued use of the Site after changes constitutes acceptance of the revised policy.

13. Grievance Officer

Grievance Officer — OnlineDegree247
13-F, Ground Floor, Barra-2, Kanpur, Uttar Pradesh – 208027
📞 +91 6390001638
💬 WhatsApp: +91 6390001638
📧 info@onlinedegree247.com
Complaints will be acknowledged within 7 days and resolved within 30 days.