Privacy policy

1. Data fiduciary

Admission Brother is the data fiduciary: we decide why and how your personal data is processed. Office: [Office address — to be added]. Email: support@admissionbrother.com.

2. What we collect

• Contact details: name, mobile / WhatsApp number, email, city.
• Admission details: course and college interests, CET / board marks or percentile, category, admission type.
• Parent or guardian details: name and mobile number (and consent record for students under 18).
• Documents you choose to share for a service, such as photocopies or scans of mark sheets, certificates and ID. Aadhaar numbers are kept masked wherever a full number is not required.
• Payment records: amount, service, invoice and payment status. Card, UPI and bank details are handled by Razorpay and never reach us.
• Messages and call notes with our team, and tutoring records (enrolment, attendance).
• Basic technical data: device and browser type, pages visited and cookies needed for login. If analytics (Google Analytics / Meta Pixel) is switched on, it collects usage data as described in their policies.

3. Why we use it

• To answer your enquiry and give admission guidance.
• To deliver services you ask for: Admission Pack, form filling, college communication, hostel help, tutoring classes.
• To send you service messages, reminders of deadlines you asked for, and payment receipts / GST invoices.
• To keep accounts secure (login codes, fraud prevention) and to meet legal duties such as tax records.
• To improve our service using summary (non-identifying) figures.

We collect only what is needed for these purposes.

4. Consent

• We process your personal data on the basis of your consent, given when you submit a form, log in or buy a service, after seeing this notice — or for uses the DPDP Act allows without consent (for example legal duties).
• You can withdraw consent at any time by writing to the grievance officer below. We will then stop processing for that purpose, except where the law requires us to keep records. Withdrawal does not affect processing done before it.
• Students under 18: we need verifiable consent from a parent or lawful guardian before processing a child's personal data. We ask for the parent's details and record their consent. We do not track children's behaviour or show them targeted advertising.

5. Who we share it with

• Colleges, universities or authorities — only when you ask us to apply, fill a form or speak to a college on your behalf, and only the details needed for that.
• Service providers who work for us under contract (data processors): hosting and database, payment gateway (Razorpay), WhatsApp / SMS / email delivery, online class tools. They may use the data only to provide their service to us.
• Government or law enforcement when the law requires it.

We never sell, rent or trade your data, and we do not share your number with colleges for marketing.

6. Where it is stored

We store data on servers in India wherever our service providers offer an India region. Where a provider processes data outside India, this is done only as permitted under the DPDP Act and with reasonable safeguards.

7. How long we keep it

We keep personal data only as long as needed for the purpose it was given for, then delete it — unless the law requires longer (for example GST and accounting records, which must be kept for the period set by tax law). You can ask us to delete your data earlier, as described below.

8. Security

We use reasonable security safeguards: encrypted connections (HTTPS), restricted staff access with individual logins, login by one-time codes, and storing only masked identity numbers where possible. If a personal data breach happens, we will inform the Data Protection Board of India and affected users as required by the DPDP Act.

9. Your rights

• Access: ask for a summary of the personal data we hold about you and how we use it.
• Correction and update: ask us to correct, complete or update your data.
• Erasure: ask us to delete your data when it is no longer needed or you withdraw consent (unless the law requires us to keep it).
• Grievance: complain to our grievance officer and get a response.
• Nomination: name another person to use these rights for you in case of death or incapacity.

To use any right, contact the grievance officer below from your registered mobile number or email. We may ask you to confirm your identity.

10. Grievance officer

[Grievance officer name and contact — to be added]

We will respond within the time set by the DPDP Rules. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

11. Changes

We may update this policy. The date at the top shows the latest version. If a change affects how we use your data, we will tell you and ask for consent again where needed.