Statutory Notice • To Be Reviewed by a Lawyer

This Privacy Policy is a legal draft structured in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), Section 43A of the Information Technology Act, 2000, and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Prior to commercial operation, this policy must be reviewed and customized by an Indian legal practitioner.

Effective Date: October 2026•Applicable Territory: Republic of India

Privacy Policy & Data Protection Charter

SpotEnroll respects your privacy and is committed to protecting your personal data. This charter explains your statutory rights as a Data Principal and our responsibilities as a Data Fiduciary.

1Definitions & Roles under DPDP Act, 2023

In this Policy, unless the context requires otherwise:

  • "Data Fiduciary" refers to [TODO: Registered Company Name Private Limited] ("SpotEnroll"), which alone determines the purpose and means of processing personal data.
  • "Data Principal" refers to the individual student, job applicant, visitor, or user whose personal data is collected and processed.
  • "Data Processor" refers to authorized third-party cloud infrastructure (e.g., Google Cloud Platform / Firebase) and payment gateway services (e.g., Razorpay) that process personal data on behalf of SpotEnroll.
  • "Personal Data" means any data about an individual who is identifiable by or in relation to such data.

2Categories of Personal Data We Collect

We collect only such Personal Data as is strictly necessary to deliver educational courses, administer certified capstone evaluations, issue tamper-evident credentials, and facilitate direct job applications:

A. Identity & Contact Information

Full legal name, email address, mobile phone number, academic degree, and postal state (for GST invoice generation).

B. Academic & Assessment Records

Batch attendance, lesson completion timestamps, quiz scores, capstone submissions, proctored exam transcripts, and certificate audit hashes.

C. Payment & Transaction Metadata

Razorpay order ID, payment ID, transaction status, bank reference number, and GST taxation category. We do not store raw credit card numbers or banking passwords.

D. Career & Job Application Data

Resume/CV documents, LinkedIn profile URLs, portfolio links, mock interview audio/text responses, and job application submission status.

3Lawful Grounds & Specific Purposes of Processing

Under Section 4 and Section 6 of the DPDP Act 2023, SpotEnroll processes your Personal Data exclusively on the basis of your explicit, informed consent and for the performance of our educational contract:

  • Authenticating student identity and securing account access;
  • Delivering cohort classes, assignment feedback, and practical lab environments;
  • Validating certificate verification requests submitted by prospective employers using Certificate IDs;
  • Generating statutory tax invoices complying with Indian GST rules;
  • Communicating schedule alterations, batch commencement dates, and regulatory disclosures.

4Statutory Rights of the Data Principal

As a Data Principal under Chapter III of the DPDP Act 2023, you hold the following non-derogable rights:

1. Right to Access: You may request a summary of the Personal Data being processed about you, along with the identities of all Data Processors who have received your data.

2. Right to Correction & Erasure: You may request the correction of inaccurate or incomplete Personal Data, or the erasure of Personal Data that is no longer necessary for the purpose it was collected.

3. Right of Grievance Redressal: You are entitled to an accessible, prompt grievance redressal mechanism with statutory resolution provided within 30 days.

4. Right to Nominate: You have the right to nominate any individual to exercise your rights in the event of death or incapacity.

To exercise any of these rights, email our Grievance Desk at privacy@spotenroll.in with your registered email ID.

5Data Retention & Technical Security Safeguards

SpotEnroll employs industry-standard technical and organizational safeguards in accordance with Section 8(5) of the DPDP Act 2023 and Rule 5 of the IT SPDI Rules, 2011:

  • End-to-end transport layer encryption (TLS 1.3) across all network exchanges;
  • Database encryption at rest (AES-256) on Google Cloud Platform / Firebase infrastructure;
  • Strict Role-Based Access Controls (RBAC) preventing unauthorized employee access to student portfolios;
  • Statutory financial and GST transaction logs are archived for seven (7) years to satisfy Indian tax audits, after which they are irreversibly purged.

6Grievance Redressal Officer (DPDP Act Disclosure)

If you have any questions, concerns, or grievances regarding the processing of your Personal Data, you may direct your complaint to our designated Data Protection Officer:

Corporate Entity: SpotEnroll Sales and services Private Limited

Corporate Address: GV mall 4th floor, Boring road chauraha, Patna 800001, India

Official Email: spotenrolljob@gmail.com

Telephone & WhatsApp: +91 9473034537 (Mon–Fri, 10:00 AM – 6:00 PM IST)

Response Timeline: Acknowledgment within 48 hours; substantive statutory resolution within 15 working days.

If your grievance remains unaddressed after 30 days, you have the right to file a complaint before the Data Protection Board of India.

Open Grievance Redressal Form & Submit Docket →