Privacy policy
What we collect, why, how long we keep it, and how to have it deleted. Most of our students are children, and this is written accordingly.
The short version
We collect what we need to run the programme and issue your certificate. We do not advertise to you, we do not track your behaviour, and we never sell or share your data. Most of our students are children, and we build accordingly.
What we collect, and why
| Name, email, phone | To identify you, reach you, and put your name on your certificate |
| Date of birth | To know whether you are under 18, which decides whether we need a guardian's consent |
| School or college, city | Aggregate reporting to the people who fund seats — never individually |
| Your submissions and feedback | To mark your work and to evidence your certificate |
| Payment records | Because accounting law requires it |
| Attendance | So a coordinator can check on someone who has gone quiet |
That is the complete list. We do not ask for anything else, and you should be suspicious of anyone in our name who does.
If you are under 18
India's Digital Personal Data Protection Act 2023 requires verifiable consent from a parent or guardian before we process a child's personal data. So:
- We ask for your date of birth when you sign up.
- If you are under 18, we ask for a parent or guardian's name, relationship, phone and email.
- We email them a single-use link explaining exactly what we collect and why.
- Nothing starts until they agree. Your enrolment stays inactive and you cannot pay.
- We record who agreed, when, and from what device, because the law requires us to keep proof.
What we never do
- No advertising, ever.
- No behavioural tracking, profiling or targeted advertising — which the Act prohibits for children, and which we would not do anyway.
- No advertising pixels and no analytics that follow you around. We measure page visits with a cookie-free tool that cannot identify you.
- We never sell, rent or share your data with anyone marketing anything.
Photographs and showcasing work
We publish a student's photograph, project or testimonial only with separate, explicit permission for that specific thing — and for a student under 18, only with their guardian's. Signing up is not permission. Where you see a space for a testimonial and it says we are awaiting consent, that is exactly what it means: we would rather show a blank than invent one.
How long we keep things
| Name, email, phone, city, school | 3 years after the cohort ends |
| Date of birth | 3 years |
| Guardian details and the consent record | As long as we hold the child's data |
| Submissions and feedback | 3 years; certificate evidence for 8 years |
| Payment records | 8 years, because statutory accounting requires it |
| Attendance | 1 year |
Getting your data deleted
Email hello@d360.pgnr.in and ask. A parent or guardian can ask on behalf of their child, and does not need to give a reason.
We delete or anonymise everything except the minimum we are legally required to keep — payment records and the evidence behind an issued certificate. We will tell you plainly what was kept and why. We confirm within two working days and complete it within thirty.
Who holds your data
, .
Complaining
If you think we have handled your data badly, write to our grievance officer, , at . If we do not resolve it, you can escalate to the Data Protection Board of India.
Security
Your password is stored by Firebase Authentication and we never see it. Card numbers, CVV, UPI PIN and one-time passwords never touch our servers, our database or our logs — payment happens on the payment provider's own hosted page. Access to student records is limited to reviewers and coordinators who need it, and every administrative action is logged.