Privacy Policy

1. Who We Are and Scope

Shri Bhagirath Institute of IT & Management (“SBIITM”, “we”, “us” or “our”) is a computer education and management training institute located in Orai, Uttar Pradesh. This Policy applies to personal data processed through our website and related institute services.

2. Information We May Collect

Depending on the service used, we may collect:

• Identity and contact data: name, father’s or mother’s name, date of birth, gender, postal address, city, state, PIN code, mobile number and email address.
• Student and academic data: course selected, qualification, school or college, roll number, registration number, attendance, examination details, marks, results, projects, certificates and verification records.
• Documents and images: photograph, signature, marksheet, identity document or Aadhaar details where voluntarily submitted and required for a stated registration, examination, scholarship, government or verification purpose.
• Account data: user ID, encrypted or protected password information, user role, login history, password-reset and OTP records.
• Enquiry and communication data: messages, course interests, support requests, feedback, complaints and correspondence.
• Payment and transaction data: fee category, amount, transaction reference and payment status. Complete card, bank or UPI credentials are generally processed by the relevant payment service and should not be stored by us unless necessary and legally permitted.
• Technical data: IP address, browser type, device type, operating system, referring page, access time, cookies and security logs.

3. How We Receive Information

We receive data directly from students, parents or guardians, website visitors, staff, authorised centre representatives and applicants. We may also receive relevant data from universities, examination bodies, government departments, training partners, payment providers or other organisations involved in delivering the requested educational service.

4. How We Use Information

• responding to enquiries and providing course counselling;
• processing registration, admission, attendance, examinations, practicals, results and certification;
• creating and maintaining student, staff or administrator accounts;
• verifying certificates, registration records and student identity;
• communicating notices, schedules, fee reminders, admit-card information, academic updates and support messages;
• processing fees and maintaining accounting or audit records;
• administering competitions, events, scholarships or government-supported programmes;
• protecting accounts, preventing fraud, investigating misuse and maintaining website security;
• improving courses, website performance and student support;
• complying with applicable laws, official directions and requirements of universities, examination or certification bodies.

5. Consent and Lawful Processing

We process personal data for specified educational, administrative, contractual, security and legal purposes. Where consent is required, we will seek consent through the relevant form, declaration, account action or other clear communication. You may withdraw consent for future processing by contacting us, but withdrawal will not affect processing already lawfully completed and may limit services that require the data.

6. When We May Share Information

We do not sell personal data. We may share only the information reasonably necessary with:

• affiliating universities, examination bodies, certification authorities and authorised training partners;
• government departments, regulators, law-enforcement authorities or courts where required by law or official process;
• hosting, database, email, SMS, WhatsApp, payment, cybersecurity and other service providers acting on our instructions;
• professional advisers, auditors or insurers where necessary;
• another organisation in connection with a lawful reorganisation or transfer, subject to appropriate safeguards.

Service providers are expected to use data only for the agreed purpose and to maintain appropriate confidentiality and security.

7. Children and Students Below 18 Years

Many educational services may be used by students below 18 years of age. Registration or admission for a minor should be completed with verifiable consent or involvement of a parent or lawful guardian where required. We do not knowingly use a child’s personal data for targeted advertising or other activity that is not reasonably connected with the educational service requested.

A parent or guardian may contact us to review, correct or request deletion of a minor’s information, subject to identity verification and legal or academic record-retention requirements.

8. Cookies and Similar Technologies

Our website may use essential cookies for login sessions, security, form functions and user preferences. We may also use limited analytics to understand page visits and improve performance. You can control non-essential cookies through your browser settings, but disabling essential cookies may affect login or form functionality.

9. Data Security

We use reasonable administrative and technical safeguards designed to protect personal data, including access controls, authentication, backups, secure hosting practices and restricted access to student records. No internet or storage system is completely secure, so we cannot guarantee absolute security. Users should protect passwords and avoid sending sensitive documents through unofficial channels.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the stated purpose, academic record verification, account administration, dispute handling, audit, taxation, university/examination requirements or other legal obligations. Data that is no longer required will be deleted, anonymised or securely archived in accordance with applicable requirements.

11. Your Rights and Choices

Subject to applicable law and verification of your identity, you may ask us to:

• confirm whether we hold personal data about you;
• provide access to or a summary of that data;
• correct inaccurate or incomplete information;
• withdraw consent for future processing;
• delete data that is no longer needed or legally required;
• address a grievance about our handling of personal data.

12. Data Deletion Request

To request deletion of website, enquiry, registration or account data:

1. Email sbiitmorai@gmail.com with the subject “Personal Data Deletion Request”.
2. Include your full name, registered mobile/email, registration or user ID (if available), the relevant service or form and a clear description of the data to be deleted.
3. We may ask for reasonable proof of identity to prevent unauthorised deletion.
4. After verification, we will delete or anonymise eligible data and confirm the outcome within the period required by applicable law.

We may retain limited records where necessary for legal compliance, payment/accounting records, examination integrity, certificate verification, fraud prevention or the establishment or defence of legal claims. We will explain any applicable retention reason.

13. External Websites and Social Platforms

The website may link to universities, government portals, payment providers, social networks or other third-party services. Their collection and use of data are governed by their own policies. SBIITM is not responsible for third-party privacy practices.

14. Changes to This Privacy Policy

We may update this Policy when our services, technology or legal obligations change. The latest version will be published here with a revised effective date. Material changes may also be communicated through a website notice or other appropriate method.

15. Privacy and Grievance Contact