Privacy Policy

1. Information We Collect

We collect personal information necessary to provide high-quality educational services, manage admissions, deliver courses, and maintain academic records. Information is gathered only when you voluntarily provide it or through automated means with your consent where required.

• Personal Identifiers: Full name, date of birth, gender, nationality, photograph (for ID verification), and contact details (email, phone number, residential address) submitted during enquiry, application, or enrollment.
• Educational & Professional Details: Academic qualifications, previous institution records, marksheets, certificates, work experience (if relevant), and any supporting documents for eligibility verification.
• Financial & Payment Data: Bank account details, transaction IDs, payment receipts, and billing information processed securely via PCI-DSS compliant third-party gateways.
• Usage & Technical Data: IP address, browser type/version, device information, operating system, pages visited, time/date of access, referral sources, and interaction logs collected via cookies and analytics tools.
• Communication Records: Messages, emails, call logs, form submissions, chat transcripts, and feedback provided when contacting support, counsellors, or faculty.
• Special Category Data (where applicable): Health-related information (e.g., for disability accommodations or medical certificates) processed only with explicit consent and under strict safeguards.

We do not knowingly collect sensitive personal data from minors without verifiable parental/guardian consent. All data collection complies with applicable Indian laws including the Information Technology Act, 2000 and DPDP Act, 2023 principles.

2. How We Use Your Information

We process personal data solely for legitimate educational and administrative purposes:

• Verifying identity, eligibility, and authenticity of documents during admissions.
• Managing student lifecycle — enrollment, attendance tracking, academic progress monitoring, examination scheduling, result publication, and certification issuance.
• Delivering course content, study materials, live/recorded sessions, assignments, feedback, and online portal access.
• Facilitating communication — sending important notices, timetable changes, fee reminders, academic alerts, and support responses.
• Processing fee payments, generating receipts, maintaining financial records, and issuing refunds where applicable per our Refund Policy.
• Improving educational quality through anonymized analytics of usage patterns, feedback surveys, and program effectiveness evaluation.
• Complying with statutory obligations — reporting to regulatory bodies, maintaining records for audits, and responding to legal requests.
• Providing career guidance, placement assistance coordination (where offered), and alumni networking (with consent).

We process data on the legal bases of contract performance (enrollment agreement), legal obligation, legitimate interests (administrative efficiency, fraud prevention), and consent (marketing communications, optional features).

3. Sharing & Disclosure of Information

We do not sell, rent, or trade personal information. Sharing occurs only when necessary and under strict controls:

• Internal Sharing: With faculty, administrative staff, examination department, placement cell, and IT team on a need-to-know basis.
• Service Providers: With vetted vendors (cloud hosting, payment gateways, LMS platforms, email services) bound by data processing agreements.
• Academic Partners: With collaborating institutions or certification bodies for joint programs or credential verification (with consent where required).
• Legal & Regulatory: To government authorities, courts, or regulators when mandated by law, or to protect rights/safety of the Academy or students.
• Placement Assistance: With prospective employers only upon explicit student consent and under NDA where applicable.

Any international transfer (if applicable) uses appropriate safeguards compliant with Indian data protection laws.

4. Data Security Measures

We implement industry-standard safeguards to protect personal data:

• Encryption of data in transit (TLS 1.3) and at rest where feasible.
• Role-based access controls, multi-factor authentication for staff accounts.
• Regular security audits, vulnerability assessments, and penetration testing.
• Secure third-party payment processors compliant with PCI-DSS.
• Incident response plan including breach notification to affected individuals and authorities as required.

While we maintain robust protections, absolute security cannot be guaranteed. Report suspected breaches immediately.

5. Your Rights as Data Principal

Subject to applicable law (including DPDP Act, 2023), you have:

• Right to access and obtain copy of your personal data.
• Right to correction/erasure of inaccurate/incomplete/unnecessary data.
• Right to restrict or object to processing in certain cases.
• Right to withdraw consent where processing is consent-based.
• Right to data portability in structured format (where technically feasible).
• Right to grievance redressal and to approach the Data Protection Board of India.

Submit requests to info@vistaglobalacademy.com. We respond within statutory timelines (usually 30 days).

6. Cookies & Tracking Technologies

We use cookies, web beacons, and similar technologies to enhance functionality, analyze usage, and ensure security. Types include essential (for site operation), performance (analytics), and functional (preferences). You can manage preferences via our consent banner or browser settings. Disabling cookies may limit some features.

7. Data Retention

We retain data only as long as necessary: active student records during enrollment + 5–7 years post-completion for certification/audit purposes; enquiry data for 1–2 years; payment records per tax laws. Data is securely deleted/anonymized thereafter.