Privacy Policy
We value your trust. Learn how Shri Mahakal Institute collects, uses, and safeguards your personal information.
Overview & Data Controller
The Shri Mahakal Institute ("Institute", "we", "us", "our") is committed to protecting the privacy and security of personal data shared with us by our students, prospective students, faculty, staff, alumni, and website visitors. This Privacy Policy explains what data we collect, why we collect it, how it is used, and the rights available to individuals whose data we hold.
The Shri Mahakal Institute acts as the data controller for all personal information collected through our website, learning management systems, student information systems, and direct communications. Our registered address serves as the point of legal contact for all data-related enquiries.
This policy applies to all individuals who interact with the Institute, including current and prospective students, enrolled participants in executive education programs, faculty and staff members, alumni, research participants, and general website visitors. It does not apply to the internal processing practices of third-party platforms we may link to.
Data We Collect
We collect only the data necessary to provide educational services, administer our programs, comply with applicable laws, and support our academic mission. The categories of data we collect include:
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, gender, photograph, government-issued ID | Application forms, enrollment registration |
| Academic Data | Prior education records, transcripts, test scores, academic performance, grades, course selections | Application materials, academic records systems |
| Contact Data | Email address, phone number, home address, emergency contact details | Application, enrollment, student portal |
| Professional Data | Employment history, current employer, job title, professional achievements, references | Application forms, resume/CV submissions |
| Financial Data | Payment records, scholarship awards, financial aid applications, bank account details | Fee payments, financial aid forms |
| Attendance & Participation | Class attendance, campus access logs, event participation, library usage | Learning management system, campus systems |
| Technical Data | IP address, browser type, device information, login credentials, learning platform activity | Website usage, LMS analytics |
| Communications Data | Email correspondence, support tickets, academic advising notes, career counseling records | Direct communications with faculty and staff |
How We Use Your Data
We use collected data strictly for the purposes described below. We do not sell, rent, or trade personal data to third parties for marketing or commercial purposes.
Legal Basis for Processing
The Shri Mahakal Institute processes personal data on the following legal bases under applicable data protection law, including GDPR where relevant for international students and FERPA for U.S. educational records:
Contractual Necessity
Processing required to deliver our educational services under our enrollment agreement with you, including admissions, course delivery, assessment, and degree conferral.
Legal Obligation
Processing required to comply with educational regulations, accreditation standards, tax and financial reporting, anti-discrimination laws, and public health requirements.
Legitimate Interests
Processing for academic quality improvement, institutional research, alumni relations, campus security, fraud prevention, and debt recovery, where these interests are not overridden by your rights.
Consent
For marketing communications, testimonials, photography for promotional materials, and optional services. Consent may be withdrawn at any time without affecting your enrollment status or access to core services.
Data Retention
We retain personal data only for as long as necessary to fulfil educational purposes, maintain academic records, comply with legal obligations, or as you have consented to. Our standard retention periods are:
| Data Type | Retention Period | Reason |
|---|---|---|
| Academic Records & Transcripts | Permanently | Educational record-keeping and transcript issuance |
| Application Materials (Unsuccessful) | 2 years after decision | Appeals process, future applications |
| Financial Records | 7 years after final payment | Tax and accounting obligations |
| Student Conduct Records | 7 years after graduation or departure | Legal compliance, institutional safety |
| Alumni Contact Data | Until opt-out or data confirmed outdated | Alumni relations and networking |
| Learning Platform Activity Logs | 3 years after course completion | Academic integrity, quality assurance |
| Marketing Preferences | Until consent withdrawn | Consent-based communications |
| Website Analytics (anonymised) | 26 months | Website improvement analysis |
Security Measures
The Shri Mahakal Institute implements technical and organisational security measures appropriate to the sensitivity and volume of educational data we hold. Protecting student privacy and academic integrity is a core institutional priority.
Encryption
All student records and sensitive data are encrypted at rest using AES-256. Data in transit between our systems, learning platforms, and users is protected using TLS 1.3 or higher.
Access Controls
Access to student data is restricted on a strict need-to-know basis. Faculty and staff undergo privacy training and are bound by confidentiality obligations. Role-based access ensures only authorized personnel can view specific data.
System Security
Our IT infrastructure is protected by enterprise firewalls, intrusion detection systems, multi-factor authentication, and regular security patches. We conduct annual security audits and penetration testing.
Breach Response
In the event of a data breach affecting your personal data, we will notify affected individuals and relevant authorities within the timelines required by applicable law (typically within 72 hours for GDPR-covered individuals).
Cookies & Tracking
Our website and learning platforms use cookies and similar tracking technologies to ensure proper functionality, enhance your learning experience, and analyse usage patterns. We use the following categories of cookies:
Your Rights
Subject to applicable law and certain legal exemptions (particularly for academic records which must be maintained for accreditation and regulatory purposes), you have the following rights in relation to personal data we hold about you. We will respond to all valid requests within 14 days.
Right of Access
Request a copy of the personal data we hold about you and how it is used. You may request your educational records, enrollment history, and communications.
Right to Rectification
Request correction of inaccurate personal or contact data. Note that academic records such as grades cannot be altered except through official academic appeals processes.
Right to Erasure
Request deletion of your data where there is no overriding legal or educational basis for retention. Academic records cannot be deleted as we are legally required to maintain them.
Right to Restrict Processing
Request that we limit how we process your data in certain circumstances, such as for marketing purposes, while maintaining your access to educational services.
Right to Data Portability
Receive your personal data in a structured, machine-readable format (e.g., CSV, JSON) where technically feasible, to transfer to another institution if desired.
Right to Withdraw Consent
Withdraw consent for marketing communications, testimonials, or optional services at any time without penalty or impact on your enrollment status.
Right to Object
Object to processing based on legitimate interests, such as alumni outreach or institutional research, unless we have compelling grounds that override your interests.
Minors' Privacy
The Shri Mahakal Institute's graduate programs are directed exclusively at adults aged 18 and over. All applicants and students must meet our minimum age requirements for admission. We do not knowingly collect personal data from individuals under 18 years of age through our standard admissions or enrollment processes.
For executive education programs or campus events where minors may attend as guests (e.g., family orientation programs), we obtain parental or guardian consent before collecting any personal information.
If we become aware that personal data from a person under 18 has been submitted without proper parental consent, we will delete that data promptly. If you believe we have inadvertently collected such data, please contact us at the address below.
Contact & Complaints
For all privacy-related queries, data rights requests, or concerns about how we handle your information, please contact our Data Protection Officer:
Data Protection Officer
shrimahakalinstitute@gmail.com
Response within 14 days for data rights requests.
Phone: +91 99999 58585
Office Hours: Monday-Friday, 9 AM - 5 PM