Privacy Policy

BRKS STUDY SPACE respects your privacy and is committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, and applicable rules made thereunder.

Information We Collect

We collect the following personal data when you enrol or interact with us:

• Personal details: Name, email, phone number, address
• Student details: Date of birth, age, grade/level, academic information
• Payment information: Payment method details (processed securely via our payment provider; we do not store full card or bank account details)
• Parent/Guardian details: Name, contact information, and relationship to the student (collected for all students below 18 years of age)
• Usage data: Interaction with our platform, attendance records, and communication logs

Lawful Basis & Consent

• We process your personal data based on your consent, obtained at the time of enrolment or when you interact with our services.
• For students below the age of 18 years, we obtain verifiable consent from a parent or legal guardian before collecting or processing the student's personal data, as required under the DPDPA.
• You may withdraw your consent at any time by contacting us. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal, but may result in the inability to continue providing certain services.

Children's Data Protection

As an educational institution, we handle data of students who may be below 18 years of age. In compliance with the DPDPA:

• We collect only such personal data of children as is necessary for the provision of educational services.
• We obtain verifiable parental or guardian consent before processing a child's data.
• We do not engage in tracking, behavioural monitoring, or targeted advertising directed at children.
• We do not process children's data in any manner that is likely to cause harm to the child.

How We Use Your Information

Your information is used to:

• Provide educational services and manage enrolments
• Communicate about classes, schedules, and important updates
• Process fee payments and send invoices
• Send notifications via WhatsApp, SMS, or email as configured
• Maintain attendance and academic progress records
• Comply with applicable legal obligations

We process personal data only for the purposes specified above and do not use it for any unrelated purpose without obtaining fresh consent.

Data Sharing

• We do not sell your personal data to third parties.
• We may share data with the following categories of service providers (Data Processors) who assist in service delivery:
  • Technology platform provider: EtheraGuru by EtheraEdge (platform hosting and service delivery)
  • Payment gateway: Cashfree Payments (PCI-DSS compliant payment processing)
  • Communication providers: WhatsApp, SMS, and email service providers (for transactional and service-related communications)
• All Data Processors are contractually required to process your data only on our instructions and to maintain appropriate security measures.
• We may disclose personal data if required by law, court order, or direction from a government authority.

Cross-Border Data Transfer

• Your data may be stored and processed on servers located outside India as part of our cloud infrastructure.
• Any cross-border transfer of personal data will be carried out in compliance with the DPDPA and any restrictions notified by the Central Government regarding transfer of personal data to specific jurisdictions.

Data Retention

• We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law.
• Student enrolment and academic records are retained for a period of 3 years after the student's last active enrolment, unless a longer retention period is required by law.
• Payment records are retained as per applicable tax and financial regulations.
• Upon expiry of the retention period, personal data will be securely deleted or anonymised.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, and regular security assessments.

Your Rights as a Data Principal

Under the DPDPA, you have the right to:

• Access: Obtain a summary of your personal data being processed and the processing activities.
• Correction: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected (subject to legal retention requirements).
• Grievance redressal: Have your complaints addressed in a timely manner.
• Nominate: Nominate another individual to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, please contact our Grievance Officer (details below).

Cookies & Tracking

• Our website and platform may use cookies and similar technologies for essential functionality (e.g. maintaining login sessions).
• We do not use cookies for third-party advertising or behavioural tracking.
• You can manage cookie preferences through your browser settings.

Data Breach Notification

In the event of a personal data breach that is likely to cause harm to Data Principals, we will notify the Data Protection Board of India and affected individuals as required under the DPDPA.

Grievance Officer

In accordance with the DPDPA and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we have appointed a Grievance Officer to address your concerns regarding data privacy. The Grievance Officer's details are available on our Contact page. Complaints will be acknowledged within 48 hours and resolved within 30 days of receipt.

Changes to This Policy

We may update this policy to reflect changes in law or our practices. Material changes will be communicated to enrolled students and parents/guardians. Continued use of our services after notification constitutes acceptance of the updated policy.

Contact

For privacy-related queries, please visit our Contact page.

Last updated: 11 February 2026