Privacy Policy

1. Introduction

Saroj International University ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile applications, or interact with our services.

We recognize that your personal data belongs to you and we are committed to being transparent about how we collect, use, and share your information in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and other relevant privacy regulations.

Please read this policy carefully. By accessing or using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, you should not use our services.

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you voluntarily provide when you:

• Create an account or register for our services
• Apply for admission or enroll in academic programs
• Submit inquiries through contact forms or email
• Participate in surveys, competitions, or promotions
• Make payments or financial transactions
• Subscribe to newsletters or marketing communications
• Attend our events or participate in our programs

2.2 Types of Personal Data Collected

2.3 Information Collected Automatically

When you visit our website, we automatically collect certain information about your device and browsing actions, including:

• Log data (IP address, browser type, pages visited, time spent)
• Device information (hardware model, operating system, unique device identifiers)
• Location data (approximate location derived from IP address)
• Analytics data (interactions with our website and services)

3. How We Use Your Information

We use the information we collect for various purposes, including:

• Academic Administration: Processing applications, enrollment, academic record maintenance, degree verification, and providing educational services.
• Service Delivery: Providing and maintaining our services, authenticating users, processing payments, and communicating about your account.
• Communication: Sending important notices, responding to inquiries, providing customer support, and administrative information.
• Improvement & Development: Analyzing usage trends, improving our services, and developing new features.
• Marketing: Sending promotional communications about programs, events, and services.
• Security & Compliance: Detecting and preventing fraud, protecting our systems, and complying with legal obligations.

3.1 Legal Basis for Processing

• Contractual necessity: When processing is necessary for the performance of a contract with you
• Legal obligation: When processing is necessary for compliance with legal requirements
• Legitimate interests: When processing is necessary for our legitimate interests (balanced against your rights)
• Consent: When you have given clear consent for specific purposes
• Vital interests: When processing is necessary to protect someone's life
• Public task: When processing is necessary to perform a task in the public interest

4. Data Sharing and Disclosure

4.1 Service Providers

We engage third-party companies and individuals to facilitate our services, provide services on our behalf, perform service-related services, or assist us in analyzing how our services are used. These third parties have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

4.2 Academic Partners

We may share information with partner institutions, accreditation bodies, or other educational organizations for academic purposes, including:

• Verification of academic credentials
• Joint academic programs
• Research collaborations
• Study abroad programs

4.3 Legal Requirements

We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or similar event, your information may be transferred as part of that transaction.

5. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside India and choose to provide information to us, please note that we transfer the data, including personal data, to India and process it there. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy and no transfer of your personal data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

6. Data Retention

We will retain your personal data only for as long as is necessary for the purposes set out in this privacy policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

For students and alumni, we typically retain academic records indefinitely as part of your permanent academic record. Other personal data will be retained according to the following schedule:

7. Data Security

The security of your data is important to us. We implement appropriate technical and organizational measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

7.1 Security Measures

• Encryption of data in transit and at rest
• Regular security audits and vulnerability testing
• Access controls and authentication mechanisms
• Secure network architecture and firewalls
• Incident response and breach notification procedures
• Employee training on data protection

7.2 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our services and improve user experience.

8.1 Types of Cookies

8.2 Managing Cookies

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our services.

Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.

9. Third-Party Links

Our services may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

10. Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us.

If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information from our servers.

For students under 18 years old applying to our programs, we may require parental consent for certain data processing activities.

11. Your Data Protection Rights

Depending on your location and applicable laws, you may have certain rights regarding your personal data:

• Right to Access: Request copies of your personal data that we hold.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data under certain conditions.
• Right to Restriction: Request restriction of processing your personal data.
• Right to Data Portability: Request transfer of your data to another organization.
• Right to Object: Object to our processing of your personal data.
• Right to Withdraw Consent: Withdraw consent where processing is based on consent.
• Right to Complain: Lodge a complaint with a supervisory authority.

11.1 Exercising Your Rights

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section below. We may need to verify your identity before responding to your request. We will respond to all legitimate requests within one month. Occasionally it may take us longer if your request is particularly complex or you have made several requests, in which case we will notify you and keep you updated.