Legal & Compliance

Privacy Policy

iAct Institute  ·  iactinstitute.com
Effective Date: 1 July 2025  ·  Last Updated: 7 July 2026

🗓 Last updated: 7 July 2026
Your privacy matters to us. This Privacy Policy explains what personal information IACT TechPro Institute ("we", "us", "our") collects from visitors to iactinstitute.com and our mobile app, why we collect it, how we protect it, and the choices you have. By using our services you agree to the practices described here.

📋 1. Overview

IACT TechPro Institute is an education technology company registered in India, providing online and offline courses in Programming, Data Science, UI/UX Design, Cyber Security, Animation & VFX, and Digital Marketing. We operate the website iactinstitute.com and associated mobile applications.

This policy applies to all information collected through our website, mobile apps, and any related services. It does not apply to third-party websites or services that may be linked from our platform.

Legal basis (India): We process your data in accordance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Where applicable, we align with global standards such as the GDPR.

📦 2. Data We Collect

2.1 Information You Provide Directly

CategorySpecific Data PointsWhen Collected
Enquiry / ContactFirst name, last name, email address, phone number, course interest, messageWhen you submit the contact form
Course EnrolmentFirst name, last name, email address, phone numberDuring checkout / registration
AccountEmail address, password (hashed — never stored in plain text)Admin accounts only
ReviewsYour name, star rating, review textWhen you post a course review

2.2 Information Collected Automatically

  • IP address and approximate geographic location (city/state level only)
  • Browser type, version, and operating system
  • Pages visited, time spent, and navigation path on our site
  • Referring URL (how you arrived at our site)
  • Device type (desktop, mobile, tablet) and screen resolution
  • Crash reports and performance data from our mobile app

2.3 Payment Information

We do not store credit card numbers, debit card details, UPI IDs, or bank account information. All payment processing is handled exclusively by Razorpay (a PCI-DSS Level 1 certified payment gateway). We only receive confirmation of payment success or failure and an order reference number.

⚙️ 3. How We Use Your Data

We use the data we collect for the following purposes:

  • To process your course enrolment and confirm payment
  • To send you course access details, receipts, and important updates related to your enrolment
  • To respond to enquiries, provide career counselling, and offer customer support
  • To improve our website, mobile app, and course content based on usage analytics
  • To personalise the course recommendations shown to you
  • To send promotional emails about new courses or offers (only with your consent — unsubscribe anytime)
  • To detect and prevent fraud, abuse, and security threats
  • To comply with legal obligations under Indian law
We never sell your personal data to advertisers or data brokers. We do not share your information with third parties for their own marketing purposes.

🤝 4. Data Sharing

We share personal data only in the following limited circumstances:

RecipientPurposeData Shared
RazorpayPayment processingName, email, phone, order amount
Email / SMS providersSending enrolment confirmation and alertsName, email, phone
Analytics services (anonymised)Website usage analyticsAnonymised usage data only — no personal identifiers
Law enforcement / courtsWhen required by Indian law or valid court orderOnly what is legally required

All third-party service providers we work with are contractually required to handle your data securely and only for the stated purpose.

💳 5. Payment Security

Course fees are processed securely through Razorpay. When you click "Pay & Enroll", you are directed to Razorpay's encrypted payment environment. IACT TechPro Institute:

  • Never sees or stores your card number, CVV, or UPI credentials
  • Does not store any payment instrument details on our servers
  • Verifies payment authenticity using Razorpay's HMAC-SHA256 webhook signature verification
Razorpay is certified to PCI DSS Level 1 — the highest level of payment security certification. Their privacy policy is available at razorpay.com/privacy.

🍪 6. Cookies & Local Storage

We use cookies and browser local storage to make our site work and to improve your experience. Here is what we use:

Name / TypePurposeDuration
admin_token (localStorage)Keeps admin users logged in securely between page refreshes (JWT token)8 hours or until logout
site_lang (localStorage)Remembers your language preference (English / Hindi / Marathi)Indefinite (until cleared)
checkout_course (sessionStorage)Temporarily holds the course you selected for checkout — cleared after paymentBrowser session only
Analytics cookies (optional)Anonymised page view and navigation tracking for site improvementUp to 12 months

We do not use advertising cookies or sell cookie-based data to any third party. You can clear cookies and local storage at any time through your browser settings — this will log you out of any active admin session.

🗄️ 7. Data Retention

  • Enquiry data — retained for 2 years from submission date, then permanently deleted
  • Enrolment and order records — retained for 7 years to comply with Indian GST and accounting laws
  • Student profile data — retained for the duration of the student's association with IACT TechPro, plus 2 years after the last interaction
  • Course reviews — retained indefinitely while the course is live; removed within 30 days of a verified deletion request
  • Admin account data — deleted within 30 days of account closure
  • Analytics data — aggregated and anonymised after 12 months; raw data deleted

⚖️ 8. Your Rights

You have the following rights regarding your personal data:

  1. Access — Request a copy of the personal data we hold about you
  2. Correction — Ask us to correct inaccurate or incomplete data
  3. Deletion — Request deletion of your data (subject to our legal retention obligations)
  4. Portability — Receive your data in a structured, machine-readable format
  5. Withdraw consent — Unsubscribe from marketing emails at any time via the unsubscribe link in any email we send
  6. Object to processing — Object to any processing of your data that is not strictly necessary for your enrolment or legal compliance
  7. Complaint — Lodge a complaint with India's Ministry of Electronics and Information Technology (MeitY) if you believe your data rights have been violated

To exercise any of these rights, email us at hello@techproinstitute.in with the subject line "Privacy Request – [Your Name]". We will respond within 30 days.

👦 9. Children's Privacy

Our courses are designed for individuals 18 years of age and older. We do not knowingly collect personal data from children under 18. If you are a parent or guardian and believe your child has submitted personal information to us, please contact us immediately at hello@techproinstitute.in and we will delete it promptly.

Note for minors: If you are under 18, please have a parent or legal guardian review our terms before registering for any course or submitting any personal information.

🔗 10. Third-Party Links

Our website and mobile app may contain links to external websites — including LinkedIn profiles of instructors, company career pages, and course-related resources. These third-party sites are not operated by us and this Privacy Policy does not apply to them.

We encourage you to review the privacy policy of every website you visit. We are not responsible for the content or privacy practices of any third-party site.

🔐 11. Data Security

We take the security of your personal data seriously and implement the following technical and organisational measures:

  • All data transmission is encrypted in transit using HTTPS / TLS 1.2+
  • Passwords are hashed using bcrypt with a work factor of 10 — your actual password is never stored anywhere
  • API endpoints are protected using JWT (JSON Web Token) authentication with short expiry windows
  • Payment signatures are verified using HMAC-SHA256 to prevent tampering
  • Database access is restricted to authorised server processes only — not publicly accessible
  • Admin panel access requires authentication — no public access to management functions
  • Rate limiting is applied to all API endpoints to prevent brute-force attacks
Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. If you become aware of any security vulnerability related to our services, please report it responsibly to hello@techproinstitute.in.

📝 12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do:

  • We update the "Last Updated" date at the top of this page
  • For material changes, we will send a notice to the email address associated with your account or display a prominent banner on the website
  • Your continued use of our services after the change takes effect constitutes acceptance of the updated policy

We encourage you to review this page periodically. All previous versions are available on request.

✉️ 13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please reach out to us:

OrganisationiAct Institute
Websiteiactinstitute.com
Emailcontact@intrepidians.com
Phone+91 9136781034
Address C001 The Panvelkar Royal Square, Next to Gorphade Maidan, Opp to Tulsi vihar, Badlapur [West]
Response timeWe aim to respond to all privacy-related requests within 30 business days

Have a privacy question?

Our team is happy to help. Reach out directly and we will get back to you within 30 days.