top of page

Privacy Policy

Effective date: 20 October 2026 · Last updated: 20 October 2026

 

1. Who we are

Abhinavagupta Institute of Advanced Studies ("AIAS", "we", "us") is operated by Abhinavagupta Institute of Advanced Studies Foundation, a not-for-profit company under Section 8 of the Companies Act, 2013 (CIN U72200KL2024NPL089094; Section 8 Licence No. 159455; PAN ABBCA1899C). Registered office: Kalathingal House, Pantheerankave PO, Perumanna, Kozhikode, Kerala 673019. Campus: Rhythmbhara, Valacode, Mathaipara PO, Vagamon, Idukki, Kerala 685505. We are the Data Fiduciary (under Indian law) and Data Controller (under the GDPR) for personal data collected through www.aiasbharat.com and our courses, events and publications.

Contact for privacy matters: Vaishak Sudhakaran, PRO & Grievance Officer, aiasbharat@gmail.com, +91 62821 45504.

 

2. Data we collect

  • Identity and contact: name, email, phone, postal address, which you give at sign-up, enrolment, purchase or through the contact form.

  • Account: log-in email, password (stored encrypted by our platform) and profile details.

  • Academic: courses enrolled, progress, assignments, attendance and certificates.

  • Transaction: order and payment reference, amount and billing address. We never see or store full card numbers, UPI PINs or bank log-in details.

  • Communications: messages, feedback and newsletter preferences.

  • Technical: IP address, device and browser type, pages visited and cookies, collected automatically (see our Cookie Policy).

We do not knowingly collect sensitive data such as health, caste, religious belief or biometric data. Please do not send it to us.

 

3. Why we use it and on what basis

  • Enrol you, deliver courses and issue certificates (India: consent / specified legitimate use; GDPR: contract).

  • Process payments, refunds and delivery of books (India: consent / legitimate use; GDPR: contract).

  • Answer queries and grievances (India: consent; GDPR: legitimate interest).

  • Send the newsletter and event updates (consent, by opt-in; you can withdraw at any time).

  • Keep the site secure and improve it (India: consent / legitimate use; GDPR: legitimate interest).

  • Meet legal, tax, audit and IKS/AICTE reporting duties (legal obligation).

Reports to AICTE or the Ministry of Education use aggregated or anonymised figures (for example, student counts), unless the law requires named data.

 

4. Consent

Where we rely on consent, we ask for it with a clear, separate tick box that is never pre-ticked. You can withdraw consent as easily as you gave it, by using the unsubscribe link or by emailing us. Withdrawal does not affect processing already done. If you withdraw consent needed for a course, we may be unable to continue providing it.

 

5. Who we share data with

We do not sell or rent personal data. We share it only with:

  • Our website and learning platform (Wix.com), for hosting, accounts, online programmes and email

  • Payment services (Wix checkout, PayPal, Wise, and our bank for UPI and bank transfers), to process payments and refunds

  • India Post, to deliver books

  • Faculty and visiting fellows, only as needed to teach and assess you

  • Government bodies, courts or regulators, when the law requires it

Each processor is bound by contract to protect your data and use it only on our instructions.

 

6. Transfers outside India

Some providers store data on servers outside India, including in the USA and EU. We transfer data only to countries not restricted by the Government of India. For users in the EU/UK, transfers rely on Standard Contractual Clauses or equivalent safeguards.

 

7. How long we keep it

  • Account and academic records: while your account is active, plus 3 years. Certificate records are kept longer so certificates can be verified.

  • Payment and invoice records: 8 years, as tax and accounting law requires.

  • Contact form and grievance messages: 3 years after the matter closes.

  • Newsletter list: until you unsubscribe.

  • Inactive accounts: erased after 3 years of no activity, with 48 hours' notice before erasure.

 

8. Your rights

You can ask us to:

  • Give you a summary of your personal data and who we have shared it with

  • Correct, complete or update inaccurate data

  • Erase data we no longer need, or that you have withdrawn consent for

  • Withdraw consent at any time

  • Nominate a person to exercise your rights if you die or become incapacitated

  • Hear your grievance and resolve it

  • (GDPR users also) restrict or object to processing, and receive your data in a portable format

Email aiasbharat@gmail.com with the subject "Data request". We may verify your identity first. We respond within 30 days, and resolve grievances within the time set by law (no more than 90 days under the DPDP Rules, 2025).

If you are not satisfied, you may complain to the Data Protection Board of India. EU/UK users may complain to their local data protection authority.

 

9. Children

Our courses are meant for adults. We do not knowingly process data of anyone under 18 without verifiable consent from a parent or lawful guardian. We do not track, profile or target advertising at children. If you believe a child has given us data without consent, contact us and we will delete it.

 

10. Security

We use HTTPS encryption, access controls, platform-level encryption of stored data and access logs. Staff and faculty see only what their role needs. No system is fully secure. If a breach affects your data, we will inform you and the Data Protection Board of India without delay, as the law requires, explaining what happened, its likely impact and what we are doing about it.

 

11. Changes

We will post changes on this page with a new "Last updated" date. For material changes we will also email registered users.

bottom of page