PRIVACY POLICY
Last Updated: October 31, 2025
1. INTRODUCTION
CUET Plus ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring a transparent, secure, and responsible approach to handling your personal data. This Privacy Policy explains how we collect, use, disclose, secure, and otherwise process personal data through our website (www.cuet.plus), mobile applications, and all related Services ("Platforms").
This Privacy Policy is designed to comply with India's Digital Personal Data Protection (DPDP) Act, 2023, and the Consumer Protection Act, 2019. By accessing or using our Platforms or Services, you consent to the collection and processing of your personal data as described herein.
For users under 18 years of age: Parental or guardian consent is mandatory before we collect, process, or store your personal data. Parents/guardians can exercise control over their child's data processing by contacting us at privacy@cuet.plus.
2. DEFINITIONS
Personal Data means any information that identifies you or can reasonably identify you, including name, email address, phone number, postal address, date of birth, gender, educational background, exam scores, payment details, biometric data, and device information.
Sensitive Personal Data means personal data of a confidential nature, including financial information, health information, biometric data, or any data explicitly marked as sensitive.
Data Principal means the person to whom personal data relates. For individuals under 18, the parent or legal guardian is the data principal.
Data Fiduciary means CUET Plus, which collects, processes, and determines the purpose and manner of processing personal data.
Processing means any operation performed on personal data, including collection, storage, use, analysis, transmission, or deletion.
Consent means clear, affirmative, informed, free, specific, and unambiguous authorization by the data principal for processing personal data.
3. PERSONAL DATA WE COLLECT
We collect personal data in the following categories:
3.1 Information Provided Directly by You
When you register, enroll in programs, or interact with our Platforms, we collect:
Full name, date of birth, and gender
Email address and phone number
Postal address and city
Educational background and exam scores
Stream (Science/Commerce/Humanities) and subject selections
Parent/guardian name and contact details (for users under 18)
Payment information (card/bank details processed securely through payment gateways)
Queries, feedback, and support tickets submitted to us
3.2 Information Collected Automatically
When you access our Platforms, we automatically collect:
Device information (device type, operating system, browser type)
IP address and device identifier
Pages visited, content accessed, and duration of access
Search queries and clicks
Geolocation data (based on IP address)
Session recordings and activity logs (where technically applicable)
Cookies and similar tracking technologies (see Section 3.3)
3.3 Cookies and Tracking Technologies
We use cookies and similar technologies to:
Remember your preferences and login status
Analyze traffic and usage patterns
Improve the user experience
Track marketing campaign effectiveness
You can manage cookie preferences through your browser settings. Please note that disabling cookies may limit your access to certain features.
3.4 Information from Third Parties
We may collect personal data from:
Payment processors (card and bank details for transaction verification)
Social media platforms (if you sign up via social login)
Parent/guardian information (when provided during registration of minors)
We only collect data from third parties with your explicit consent or as necessary to provide the Services.
4. PURPOSE OF DATA COLLECTION AND PROCESSING
We collect and process your personal data for the following purposes:
4.1 Providing Services
Enrolling you in coaching programs, courses, or services
Delivering educational content and study materials
Conducting assessments, mock tests, and performance tracking
Providing counselling and mentorship services
Enabling you to access your account and Services
4.2 Communication and Support
Sending program updates, course materials, and important notices
Responding to your inquiries and support requests
Sending reminders about classes, deadlines, and payments
Providing newsletters and educational updates (you can opt out anytime)
4.3 Payment Processing
Processing enrollment fees and course payments
Generating invoices and receipts
Managing refunds and cancellations
Handling billing disputes
4.4 Personalization and Analytics
Analyzing your learning progress and performance
Personalizing course recommendations and content
Understanding usage patterns to improve Services
Generating anonymized, aggregated reports
4.5 Legal and Compliance Obligations
Complying with applicable laws and regulations
Addressing legal claims or disputes
Preventing fraud, misuse, or unauthorized access
Maintaining security and integrity of our systems
4.6 Marketing and Promotional Activities (with explicit opt-in consent)
Sending information about new programs, offers, and promotions
Conducting surveys and feedback collection
Featuring success stories and testimonials (with permission)
Important: We will NOT process your personal data for any purpose beyond those listed above without first obtaining explicit, separate consent.
5. LEGAL BASIS FOR PROCESSING
We process your personal data based on:
5.1 Consent
Your explicit, informed, and unambiguous consent provided during registration or at the time of data collection
For users under 18, parental/guardian consent is mandatory
5.2 Contract Performance
Processing necessary to fulfill our contractual obligations (enrollment in programs, delivery of Services)
5.3 Legal Obligation
Compliance with applicable laws, regulations, or court orders
5.4 Legitimate Interests
Protecting your security and privacy
Preventing fraud and misuse
Improving and maintaining our Services
For users under 18: We collect verifiable parental/guardian consent before processing their data. Parents retain full control over their child's personal data and can request access, correction, or deletion at any time.
6. SHARING OF PERSONAL DATA
6.1 We Will NOT Share Personal Data
Except as specified in this Privacy Policy, we do not sell, trade, rent, or share your personal data with third parties for their independent purposes.
6.2 We Share Personal Data With
Service Providers: Third-party vendors who assist in delivering Services (payment processors, cloud hosting providers, email service providers, analytics platforms). These vendors are contractually bound by confidentiality obligations and can only use your data to provide services to CUET Plus.
Legal Authorities: Government agencies or law enforcement if required by court order, legal process, or applicable law.
Parents/Guardians: For users under 18, we may share relevant information with the registered parent/guardian.
Program Partners: Universities or admission counselling partners (only with your explicit consent and limited to necessary information).
6.3 No Data Sale or Transfer
We do NOT sell, trade, or transfer your personal data to third parties for marketing or commercial purposes. Any sharing is strictly limited to providing you with the requested Services.
7. DATA RETENTION
7.1 Retention Period
We retain your personal data for as long as necessary to:
Provide the Services and fulfill contractual obligations
Comply with legal and regulatory requirements
Resolve disputes or handle complaints
Enforce our agreements
7.2 Retention Schedule
Active Users: Data retained while the account is active and for 3 years after account closure
Payment Records: Retained for 5 years for tax and audit compliance
Communications: Retained for 1 year unless legally required to retain longer
Marketing Data: Retained for the duration of your consent; deleted upon withdrawal of consent
7.3 Deletion of Data
Upon deletion of your account or your request for data deletion, we will:
Delete personal data within 30 days (except where retention is legally required)
Maintain anonymized or aggregated data for analytics purposes
Retain essential data for legal or compliance purposes (e.g., tax records)
8. DATA SECURITY
8.1 Security Measures
We implement industry-standard technical, administrative, and physical security measures to protect personal data from unauthorized access, disclosure, modification, or destruction:
Encryption: Sensitive data transmitted over HTTPS/SSL encryption
Access Controls: Role-based access to ensure only authorized personnel can view personal data
Firewalls and Intrusion Detection: Continuous monitoring and prevention of unauthorized access
Data Backups: Regular, secure backups to prevent data loss
Staff Training: Regular security awareness training for our team
Password Protection: Secure password storage using industry-standard hashing
8.2 Data Localization
Personal data of Indian data principals is stored within India in compliance with the DPDP Act, 2023.
8.3 Limitations
While we implement robust security measures, no system is 100% secure. We cannot guarantee complete protection against unauthorized access, hacking, or other data breaches. You use our Platforms at your own risk.
9. DATA BREACHES AND INCIDENT RESPONSE
9.1 Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will:
Notify you and the Data Protection Board of India (if required by law) without unreasonable delay
Provide information about the nature of the breach, potential impact, and remedial measures
Offer practical steps you can take to protect yourself
9.2 Breach Investigation
We will investigate any breach to determine:
The scope and nature of the breach
Categories and number of data subjects affected
Potential consequences for your rights and freedoms
Remedial and preventive measures implemented
10. YOUR PRIVACY RIGHTS AND CONTROL
Under the DPDP Act, 2023, you have the following rights:
10.1 Right to Access
You have the right to access personal data held about you. To request access, contact privacy@cuet.plus with your full name and registered email address. We will provide your data within 30 days.
10.2 Right to Correction
You can request correction of inaccurate or incomplete personal data. We will verify the request and update your information within 30 days.
10.3 Right to Deletion
You can request deletion of your personal data, subject to legal retention requirements. Upon verification, we will delete your data within 30 days unless retention is legally mandated.
10.4 Right to Withdraw Consent
You can withdraw consent for processing personal data at any time. Withdrawal will not affect the lawfulness of processing done prior to withdrawal. To withdraw consent, email privacy@cuet.plus with the specific consent you wish to withdraw.
10.5 Right to Data Portability
You can request a copy of your personal data in a structured, commonly used, and machine-readable format. We will provide this within 30 days.
10.6 Right to Grievance
You have the right to lodge a grievance regarding data processing. See Section 13 for grievance redressal procedures.
10.7 Right to Opt-Out of Marketing
You can opt out of promotional emails and marketing communications at any time by clicking the "Unsubscribe" link in emails or changing your communication preferences in your account settings.
11. THIRD-PARTY LINKS AND SERVICES
Our Platforms may contain links to third-party websites and applications. We are not responsible for the privacy practices of third parties. Please review the privacy policies of any third-party services before providing your personal data.
We are not liable for:
Data breaches or misuse of data by third parties
Privacy practices of third-party platforms or websites
Loss or unauthorized access to data through third-party services
12. CHILDREN'S PRIVACY (USERS UNDER 18)
12.1 Parental Consent
We do not knowingly collect personal data from individuals under 18 years without verifiable parental or guardian consent. Registration by minors requires explicit parental consent.
12.2 Parental Rights
Parents/guardians have the right to:
Access their child's personal data
Request correction or deletion of their child's data
Withdraw consent for future processing
Exercise any of the rights listed in Section 10
12.3 Age Verification
We reserve the right to request age verification documents to confirm user age. Failure to provide verification may result in account suspension.
13. GRIEVANCE REDRESSAL
13.1 Grievance Officer
Name: [Grievance Officer Name]Email: privacy@cuet.plus / grievance@cuet.plusPhone: [Contact Number]Address: [CUET Plus Registered Address]Response Time: 5 business days
13.2 Escalation to Data Protection Board
If you are not satisfied with our response, you can lodge a complaint with the Data Protection Board of India (once operational) or approach the Telecom Disputes Settlement and Appellate Tribunal.
13.3 Consumer Redressal
You can also escalate complaints through:
National Consumer Helpline: 1800-11-4000 or https://edaakhil.nic.in
District Consumer Disputes Redressal Commission
State or National Consumer Commission (for larger claims)
14. AMENDMENTS TO THIS PRIVACY POLICY
We may update this Privacy Policy to reflect changes in law, technology, or our practices. Material changes will be communicated via email or Website notification at least 15 days in advance. Continued use of our Platforms after amendments signifies your acceptance of the updated Privacy Policy.
15. CONTACT INFORMATION
For questions or concerns about this Privacy Policy or your personal data:
CUET PlusEmail: privacy@cuet.plusPhone: [Contact Number]Website: www.cuet.plusAddress: [Full Address]