Privacy Policy

1. Who We Are

Ujjwal's Academy provides spoken English and English communication learning services through https://ujjwalsacademy.in. This Privacy Policy explains how we handle personal information when you browse the website, create an account, verify your email, request a demo, enrol in a course, submit payment details for verification, or contact us.

This policy applies to the website, student dashboard, course and enrolment workflows, and communications with the Academy. Third-party websites and applications are governed by their own privacy notices.

2. Information We Collect

We collect information that is reasonably needed to operate the learning service. Depending on how you use the website, this may include:

• Account information: name, email address, phone number or other profile details you choose to provide, and authentication-related records such as email-verification status.
• Learning and enrolment information: courses selected, enrolment status, course access dates, class schedules, attendance and other information recorded while providing the service.
• Payment-verification information: course, amount, currency, payment status, UPI transaction reference or UTR, payer name, notes and any payment proof you voluntarily submit through the website.
• Communications: messages and details you send to our support team by email, phone, WhatsApp or website forms.
• Technical and security information: limited device, browser, IP address, request and server-log information used to secure, troubleshoot and operate the website.

3. How We Use Information

We use personal information to create and protect accounts, send and verify email OTPs, provide course information, manage enrolments and course access, verify submitted payment references, respond to questions, organise classes, maintain service security, prevent misuse, resolve disputes and meet applicable legal or accounting obligations.

Promotional updates, where offered, should be sent only where permitted and with any consent or opt-out mechanism required by applicable law. Essential account, verification, payment and service messages may still be sent when they are necessary to provide a service you requested.

4. UPI Payments and Payment Security

The current course checkout uses a manual UPI payment and verification process. You complete the payment in your own UPI application and may then submit a transaction reference or UTR, payer name, note or proof so an authorised Academy administrator can check the payment and update the enrolment.

The website does not ask you to enter or share your UPI PIN, bank password, card CVV or net-banking password with the Academy. Never send these secrets to us by email, chat or a form. A submitted UTR alone does not prove that funds were received; access is granted only after the payment is checked and approved.

5. Cookies and Session Technologies

The website may use essential cookies or similar browser technologies for authentication, session continuity, security and core website functionality. Blocking these technologies may cause sign-in, account or checkout features to stop working correctly.

This policy does not state that optional advertising pixels or analytics products are active. If the Academy adds non-essential tracking tools in the future, this policy and any legally required notice or consent options should be updated before those tools are used.

6. When We Share Information

We do not sell, rent or trade your personal information to data brokers or external advertisers. Information may be shared only where needed to provide the service or meet a lawful requirement, including with:

• Technology providers used to host and operate the website, backend, database and transactional email delivery, including Vercel, Render and Resend as currently configured.
• Authorised Academy administrators or staff who need the information to manage accounts, enrolments, payment verification, classes or support.
• Banks, UPI applications or other payment services that you choose to use. These services handle your transaction under their own terms and privacy notices.
• Government, regulatory, law-enforcement or judicial authorities where disclosure is required or legally permitted.

7. Hosting, Security and International Processing

We use reasonable technical and organisational safeguards intended to protect personal information from unauthorised access, loss, misuse or alteration. These safeguards may include encrypted connections, access controls, password protection, restricted administrator access and service monitoring. No online service can guarantee absolute security.

Some service providers used to host the website, store data or deliver email may process information outside India. For example, the current backend/database infrastructure is hosted through Render in Singapore, while transactional email is provided by Resend. Provider regions and arrangements may change; we will handle such processing in accordance with applicable law.

8. Retention of Information

We keep information for as long as it is reasonably needed to operate your account and courses, respond to support requests, verify and reconcile transactions, protect the service, resolve disputes and comply with applicable legal, accounting or tax obligations. The exact period may differ by record type.

Where information is no longer needed, we will take reasonable steps to delete it or irreversibly anonymise it, subject to lawful retention requirements and records needed to establish, exercise or defend legal claims.

9. Your Requests and Choices

You may contact us to request access to or correction of personal information associated with your account, ask questions about our handling of it, request deletion, or withdraw consent where processing relies on consent. We may need to verify your identity before acting on a request.

To request account closure or deletion, email info@ujjwalsacademy.in from the email address associated with your account with the subject line 'Account Deletion Request'. We aim to process verified requests within 30 business days, while preserving records that must be kept for legal, accounting, security or transaction-dispute purposes.

10. Children and Learners Under 18

Learners under 18 must have a parent or legal guardian involved and provide verifiable parental or guardian consent where required by applicable law before their personal information is submitted or a paid enrolment is made. If the registration flow does not provide a suitable consent method, the parent or guardian should contact info@ujjwalsacademy.in before the learner registers.

We do not intend to use children's personal information for behavioural advertising or profiling. A parent or guardian who believes a child has submitted personal information without appropriate consent should contact us so we can review the request.

11. Third-Party Services and Links

The website may link to external services used for payments, scheduling, classes or communication. We do not control third-party services and are not responsible for their independent privacy practices, security or availability. Please review their terms and privacy notices before using them.

12. Changes to This Policy

We may update this Privacy Policy when our services, information practices or applicable law changes. The latest version will be published on this page with a revised 'Last Updated' date. Material changes may also be communicated through the website or the contact details associated with your account where appropriate.

13. Grievance Officer and Contact

For privacy questions, data-related requests or grievances, contact the Academy using the details below. Please do not include passwords, OTPs, UPI PINs or other confidential authentication information in your message.

• Academy: Ujjwal's Academy
• Grievance Officer: Ujjwal Kant
• Email: info@ujjwalsacademy.in
• WhatsApp support: +91 99345 02143
• Correspondence address provided by the Academy: Barauna, District Vaishali, Bihar – 844123, India.
• Target handling timeline: acknowledgement within 48 hours and an effort to resolve within 30 days, subject to the nature of the request and applicable legal requirements.