Privacy Policy

1. Information We Collect

2. How We Use Your Information

We use the collected information to:

1. Create and manage your account;
2. Provide college search, comparison, rank prediction, and mock test services;
3. Process payments for paid Services and send transaction confirmations/invoices;
4. Facilitate counselling session bookings and connect you with Counsellors;
5. Send administrative communications (order confirmations, OTPs, service updates);
6. Send promotional communications, offers, and newsletters (with opt-out available);
7. Personalize content, college recommendations, and AI chatbot responses;
8. Detect, prevent, and investigate fraud, abuse, or security incidents;
9. Analyze usage trends to improve the Platform;
10. Comply with legal obligations, including those under tax, RBI, and consumer protection laws.

3. Legal Basis for Processing

We process your personal data based on: (a) your consent, provided at the time of registration/purchase; (b) performance of a contract with you; (c) compliance with legal obligations; and (d) our legitimate interests in operating and improving the Platform, balanced against your rights.

4. Sharing & Disclosure of Information

We do not sell your personal data. We may share information with:

• Payment Gateway Partners: Solely to process transactions. These partners are independently PCI-DSS certified and RBI-authorized.
• Counsellors/Advisors: Limited information necessary to facilitate a booked counselling session (name, contact number, academic preferences).
• Service Providers: Hosting, analytics (e.g., Google Analytics), cloud storage, email/SMS/WhatsApp notification providers, customer support tools — under strict confidentiality obligations.
• Colleges/Partner Institutions: Only where you explicitly submit an inquiry or application through the Platform to that institution, and only with your consent.
• Legal & Regulatory Authorities: Where required by law, court order, or to protect our rights, users, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

5. Payment Security

All payment transactions on the Platform are processed through third-party payment gateways that are compliant with PCI-DSS (Payment Card Industry Data Security Standard) and regulated by the Reserve Bank of India (RBI). Card and banking credentials are encrypted end-to-end and are never stored on SuggestMyCollege's servers.

6. Cookies & Tracking Technologies

• 6.1We use cookies, web beacons, and similar technologies to remember your preferences, keep you logged in, understand usage patterns, and serve relevant content/ads.
• 6.2Types of cookies used: strictly necessary, performance/analytics, and functional/advertising cookies.
• 6.3You can control or disable cookies through your browser settings; however, disabling essential cookies may affect Platform functionality.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this Policy, comply with legal/tax/accounting obligations (including retention of transaction records as mandated under RBI and Indian tax regulations, typically up to 8 years for financial records), and resolve disputes. Mock test performance data may be retained to provide historical analytics unless deletion is requested.

8. Your Rights

Subject to applicable law (including the DPDP Act, 2023), you have the right to:

• Access: The personal data we hold about you;
• Correct/Update: Inaccurate or incomplete data;
• Withdraw consent: For processing (which may limit your access to certain Services);
• Request erasure: Of your account and associated data, subject to statutory retention requirements (e.g., payment records);
• Grievance redressal: Through our Grievance Officer (see Section 12);
• Nominate: An individual to exercise your rights in the event of death or incapacity, as provided under the DPDP Act.

To exercise these rights, email us at Contact@suggestmycollege.com. We will respond within a reasonable timeframe as required by law.

9. Data Security

We implement industry-standard technical and organizational measures — including encryption in transit (SSL/TLS), access controls, and regular security reviews — to protect your data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our Services may be used by students under 18 with parental/guardian consent. We do not knowingly collect personal data from children under 13 without verifiable parental consent. If we learn such data has been collected without consent, we will delete it promptly.

11. Data Transfers

Your data is primarily stored on secure servers located in India. Where data is processed by service providers outside India (e.g., cloud/analytics providers), we ensure appropriate safeguards consistent with the DPDP Act, 2023.

13. Third-Party Links

The Platform may link to third-party websites (colleges, exam boards, app stores). This Privacy Policy does not apply to such third-party sites; please review their respective privacy policies.

14. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via the Platform or email. Continued use after such updates constitutes acceptance of the revised Policy.