Privacy Policy
This Privacy Policy (“Policy”) describes how Jan Ayush Sansthan, INDIA (“Institution”, “we”, “us”, or “our”) collects, uses, stores, shares and protects personal information when you visit janayushsansthan.org, use our online forms (including admission and membership), access study materials or downloads, use verification tools, or otherwise interact with our online services. It should be read together with our Terms & Conditions. By continuing to use the website after this Policy is published or updated, you acknowledge the practices described below, to the extent permitted by applicable law.
1. Data controller & contact
For the purposes of this Policy, the data controller is Jan Ayush Sansthan, INDIA, with registered office at 45, Vinayak City, Indira Nagar, Takrohi, Lucknow, Uttar Pradesh 226016, India.
How to reach us
General and privacy-related enquiries may be sent through our Contact page, by telephone at +91-8429700433, or by email at janayushsansthan@gmail.com. When you exercise rights under section 9, please use the subject line “Privacy request” so we can route your message efficiently.
2. Scope of this Policy
This Policy applies to personal data processed through our public website, embedded forms, and online facilities that we operate under the janayushsansthan.org domain. It does not govern independent websites operated by third parties (for example, social networks or payment gateways), which maintain their own privacy notices.
What we mean by personal data
“Personal data” means information that relates to an identified or identifiable natural person. Aggregated or anonymised data that cannot reasonably be linked back to you is not treated as personal data under this Policy.
3. Categories of personal data we collect
Information you provide voluntarily
Depending on how you engage with us, you may supply:
- Identity and profile: full name, date of birth (where requested), photograph, gender or other demographic fields if required on a form;
- Contact details: postal address, email address, telephone numbers;
- Education and programme data: prior qualifications, course or batch interest, employment or training history where relevant to admission;
- Documents: copies of certificates, identity proofs, signatures or other uploads submitted through admission or related workflows;
- Communications: free-text messages, feedback, or grievances submitted via contact forms or email;
- Verification inputs: identifiers you type into verification tools (such as roll numbers or certificate numbers) together with any technical metadata needed to deliver the result.
Information collected automatically
When you browse the site, our servers and security systems may record IP address, browser type and version, device characteristics, referring URL, pages viewed, timestamps, and error logs. We use this information for security monitoring, abuse prevention, capacity planning, and troubleshooting.
4. Purposes for which we use personal data
We process personal data only for legitimate institutional purposes, including:
- Service delivery: evaluating applications, managing admissions and membership, issuing credentials, conducting examinations or assessments where applicable, and responding to verification queries in line with our records;
- Communication: sending notices, schedules, fee reminders, or operational updates by email, SMS, or post where you have supplied such channels;
- Compliance and governance: meeting obligations under education, charity, tax, or employment law; responding to lawful requests from courts, regulators, or law enforcement;
- Website integrity: detecting fraud, unauthorised access attempts, or violations of our Terms & Conditions;
- Improvement: understanding aggregate usage patterns to improve navigation and content (without selling personal data).
We do not sell your personal data to data brokers or unrelated marketers.
5. Legal basis & retention
Legal basis
Depending on the context, we rely on one or more of the following grounds: performance of a contract or pre-contractual steps (for example, processing an application you submit); legal obligation; legitimate interests of the Institution in operating programmes, maintaining records, and securing our systems—balanced against your rights; or consent where we expressly request it (such as optional communications or non-essential cookies, if introduced).
Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including statutory, audit, or dispute-resolution requirements applicable in India. Thereafter we delete, destroy, or irreversibly anonymise information where no further lawful basis exists to keep it. Retention periods may differ by record type (for example, financial records versus casual enquiries).
6. Sharing & recipients
We may disclose personal data to:
- Service providers who host our website, transmit email, store backups, or provide information-technology support, bound by confidentiality and processing instructions;
- Partner organisations (such as training networks or examination bodies) where limited sharing is strictly necessary to deliver a programme you have joined, and subject to appropriate agreements;
- Competent authorities when required by law, court order, or in good faith to protect the rights, property, or safety of the Institution, trainees, staff, or the public.
We do not authorise recipients to use your data for their own unrelated commercial marketing without your consent.
Cross-border transfers
Our primary operations and storage are in India. If a sub-processor stores data outside India, we will take steps consistent with applicable law to ensure an adequate level of protection or appropriate safeguards.
7. Cookies & similar technologies
We may use essential cookies (or equivalent local storage) required for session management, security tokens, or language preferences. These are typically necessary for the site to function reliably.
If we introduce analytics, advertising, or social plug-ins that rely on non-essential cookies or similar technologies, we will update this Policy, describe each category, and—where Indian law or guidelines require—obtain your consent before activation.
You can control cookies through your browser settings; disabling essential cookies may impair certain features.
8. Security
We implement reasonable technical and organisational measures appropriate to the sensitivity of the data we handle, such as access controls, secure transmission where HTTPS is used, malware screening, and staff awareness. No method of electronic storage or transmission over the Internet is completely secure; we cannot guarantee absolute security.
Your responsibilities
Please use only official URLs, verify SSL indicators where sensitive data is entered, choose strong passwords if account features exist, and avoid sending highly confidential information through unsecured public channels.
9. Your rights & choices
Subject to conditions and exceptions under Indian law (including the Digital Personal Data Protection Act, 2023, and rules thereunder, as and when applicable to our processing), you may have rights to:
- Request access to personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request erasure or restriction where grounds exist under law;
- Withdraw consent where processing was consent-based, without affecting the lawfulness of prior processing;
- Lodge a grievance with us or, where provided by law, with a regulatory authority.
To exercise these rights, email us from an address you control, with subject “Privacy request”, describing your request clearly. We may ask for reasonable identity verification before disclosing or changing records. We will respond within timelines permitted or required by law, where such timelines exist.
10. Children & sensitive data
Our programmes and website are primarily directed at adults and young adults in vocational or higher-education-style training contexts. We do not knowingly collect personal data from young children for commercial profiling.
If you believe we have inadvertently collected a minor’s personal data without appropriate authority, please contact us promptly so we can investigate and take remedial steps.
Where forms request sensitive categories of information strictly necessary for admission, health camps, or regulatory compliance, we limit collection to what is needed and handle such data with additional care, in line with law and internal policy.
11. Changes to this Policy
We may revise this Policy to reflect changes in our practices, technology, or legal requirements. The “Last updated” date at the top of this page will be revised accordingly. For material changes, we may also provide a notice on the home page or by email where appropriate. Continued use of the website after the effective date of updates constitutes your acknowledgment of the revised Policy, except where your separate consent is required by law.
12. Related documents
Use of the website is also governed by our Terms & Conditions, which address acceptable use, liability, and jurisdiction. Programme-specific notices published on the Notices page may contain additional data-handling instructions for trainees and members.