This policy explains what personal data OnePlace Digital Academy collects, why we collect it, how long we keep it, who we share it with, and how you can control it. It is written to meet the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.
At a glance
| Who is responsible | OnePlace Digital Academy (Data Fiduciary), Soham Complex, College Road, Nashik 422005 |
|---|---|
| What we collect | Contact details, course interest, admission and payment records, class participation, website usage data |
| Why | To answer your enquiry, run your admission and classes, issue certificates, provide placement assistance and meet legal duties |
| We never | Sell or rent your personal data to anyone |
| Your rights | Access, correction, erasure, withdrawal of consent, grievance redressal, nomination |
| Contact | Grievance Officer: Anjali · [email protected] · +91 88188 18950 |
1. Who we are
“OnePlace Digital Academy”, “OnePlace”, “we” or “us” means ONEPLACEDIGITAL, a proprietorship firm registered under Udyam Registration No. UDYAM-MH-23-0260540, operating the training institute at Soham Complex, Patil Lane No. 3, College Road (above Namco Bank), Nashik, Maharashtra 422005, and the website oneplacedigital.com. For the purposes of the DPDP Act, we are the Data Fiduciary for the personal data described here. “You” means any visitor, enquirer, applicant, student, alumnus or parent/guardian whose data we process.
2. What data we collect and where it comes from
| Source | Data |
|---|---|
| Website forms (Book a Free Demo, contact, syllabus, workshop sign-ups) | First and last name, mobile number, email, career goal or course of interest, the page or button you came from |
| Mobile number verification | Mobile number and a one-time verification status. The OTP is generated and sent by our verification service provider over WhatsApp; we do not store the OTP itself |
| Meta (Facebook/Instagram) and Google lead-form ads | The fields shown on that ad form, usually name, mobile number, email, city and course interest, plus the campaign the lead came from |
| WhatsApp, phone calls and website chat | Your number, name, messages you send us, call notes made by our counsellors |
| Admission form (paper or online) | Name, date of birth, address, photograph, educational details, an identity document copy (we ask for masked Aadhaar where Aadhaar is used), parent/guardian details for students under 18, emergency contact |
| Fees and payments | Receipt details, instalment schedule, transaction reference. Card and bank details are handled by the bank or payment provider; we do not store full card numbers |
| During the course | Attendance, assignments, assessment results, projects, student-portal activity, certificate number |
| Placement assistance | CV, portfolio, interview feedback, offer details you choose to share |
| Website usage | IP address, device and browser type, pages visited, referring source, cookie identifiers (see section 9) |
We only ask for what we need for the purpose stated. Giving optional information is your choice.
3. Why we use your data
- Responding to your enquiry: calling or messaging you about the demo you requested and the course you asked about.
- Admission and teaching: registering you, scheduling batches, giving access to the student portal and class material, tracking attendance and progress.
- Fees: issuing receipts, managing instalments and processing refunds.
- Certificates: issuing certificates and letting employers verify them on our Certificate Verification page.
- Placement assistance: sharing your CV and portfolio with hiring companies, only with your permission for each shortlist.
- Updates: sending batch, workshop and course updates. You can opt out at any time.
- Safety and legal duties: preventing fake or spam enquiries, keeping accounts and tax records, responding to lawful requests.
We rely on your consent for enquiries, marketing updates and media use, and on legitimate uses permitted under the DPDP Act (for example, data you voluntarily give us for a specific service, or records we must keep by law) for admission, fees and legal compliance.
4. How long we keep it
| Data | Retention |
|---|---|
| Enquiries that do not lead to admission | Up to 24 months after our last interaction, then deleted or anonymised |
| Admission, attendance and assessment records | For the course duration plus 3 years |
| Certificate register (name, course, certificate number, issue date) | Kept permanently so employers can verify certificates. You can ask us to stop public verification |
| Fee receipts and accounting records | As long as tax and accounting laws require (currently up to 8 years) |
| Website and system logs | At least 1 year, as required by the DPDP Rules, 2025 |
| Photos, videos and testimonials | Until you withdraw consent (see our Photo, Video & Testimonial Consent policy) |
| Class recordings | For the course duration plus 12 months |
Where data is erased, backups are overwritten in their normal cycle.
5. Who we share it with
We do not sell personal data. We share it only with service providers (Data Processors) who work for us under contract and only for the purposes above:
- CRM, email and chat tools (for example Zoho CRM, Zoho SalesIQ, Zoho Mail)
- Mobile number verification and WhatsApp messaging providers
- Advertising platforms that send us lead-form data (Meta, Google)
- Website hosting, analytics and security providers
- Banks, payment gateways and, if you choose, EMI/loan partners
- Our student learning portal and cloud storage providers
- Hiring companies, only for placement assistance and only with your permission
- Government authorities, courts or regulators, when the law requires it
Some providers may store data on servers outside India. Such transfers happen only as permitted under the DPDP Act and any restrictions notified by the Government of India.
6. Your rights
- Access: get a summary of the personal data we hold about you and how we use it, and the names of those we shared it with.
- Correction and update: fix inaccurate or incomplete data.
- Erasure: ask us to delete your data once it is no longer needed, unless the law requires us to keep it.
- Grievance redressal: raise a complaint with our Grievance Officer (section 11).
- Nomination: nominate a person to exercise your rights in case of death or incapacity.
To use any right, email [email protected] with the subject “Data Request”, or visit our office. We may ask you to verify your identity. We aim to complete requests within 15 working days and in every case within the time limit set by law.
7. Withdrawing consent
You can withdraw consent as easily as you gave it:
- Reply STOP to any WhatsApp or SMS message from us
- Click “unsubscribe” in any marketing email
- Email [email protected] with the subject “Withdraw Consent”
- Tell your counsellor or the front desk
We will stop the related processing within 7 working days. Withdrawal does not affect processing already done, and we may still keep records that the law requires. If you are an enrolled student, withdrawing consent for essential processing may mean we cannot continue to provide the course.
8. Students under 18
If a student is under 18 years of age, we collect and use their personal data only with the verifiable consent of a parent or lawful guardian. The parent or guardian signs the admission form and consent declaration and provides their own contact details and identity verification. We do not run behavioural tracking or targeted advertising directed at students under 18. Minors should not submit our online forms without a parent or guardian.
9. Cookies and analytics
Our website uses cookies and similar tools to keep forms working, remember that you already submitted a form, measure visits (for example Google Analytics) and measure ad performance (for example Google Ads and Meta tags). You can block or delete cookies in your browser settings; essential features such as forms will still work.
10. How we protect data
We use HTTPS across the website, role-based access to our CRM and records, mobile verification to block fake enquiries, password-protected systems, locked storage for paper admission forms and staff confidentiality undertakings.
11. Grievance Officer
| Name | Anjali, Grievance Officer |
|---|---|
| [email protected] (subject: “Privacy Grievance”) | |
| Phone | +91 88188 18950 (Mon–Sat, 9:00 AM – 7:00 PM) |
| Address | OnePlace Digital Academy, Soham Complex, Patil Lane No. 3, College Road (above Namco Bank), Nashik, Maharashtra 422005 |
| Response time | Acknowledgement within 2 working days; resolution within 15 working days |
If you are not satisfied with our response, you may approach the Data Protection Board of India after exhausting this process.
12. If a data breach happens
- We contain the breach and secure affected systems immediately.
- We inform every affected person without delay through email, SMS or WhatsApp, explaining what happened, what data was involved, the likely impact, what we are doing and what you can do to protect yourself.
- We report the breach to the Data Protection Board of India, with a detailed report within 72 hours of becoming aware of it, or within any time the Board allows.
- We review the cause and fix it to prevent a repeat.
13. Changes to this policy
We will update this page when our practices or the law change. The version number and “Last updated” date at the top show the current version. For material changes, we will notify enrolled students by email or WhatsApp.
The core obligations of the DPDP Rules, 2025 apply from 13 May 2027. OnePlace follows this policy from the date shown above.