Privacy Policy

01Overview

Dummy website 2 Study Materials (“Dummy website 2”, “we”, “us” or “our”) respects your privacy. This policy applies to personal data processed through our public website, user accounts, study material services, reviews and other features made available by us.

By using a feature that requires personal data, you acknowledge this policy and any specific notice shown at the point of collection. Where consent is required, we will seek it in the manner required by applicable law.

02Data We Collect

We seek to collect only data that is reasonably necessary for the relevant purpose. Please do not submit unnecessary sensitive or confidential information through public forms, reviews or messages.

03Why We Use Personal Data

Depending on the service you use, we may process personal data to:

• create, authenticate and manage user accounts;
• provide study materials, purchases, downloads and related services;
• process and reconcile transactions and maintain transaction records;
• respond to support, privacy, refund or service requests;
• display and manage reviews or other content you choose to submit;
• maintain website functionality, reliability and security;
• detect, prevent and investigate fraud, misuse, unauthorised access or other unlawful activity;
• send service-related communications and, where permitted, promotional communications;
• comply with applicable legal, tax, accounting, regulatory or lawful-authority requirements; and
• improve our services using information in a manner permitted by applicable law.

04Legal Basis, Notice & Consent

We process personal data only for a lawful purpose and on a legally permitted basis, including consent or a recognised legitimate use under applicable law.

Where consent is required, we aim to provide a clear notice describing the relevant data and purpose. You may withdraw consent where the law gives you that right. Withdrawal does not affect processing that was lawfully completed before the withdrawal and may affect our ability to continue providing a service that depends on that data.

We do not make consent a condition for processing data that is independently permitted by law, except where the relevant service necessarily depends on that processing.

05Cookies & Similar Technologies

We may use cookies, session storage, local storage, pixels, logs or similar technologies for essential functionality, account sessions, preferences, security and permitted analytics.

Where non-essential cookies or similar technologies require consent under applicable law, we will provide an appropriate choice mechanism. Browser settings may also allow you to restrict or delete cookies, although doing so can affect certain website features.

06Sharing, Service Providers & Processors

We do not sell personal data as a product. We may disclose or make personal data available only where reasonably necessary for the purposes described in this policy, including to:

• technology, hosting, cloud-storage and infrastructure providers;
• payment gateways and transaction service providers;
• email, SMS, notification and customer-support providers;
• analytics, security and fraud-prevention providers, where used;
• professional advisers, auditors or service providers where reasonably required;
• government authorities, courts, regulators or law-enforcement agencies where legally required or permitted; and
• a successor entity in connection with a lawful merger, restructuring, acquisition or transfer of business, subject to applicable law.

Where third parties process personal data on our behalf, we seek appropriate contractual, technical and organisational safeguards consistent with applicable requirements.

07Payments & Financial Information

If you purchase a paid service, payment may be processed by an external payment gateway or financial service provider. Payment providers may process payment credentials directly under their own privacy terms and security controls.

We may retain transaction identifiers, order information, payment status, refund information and accounting records needed to provide the service, resolve disputes and meet legal or accounting obligations. We do not intentionally request full card numbers, CVV numbers, UPI PINs, banking passwords or similar authentication secrets through ordinary website forms.

08Retention, Deletion & Account Closure

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, to provide the service, maintain security, resolve disputes, enforce agreements, or comply with applicable legal, tax, accounting or regulatory obligations.

Deleting an account does not necessarily mean immediate deletion of every record. Certain transaction, security, audit or legally required records may need to be retained for the period required by applicable law.

Where data is no longer required and no lawful retention ground applies, we will take reasonable steps to delete or anonymise it in accordance with our retention practices.

09Data Security

We use reasonable technical and organisational safeguards appropriate to the nature of the personal data and the risks involved. Depending on the system, safeguards may include:

• access controls and restricted administrative access;
• password protection and authentication controls;
• encryption or other appropriate protection for data in transit or at rest where appropriate;
• logging, monitoring and review of relevant access and security events;
• backups and recovery measures;
• security updates and vulnerability management; and
• contractual and organisational controls for relevant service providers.

No internet transmission or storage system can be guaranteed to be completely secure. We therefore cannot promise absolute security, but we work to reduce foreseeable risks and respond to security incidents appropriately.

10Personal Data Breach

If we become aware of a personal data breach, we will assess and respond to it in accordance with applicable law. Where notification is required, we will provide the relevant information to affected Data Principals and notify the competent authority in the manner and within the timelines prescribed by applicable law.

Our response may include containment, investigation, remediation, access protection, restoration measures and steps intended to reduce the risk of recurrence.

11Your Privacy Rights

Subject to applicable law and any prescribed conditions, Data Principals may have rights including:

• access to information about personal data being processed;
• correction or completion of inaccurate or incomplete personal data;
• erasure of personal data where the applicable legal conditions are met;
• withdrawal of consent where processing is based on consent;
• grievance redressal; and
• nomination of another individual to exercise applicable rights in the event of death or incapacity, where provided by law.

How to make a request

You may submit a privacy request through the contact details published on our website. Please identify the account or information involved and clearly state the request. We may take reasonable steps to verify identity before acting on requests involving personal data.

We will handle requests within the timelines and through the process prescribed by applicable law. Some requests may be limited where retention or processing is required by law or where another lawful ground applies.

12Children's Personal Data

We take children's privacy seriously. Under India's Digital Personal Data Protection framework, a child is a person who has not completed eighteen years of age.

Where applicable law requires verifiable parental consent before processing a child's personal data, we will use appropriate technical and organisational measures to comply with that requirement.

We do not knowingly seek unnecessary personal information from children. If you believe a child has provided personal data to us in a manner that should not have occurred, please contact us so that we can review and take appropriate action.

13Third-Party Websites & Services

Our website may contain links to third-party websites, payment pages, cloud-storage resources or other services. Those third parties may have their own privacy policies and terms. We are not responsible for the privacy practices of independent third parties outside our control.

Please review the applicable third-party privacy notice before submitting personal data to that service.

14Changes to This Privacy Policy

We may update this Privacy Policy when our services, technology, legal requirements or data practices change. The updated version will be published on this page with a revised “Last Updated” date.

If a change materially affects how personal data is processed and applicable law requires additional notice or consent, we will provide the required notice or obtain the required consent.

15Grievance Redressal & Contact

For privacy questions, requests, complaints or concerns, please contact Dummy website 2 Study Materials through the official contact details published on our website. We will maintain an appropriate grievance mechanism and respond in accordance with applicable law.