Privacy & DPDP Policy

1. Who we are

The Foundation Academy is operated by Priya Prinja from 1215-16, B-Block, New Amritsar Colony, near Golden Gate, Amritsar, Punjab. 143006. Contact: contact@thefoundation.co.in · +91 91159 55180.

2. What data we collect

• No data is collected through this website. There is no contact form, login, or account. The site does not ask you for any personal information.
• What you send us directly: if you choose to contact us via WhatsApp, phone, or email, we receive only the details you choose to share (such as your name, phone number, and what you ask about).
• Analytics: we use Google Analytics 4 to understand which pages are most useful to parents (for example, how many people view the Tuition page). It sets first-party cookies (named _ga and _ga_*) to count visits and distinguish returning visitors. We do not use this data to identify you personally, and we do not use it for advertising.
• How to opt out: you can block analytics with your browser's cookie settings, a content blocker, or Google's official opt-out add-on at tools.google.com/dlpage/gaoptout. We do not use the Meta Pixel or any advertising or cross-site tracking.
• Embedded video: some pages show a YouTube video behind a click-to-play thumbnail. Nothing loads from YouTube until you choose to press play. If you do, YouTube may set its own cookies; we use YouTube's privacy-enhanced mode (youtube-nocookie.com) to limit this. If you never press play, no YouTube cookies are set.
• No other client-side storage: aside from the analytics cookies above, we do not use localStorage, sessionStorage, or IndexedDB.
• Server logs: standard web server access logs (IP address, timestamp, URL), handled by Cloudflare and GoDaddy per their own privacy policies.

3. How we use your data

• To respond to your inquiry, usually within 2 working hours.
• If your child enrols, to administer their place at the academy.
• We do not use your data for marketing or advertising, and we do not sell it or share it with advertisers.

4. Consent

We collect personal data only when you choose to contact us directly (via WhatsApp, phone, or email) or enrol your child. By contacting us, you consent to The Foundation Academy using the details you share to respond to your inquiry. You may withdraw consent at any time (see "Your rights" below).

5. Data retention

Enquiries you send us (via WhatsApp, phone, or email) are retained for up to 24 months, unless they lead to an active enrollment, in which case data is retained for the duration of enrollment plus 24 months. After the retention period, data is deleted from all systems.

6. Minor's data (DPDP Act 2023)

Under the DPDP Act 2023, special care applies to personal data of children (persons under 18). The Foundation Academy:

• Does not publish any minor's name, photograph, or marks on the website without a signed offline parental consent form.
• Requires this consent form to be completed as part of the demo-class enrollment process.
• Treats all student data with the same 24-month retention policy described above.

7. Your rights

Under the DPDP Act 2023, you have the right to:

• Access the personal data we hold about you.
• Correction of inaccurate data.
• Erasure (right to be forgotten): we will delete your data from all systems within 7 working days of a verified request.
• Grievance redressal: contact us at the address below if you believe your data rights have been violated.

To exercise any of these rights, email contact@thefoundation.co.in with subject line "Data request: [your name]". We will respond within 5 working days.

8. Third-party services

• WhatsApp (Meta): if you message us on WhatsApp, your message is handled by WhatsApp under Meta's privacy policy.
• Google Analytics: aggregate website usage statistics, as described in section 2. Governed by Google's privacy policy at policies.google.com/privacy.
• YouTube (Google): click-to-play embedded video, loaded only if you press play, via privacy-enhanced mode. Governed by Google's privacy policy at policies.google.com/privacy.
• Cloudflare: CDN, DDoS protection, and SSL. See cloudflare.com/privacypolicy.
• GoDaddy: hosting origin. See godaddy.com/legal/agreements/privacy-policy.

We have reviewed each of these for compliance with the purpose limitation principle. We do not share your personal data with third-party advertisers.

9. Changes to this policy

We may update this policy periodically. The effective date at the top of this page will reflect the most recent revision. Material changes will be noted on the homepage.

10. Contact