Privacy Policy

1. Who controls your data

EduPharma Overseas Consulting, a proprietary concern based in Pune, Maharashtra, India, is the data fiduciary for the personal data described here. Contact us about privacy, or request our full registered details, at contact@edupharma.in.

This policy is written to meet India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules under it.

2. What we collect

You give us

• Name, email address and mobile number when you create an account.
• Your readiness answers: degree type, academic standing, English test status, funding position, research experience, target country and timeline.
• Documents you upload for review, such as a statement of purpose or CV.
• Anything you tell us in a message or a consulting session.

We collect automatically

• Basic technical data: IP address, browser type, pages visited, and approximate location derived from IP.
• Data stored in your own browser to keep you logged in and hold your shortlist.

We never collect

Card numbers, CVV or bank credentials. Payments go directly to Razorpay, which handles them under its own privacy policy and PCI-DSS obligations. We receive only a payment reference and its status.

3. Why we use it, and on what basis

Produce your readiness score and match programmes	To perform the service you asked for
Create and maintain your account	To perform our contract with you
Review documents you submit	Your consent, given when you upload
Reply to your enquiries and provide support	Legitimate business interest
Send service messages about your purchase	To perform our contract with you
Send guidance emails and deadline reminders	Your consent — you may withdraw it at any time
Keep financial and tax records	Legal obligation
Improve our database and the site	Legitimate business interest, using aggregated data

4. Who we share it with

We share personal data only with service providers who help us operate, and only what each needs:

• Netlify — website hosting and form submissions.
• Rybbit — privacy-focused website analytics.
• Razorpay — payment processing.
• SendGrid and our mail provider — sending email.

We may disclose data where the law requires it, or to establish or defend a legal claim.

We do not sell your data. We do not share your profile with universities, colleges or their recruitment agents, and we receive no commission from them. If a university needs your information, you send it yourself as part of your own application.

5. Where your data is held

Some of our providers store data on servers outside India. Where that happens, we use providers that offer recognised contractual safeguards for international transfers, and we transfer only what the service requires.

6. How long we keep it

• Account and profile data — while your account is active, and for 24 months after your last activity.
• Uploaded documents — 12 months after the review is complete, unless you ask us to delete them sooner.
• Payment and tax records — 8 years, as Indian tax law requires.
• Marketing consent records — until you withdraw consent, plus 12 months.

7. Your rights

You may ask us to:

• tell you what personal data we hold about you and how we use it;
• correct anything inaccurate or incomplete;
• erase your data, where we are not required to keep it;
• stop sending you marketing email, at any time;
• nominate someone to exercise these rights if you are unable to.

Email contact@edupharma.in. We respond within 30 days. We may ask you to confirm your identity first, so that we do not disclose your data to someone else.

8. Security

We use HTTPS across the site, restrict access to personal data to those who need it, and keep payment handling entirely with our payment processor. No system is perfectly secure, and we cannot guarantee absolute security, but we will tell you and the relevant authority promptly if a breach affects you.

9. Cookies, local storage and analytics

We use your browser's local storage to keep you signed in and to hold your shortlist between visits. This is necessary for the site to work and is not used for advertising. You can clear it through your browser settings, which will sign you out.

We also use Rybbit, a privacy-focused analytics service, to understand which pages are read and how people move through the site. It records aggregate usage such as pages visited, referring site, approximate location and device type. We use this only to improve the site. We do not use it for advertising, we do not sell the data, and it is not combined with your account to build a profile of you.

10. Children

Our services are intended for pharmacy graduates and final-year students, who are adults. We do not knowingly collect data from anyone under 18. If you believe a child's data has been given to us, contact us and we will delete it.

11. Changes to this policy

We will update this page when our practices change, and revise the date above. If a change materially affects how we use your data, we will email registered users.

12. Complaints

If you are unhappy with how we have handled your data, email contact@edupharma.in, marking your message for the attention of the Grievance Officer. You also have the right to complain to the Data Protection Board of India.