Privacy Policy

Last updated on 14 October 2026

1. Introduction

Elevate Education Technology Private Limited (“Elevate”, “Company”, “we”, “our” or “us”) is committed to protecting the privacy and personal data of individuals who visit our website, use our products or services, communicate with us, or otherwise interact with our business.

This Privacy Policy (“Policy”) describes how Elevate collects, receives, uses, stores, discloses, transfers, retains and otherwise processes Personal Data in connection with its website, digital platforms, software products, educational technology solutions and related business operations.

This Policy applies to website visitors, customers, prospective customers, platform users, institutional representatives, students, applicants, parents or lawful guardians, employees, consultants, vendors, business partners and other individuals whose Personal Data is processed by Elevate.

Where Elevate processes Personal Data on behalf of an educational institution, corporate customer or other organisation, the processing may also be governed by that organisation’s privacy notice and the applicable contractual arrangements.

2. Information About Elevate

Legal Name: Elevate Education Technology Private Limited
Registered Office: SCO 27, AIHP (Highway Side), Institutional Area, Sector 32, Gurugram, Haryana 122001
Website: https://elevate.education/
General Contact: info@elevate.education

3. Definitions

For the purposes of this Policy:

“Personal Data” means data about an identifiable individual, as defined under applicable data protection law.

“Processing” includes collecting, recording, organising, storing, using, disclosing, transmitting, retrieving, updating, restricting, deleting or otherwise handling Personal Data.

“Data Principal” means the individual to whom Personal Data relates, where that term is applicable under Indian data protection law.

“Applicable Law” means the laws, rules, regulations and binding directions applicable to Elevate and the relevant processing activity, including applicable Indian data protection and information security laws.

4. Categories of Personal Data We Collect

Depending on your relationship with Elevate and the services used, we may collect the following categories of Personal Data.

4.1 Identity and Contact Information

This may include your name, email address, telephone number, business address, designation, organisation, and other contact details that you provide to us.

4.2 Account and Authentication Information

Where our services require an account, we may process usernames, account identifiers, authentication records, access permissions, account preferences and security logs.

Passwords and authentication credentials must be protected using appropriate security measures and should not be retained in readable form.

4.3 Educational and Institutional Information

Where required to provide our services, we may process student identifiers, enrolment information, course or programme details, academic and administrative records, attendance information, institutional affiliations and communications between authorised users.

The specific categories of information processed will depend on the relevant service and the instructions of the institution or customer.

4.4 Business and Transaction Information

We may process contractual information, purchase orders, invoices, billing details, vendor onboarding records, tax information, payment confirmations and other information necessary to manage business relationships.

Where payment services are used, payment information may be processed by the relevant payment service provider in accordance with its own terms and privacy policy.

4.5 Communications and Enquiry Information

We may collect information submitted through enquiry forms, emails, support requests, feedback forms, complaints, meeting records and other communications.

4.6 Technical and Usage Information

When you visit our website or use our services, we may collect IP addresses, browser information, device information, operating system details, access timestamps, pages visited, referring sources, session identifiers, diagnostic information, usage logs and similar technical information.

4.7 Recruitment and Employment Information

Where you apply for a position or engage with us in a professional capacity, we may process your curriculum vitae, employment history, qualifications, interview information, references and other information reasonably required for recruitment or employment administration.

4.8 Information Provided About Other Individuals

If you provide Personal Data relating to another individual, you must ensure that you are authorised to do so and that any notice, consent or other legal requirement applicable to that disclosure has been satisfied.

Please do not submit unnecessary sensitive or confidential information through general website forms.

5. How We Collect Personal Data

We may collect Personal Data:

1. directly from you when you submit forms, create an account, contact us or use our services;
2. from educational institutions, business customers or other organisations that are authorised to provide information to us;
3. automatically through website logs, cookies, security systems and similar technologies;
4. from vendors, service providers and business partners where necessary for the relevant service or relationship;
5. from publicly available sources where lawful and reasonably necessary; and
6. through contractual, commercial, recruitment or other business communications.

Where an organisation provides Personal Data to Elevate, that organisation is responsible for ensuring that the disclosure is authorised and complies with applicable law.

6. Purposes of Processing

We may process Personal Data for the following purposes:

6.1 Service Delivery

To provide, operate, maintain and support our website, software products, platforms and services; administer accounts; authenticate users; manage access permissions; and fulfil contractual commitments.

6.2 Enquiries and Business Relationships

To respond to enquiries, arrange demonstrations, communicate with customers and prospective customers, manage business relationships and provide requested information.

6.3 Website and Product Improvement

To monitor performance, troubleshoot errors, conduct quality assurance, improve usability, develop features and generate aggregated or de-identified operational insights.

6.4 Security and Fraud Prevention

To detect unauthorised access, prevent fraud and misuse, investigate security incidents, protect our systems and maintain appropriate security and audit records.

6.5 Legal and Regulatory Compliance

To comply with legal obligations, respond to lawful requests, maintain statutory records, conduct audits, resolve disputes and establish, exercise or defend legal claims.

6.6 Recruitment and Employment

To assess applications, conduct recruitment, administer employment relationships and comply with applicable employment requirements.

6.7 Marketing and Communications

Where permitted by law, to provide information about our services, events, products and updates. Where consent is required, we will obtain it before undertaking the relevant activity.

You may opt out of marketing communications at any time. Such opt-out will not affect service-related, security-related or legally required communications.

7. Lawful Basis for Processing

We process Personal Data only where permitted under Applicable Law.

Depending on the circumstances, this may include processing based on valid consent, contractual necessity, steps taken at your request before entering into a contract, compliance with legal obligations or another lawful basis recognised by Applicable Law.

Where processing is based on consent, you may withdraw that consent in accordance with Applicable Law. Withdrawal will not affect processing undertaken lawfully before withdrawal.

Withdrawal of consent does not require us to cease processing where an independent lawful basis applies or where processing is required or permitted by law.

8. Disclosure and Sharing of Personal Data

We may disclose Personal Data to the following categories of recipients where necessary and legally permissible:

1. Educational institutions and customers: to provide contracted services and enable authorised institutional or business operations;
2. Service providers and vendors: including cloud hosting providers, software providers, security service providers, communications providers, analytics providers, customer support providers and payment service providers;
3. Affiliates and group entities: for legitimate internal administration, service delivery, security and compliance purposes;
4. Professional advisers: including legal, accounting, audit and other professional advisers;
5. Governmental and regulatory authorities: where disclosure is required by law or a lawful direction;
6. Transaction counterparties: in connection with a proposed or completed merger, acquisition, restructuring, financing or sale of assets, subject to appropriate safeguards; and
7. Other recipients: where you have authorised the disclosure or the disclosure is otherwise permitted by law.

We do not sell Personal Data as a standalone commercial asset.

Where a third party processes Personal Data on our behalf, we will use appropriate contractual and organisational safeguards consistent with Applicable Law.

9. Processing on Behalf of Institutional Customers

Elevate may process Personal Data on behalf of educational institutions, corporate customers and other organisations.

In such circumstances, the relevant customer may determine the purposes and means of processing, while Elevate processes Personal Data in accordance with the applicable agreement and documented instructions.

The customer is responsible for ensuring that it has the necessary legal basis, notices, consents and authorisations for the processing it directs.

Elevate may assist the customer in responding to requests from individuals, handling security incidents and meeting applicable data protection obligations, as required by law and the relevant agreement.

For certain activities, including Elevate’s own website administration, security, business communications and legal compliance, Elevate may independently determine the purposes and means of processing.

10. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support essential functionality, maintain sessions, improve security, remember preferences, analyse website performance and, where enabled, support marketing activities.

Where required by law, we will seek consent before placing or using non-essential cookies or similar technologies.

You may manage your preferences through the cookie settings mechanism made available on our website and through your browser settings. Disabling certain cookies may affect website functionality.

The specific cookies, providers, purposes and retention periods will depend on the technologies deployed on the live website.

11. Personal Data Relating to Children

Certain educational services may involve Personal Data relating to children.

Where such information is processed, Elevate will apply the safeguards required by Applicable Law, including applicable requirements relating to parental or lawful guardian consent and child-specific restrictions.

Where Elevate processes student information on behalf of an institution, the institution must ensure that it is authorised to provide the information and that all required notices, permissions and consents have been obtained.

If you believe that a child’s Personal Data has been provided to Elevate without appropriate authorisation, please contact us using the details set out in this Policy.

12. Data Retention

We retain Personal Data only for as long as reasonably necessary for the purposes for which it was collected or otherwise processed, including service delivery, legal compliance, recordkeeping, dispute resolution and enforcement of contractual rights.

Retention periods may depend on the nature of the information, the relevant relationship, statutory retention requirements, security needs, pending disputes and contractual obligations.

Where Elevate processes Personal Data on behalf of a customer, return and deletion will also be governed by the applicable customer agreement and Data Processing Agreement.

When Personal Data is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it, subject to applicable legal and contractual requirements.

Information may remain in routine backups for a limited period until overwritten or deleted in accordance with our retention procedures.

13. Data Security

Elevate implements and maintains reasonable technical and organisational measures designed to protect Personal Data against unauthorised access, disclosure, alteration, loss, misuse or destruction.

Depending on the relevant system and processing activity, these measures may include access controls, authentication measures, encryption where appropriate, logging and monitoring, backup and recovery procedures, personnel confidentiality obligations, vendor controls and incident response procedures.

No system or method of electronic transmission can be guaranteed to be completely secure. We therefore do not warrant absolute security, but we will take appropriate steps to address risks in accordance with Applicable Law.

14. Personal Data Breaches

If Elevate becomes aware of a Personal Data breach affecting information for which it is responsible, we will assess the incident and take appropriate steps to contain, investigate, remediate and document it.

Where required by law or contract, we will notify affected individuals, customers, regulators or other relevant parties within the applicable timeframes.

Where Elevate acts as a processor on behalf of a customer, it will notify the customer in accordance with the applicable agreement and DPA.

15. International Transfers

Our service providers or business operations may involve the storage of, or access to, Personal Data from locations outside India.

Any such transfer or access will be subject to applicable legal restrictions and relevant contractual obligations. Where required, we will implement appropriate safeguards.

Information concerning specific hosting locations and subprocessors may be provided under the applicable customer agreement or DPA, subject to legitimate confidentiality and security restrictions.

16. Your Rights and Choices

Subject to Applicable Law and the circumstances of processing, you may have rights to:

1. request information concerning Personal Data processed by us;
2. request correction or updating of inaccurate or incomplete Personal Data;
3. request deletion of Personal Data where legally permissible;
4. withdraw consent where processing is based on consent;
5. raise a grievance concerning the processing of your Personal Data;
6. nominate another individual where such a right is available under Applicable Law; and
7. exercise other rights available under Applicable Law.

These rights may be subject to statutory exceptions, legal retention requirements, contractual obligations and the rights of other persons.

Where Elevate processes Personal Data on behalf of an institution or another organisation, we may refer your request to that organisation or assist it in responding, as appropriate.

To exercise your rights, contact info@elevate.education with the subject line “Privacy Request”.

We may request reasonable information to verify your identity or authority before acting on a request.

17. Third-Party Websites

Our website may contain links to third-party websites or services. Such third parties operate independently and may have their own privacy policies and practices.

Elevate is not responsible for the privacy practices or security of third-party websites that it does not control. You should review the relevant privacy policy before providing Personal Data to a third party.

18. Changes to This Policy

We may update this Policy to reflect changes in our services, processing activities, technology or Applicable Law.

The revised version will be published on our website with an updated “Last Updated” date. Where required by law, we will provide additional notice or obtain consent before implementing material changes.

Continued use of our website does not, by itself, constitute consent where consent is required by law.

19. Contact Us

For questions, requests or complaints concerning this Policy or our processing of Personal Data, please contact:

Privacy Contact / Grievance Officer
Elevate Education Technology Private Limited
Address: SCO 27, AIHP (Highway Side), Institutional Area, Sector 32, Gurugram, Haryana 122001
Email: info@elevate.education
Subject: Privacy Request / Privacy Complaint