Introduction
CampusWalkin Pvt. Ltd. ("CampusWalkin," "we," "us," or "our") operates the website at iimprograms.co.in as the officially appointed enrollment and marketing partner for IIM Rohtak's Post Graduate Programme in Management for Executives (PGPx).
This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our Website or submit an enquiry. It is written in plain language to help you understand your rights and our obligations under:
- The Digital Personal Data Protection Act, 2023 (DPDP Act)
- The Information Technology Act, 2000 and its rules
- The Telecom Commercial Communications Customer Preference Regulations, 2018 (TRAI)
- Applicable Google Ads policies on data collection and consent
Who Controls Your Data
For data collected through this Website, the Data Fiduciary (controller) is:
B-17, Thinkvalley, Sector 32,
Gurugram, Haryana โ 122001, India
Email: enquire@campuswalkin.com
When your application is forwarded to IIM Rohtak for admission processing, IIM Rohtak becomes an independent data controller for the data you submit through their official systems. This Policy does not cover IIM Rohtak's data practices. Please refer to IIM Rohtak's official website for their privacy policy.
Data We Collect
We collect the following categories of personal data:
3.1 Data You Provide Directly
| Data Type | Examples | Source |
|---|---|---|
| Identity Data | Full name, date of birth | Enquiry form |
| Contact Data | Mobile number, email address, city | Enquiry form |
| Professional Data | Years of work experience, designation, employer | Enquiry form / counselling call |
| Academic Data | Qualification, percentage/CGPA, test scores | Application process |
| Financial Data | Fee instalment preferences (not card/bank details) | Counselling call |
| Communication Records | Call recordings, emails, WhatsApp messages | Interactions with our team |
3.2 Data Collected Automatically
- Device & Technical Data: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent, clicks, scroll depth, referring URL
- Cookie Data: First-party cookies for session management; third-party cookies from Google Analytics and Google Ads (see Section 9)
- Location Data: Approximate location inferred from IP address
3.3 Data We Do NOT Collect
- Credit/debit card numbers or banking credentials
- Aadhaar numbers or copies of government IDs (unless required by IIM Rohtak for admission, shared directly with IIM Rohtak)
- Sensitive personal data such as biometric data, health records, or political opinions
How We Use Your Data
We use your personal data for the following specific purposes only:
- Programme Counselling: Contacting you to provide information about the IIM Rohtak PGPx programme, eligibility, fees, and admission timelines
- Enquiry Management: Processing, tracking, and following up on your enquiry through our CRM system
- Application Assistance: Helping you gather and submit documents required for the IIM Rohtak application
- Forwarding to IIM Rohtak: Sharing your relevant details with IIM Rohtak's admissions office for evaluation
- Marketing Communications: Sending you programme updates, webinar invitations, and relevant IIM Rohtak announcements (only with your consent; you can opt out at any time)
- Website Improvement: Analysing usage patterns to improve our website and user experience
- Legal Compliance: Maintaining records as required by Indian law
- Ad Measurement: Measuring the effectiveness of our Google Ads campaigns (anonymised/aggregated)
Legal Basis for Processing
Under the DPDP Act, 2023, we process your personal data on the following bases:
| Processing Activity | Legal Basis |
|---|---|
| Responding to your enquiry and counselling you | Consent (you ticked the consent box) |
| Forwarding details to IIM Rohtak | Consent + Contractual necessity |
| Sending marketing communications | Consent (separate, can be revoked) |
| Website analytics and performance | Legitimate interest (improving service quality) |
| Legal record-keeping | Legal obligation (Companies Act, IT Act) |
| Call recordings for quality assurance | Legitimate interest (training & compliance) |
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
Data Sharing & Disclosure
We share your personal data only in the following circumstances:
6.1 IIM Rohtak (Authorised Sharing)
Your name, contact details, educational background, and work experience will be shared with IIM Rohtak's admissions office as part of the enrollment process. This sharing is covered by your consent at the time of enquiry submission.
6.2 Technology Service Providers
- CRM Platform (e.g., Salesforce, Zoho) โ for managing enquiries and leads
- Email Service Provider โ for sending brochures and follow-up communications
- Cloud Hosting โ for secure data storage
- Analytics Platforms โ Google Analytics (anonymised usage data)
All service providers are bound by data processing agreements and must process your data solely on our instructions.
6.3 Legal Requirements
We may disclose your data if required to do so by law, court order, or regulatory authority, or if necessary to protect the rights, property, or safety of CampusWalkin, our users, or the public.
Data Retention
We retain your personal data only for as long as necessary for the purposes described in this Policy:
| Data Category | Retention Period | Reason |
|---|---|---|
| Enquiry records (non-applicant) | 2 years from last contact | Follow-up & re-engagement |
| Application records (applicant) | 5 years from application date | Legal & regulatory compliance |
| Enrolled student records | 7 years post-completion | Certificate verification & legal |
| Marketing consent records | 5 years from consent date | DPDP compliance |
| Call recordings | 90 days | Quality assurance |
| Website analytics data | 26 months (Google default) | Performance analysis |
| Financial records | 8 years | Income Tax Act compliance |
After the applicable retention period, data is securely deleted or anonymised. You may request earlier deletion (see Section 8).
Your Rights Under the DPDP Act, 2023
As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the following rights:
Right to Information
Request a summary of what personal data we hold about you and how it is being processed.
Right to Correction
Request correction of inaccurate or incomplete personal data we hold about you.
Right to Erasure
Request deletion of your personal data where it is no longer necessary or where you withdraw consent.
Right to Withdraw Consent
Withdraw consent at any time. This will not affect the lawfulness of prior processing.
Right to Grievance Redressal
File a complaint with our Data Protection Officer. We respond within 30 days.
Right to Appeal
If dissatisfied with our response, appeal to the Data Protection Board of India (once operational).
Email us at privacy@campuswalkin.com with the subject line "Data Rights Request โ [Your Name]." We will respond within 30 days. We may ask for identity verification before processing your request.
Cookies & Tracking Technologies
We use cookies and similar technologies on this Website. A cookie is a small text file placed on your device by your browser.
Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Enable core Website functionality (form submissions, page navigation) | Session |
| Analytics Cookies | Google Analytics โ measure page visits, traffic sources, and user behaviour (anonymised) | Up to 26 months |
| Advertising Cookies | Google Ads conversion tracking & remarketing โ see Section 10 | Up to 90 days |
| Preference Cookies | Remember your preferences (e.g., language, region) | 1 year |
Managing Cookies
- You can control or delete cookies via your browser settings at any time
- Opting out of non-essential cookies will not affect your ability to use the Website
- To opt out of Google Analytics tracking, install the Google Analytics Opt-out Browser Add-on
- To manage Google Ads personalisation, visit Google Ads Settings
Google Ads & Remarketing
We use Google Ads to promote the IIM Rohtak PGPx programme. This involves the use of tracking technologies provided by Google.
What We Use Google Ads For
- Conversion Tracking: Measuring how many users who click our ads go on to submit an enquiry form
- Remarketing: Showing our ads to users who have previously visited this Website, on other websites and Google properties
- Audience Targeting: Showing ads to users matching demographic and interest profiles relevant to executive education
Google's Data Use
When you visit our Website, Google may place cookies or use other tracking signals. Google's use of these signals is governed by Google's Privacy Policy.
Your Choices
- Opt out of personalised advertising: adssettings.google.com
- Opt out of third-party advertising via the NAI: optout.networkadvertising.org
- Use the Google Analytics opt-out add-on: tools.google.com/dlpage/gaoptout
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These include:
- Encryption: All data transmitted between your browser and our servers is encrypted using TLS/HTTPS
- Access Controls: Personal data is accessible only to authorised CampusWalkin staff on a need-to-know basis
- Secure CRM: All enquiry data is stored in a secured, password-protected CRM system
- Vendor Security: All third-party service providers are vetted for data security practices
- Data Minimisation: We collect only the data necessary for the stated purposes
- Regular Audits: Periodic internal reviews of data handling practices
Children's Privacy
This Website and the IIM Rohtak PGPx programme are intended solely for individuals who are 18 years of age or older and who have the required minimum work experience of 3 years.
We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at privacy@campuswalkin.com and we will delete it promptly.
Cross-Border Data Transfers
Your personal data is primarily stored and processed in India. Where we use service providers (such as cloud platforms or CRM tools) that process data outside India, we ensure that adequate safeguards are in place, including:
- Data Processing Agreements with standard contractual clauses
- Transfer only to countries with adequate data protection frameworks
- Compliance with Section 16 of the DPDP Act, 2023 (cross-border transfer provisions, once notified by the Central Government)
Changes to This Privacy Policy
We review this Privacy Policy periodically and may update it to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Post a prominent notice on our Website
- Notify you by email if the changes significantly affect how we use your data (for existing enquiries)
We encourage you to review this Policy regularly. Your continued use of the Website after changes are posted constitutes acceptance of the revised Policy.
Data Protection Officer
CampusWalkin has appointed a Data Protection Officer (DPO) responsible for overseeing our data protection practices and serving as your point of contact for privacy matters.
Data Protection Officer
For privacy-related requests, complaints, or queries โ contact our DPO directly.
Contact Us
For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact:
๐ง enquire@campuswalkin.com
๐ +91 9650927013
๐ข B-17, Thinkvalley, Sector 32, Gurugram, Haryana โ 122001
๐ Mon โ Sat, 10:00 AM โ 6:00 PM IST
If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Board of India once it becomes operational under the DPDP Act, 2023.