๐Ÿ”’ Privacy & Data Protection

Privacy Policy

We are committed to protecting your personal data with transparency, care, and full compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act).

๐Ÿ“… Effective Date: 1 January 2025
๐Ÿ”„ Last Updated: 18 May 2025
โš–๏ธ DPDP Act, 2023 Compliant
๐Ÿข CampusWalkin Pvt. Ltd.
๐Ÿ“‹
Right to Know What data we collect & why
โœ๏ธ
Right to Correct Fix inaccurate personal data
๐Ÿ—‘๏ธ
Right to Erase Request deletion of your data
๐Ÿšซ
Right to Withdraw Revoke consent at any time
๐Ÿ“ฉ
Right to Grievance File a complaint with our DPO
Section 01

Introduction

CampusWalkin Pvt. Ltd. ("CampusWalkin," "we," "us," or "our") operates the website at iimprograms.co.in as the officially appointed enrollment and marketing partner for IIM Rohtak's Post Graduate Programme in Management for Executives (PGPx).

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our Website or submit an enquiry. It is written in plain language to help you understand your rights and our obligations under:

  • The Digital Personal Data Protection Act, 2023 (DPDP Act)
  • The Information Technology Act, 2000 and its rules
  • The Telecom Commercial Communications Customer Preference Regulations, 2018 (TRAI)
  • Applicable Google Ads policies on data collection and consent
Plain Language Commitment: We will never sell your personal data to third parties for their own marketing purposes. Your data is used solely to counsel you about the IIM Rohtak PGPx programme and to administer your enquiry.

Section 02

Who Controls Your Data

For data collected through this Website, the Data Fiduciary (controller) is:

CampusWalkin Pvt. Ltd.
B-17, Thinkvalley, Sector 32,
Gurugram, Haryana โ€“ 122001, India
Email: enquire@campuswalkin.com

When your application is forwarded to IIM Rohtak for admission processing, IIM Rohtak becomes an independent data controller for the data you submit through their official systems. This Policy does not cover IIM Rohtak's data practices. Please refer to IIM Rohtak's official website for their privacy policy.


Section 03

Data We Collect

We collect the following categories of personal data:

3.1 Data You Provide Directly

Data Type Examples Source
Identity Data Full name, date of birth Enquiry form
Contact Data Mobile number, email address, city Enquiry form
Professional Data Years of work experience, designation, employer Enquiry form / counselling call
Academic Data Qualification, percentage/CGPA, test scores Application process
Financial Data Fee instalment preferences (not card/bank details) Counselling call
Communication Records Call recordings, emails, WhatsApp messages Interactions with our team

3.2 Data Collected Automatically

  • Device & Technical Data: IP address, browser type, operating system, device identifiers
  • Usage Data: Pages visited, time spent, clicks, scroll depth, referring URL
  • Cookie Data: First-party cookies for session management; third-party cookies from Google Analytics and Google Ads (see Section 9)
  • Location Data: Approximate location inferred from IP address

3.3 Data We Do NOT Collect

  • Credit/debit card numbers or banking credentials
  • Aadhaar numbers or copies of government IDs (unless required by IIM Rohtak for admission, shared directly with IIM Rohtak)
  • Sensitive personal data such as biometric data, health records, or political opinions

Section 04

How We Use Your Data

We use your personal data for the following specific purposes only:

  • Programme Counselling: Contacting you to provide information about the IIM Rohtak PGPx programme, eligibility, fees, and admission timelines
  • Enquiry Management: Processing, tracking, and following up on your enquiry through our CRM system
  • Application Assistance: Helping you gather and submit documents required for the IIM Rohtak application
  • Forwarding to IIM Rohtak: Sharing your relevant details with IIM Rohtak's admissions office for evaluation
  • Marketing Communications: Sending you programme updates, webinar invitations, and relevant IIM Rohtak announcements (only with your consent; you can opt out at any time)
  • Website Improvement: Analysing usage patterns to improve our website and user experience
  • Legal Compliance: Maintaining records as required by Indian law
  • Ad Measurement: Measuring the effectiveness of our Google Ads campaigns (anonymised/aggregated)
No Automated Decision-Making: We do not make any automated decisions about your eligibility or suitability for the IIM Rohtak programme. All counselling and filtering is done by human advisors.

Section 05

Legal Basis for Processing

Under the DPDP Act, 2023, we process your personal data on the following bases:

Processing Activity Legal Basis
Responding to your enquiry and counselling you Consent (you ticked the consent box)
Forwarding details to IIM Rohtak Consent + Contractual necessity
Sending marketing communications Consent (separate, can be revoked)
Website analytics and performance Legitimate interest (improving service quality)
Legal record-keeping Legal obligation (Companies Act, IT Act)
Call recordings for quality assurance Legitimate interest (training & compliance)

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.


Section 06

Data Sharing & Disclosure

We share your personal data only in the following circumstances:

6.1 IIM Rohtak (Authorised Sharing)

Your name, contact details, educational background, and work experience will be shared with IIM Rohtak's admissions office as part of the enrollment process. This sharing is covered by your consent at the time of enquiry submission.

6.2 Technology Service Providers

  • CRM Platform (e.g., Salesforce, Zoho) โ€” for managing enquiries and leads
  • Email Service Provider โ€” for sending brochures and follow-up communications
  • Cloud Hosting โ€” for secure data storage
  • Analytics Platforms โ€” Google Analytics (anonymised usage data)

All service providers are bound by data processing agreements and must process your data solely on our instructions.

6.3 Legal Requirements

We may disclose your data if required to do so by law, court order, or regulatory authority, or if necessary to protect the rights, property, or safety of CampusWalkin, our users, or the public.

We will NEVER: Sell your personal data to third-party marketers, data brokers, or any organisation for their independent commercial use.

Section 07

Data Retention

We retain your personal data only for as long as necessary for the purposes described in this Policy:

Data Category Retention Period Reason
Enquiry records (non-applicant) 2 years from last contact Follow-up & re-engagement
Application records (applicant) 5 years from application date Legal & regulatory compliance
Enrolled student records 7 years post-completion Certificate verification & legal
Marketing consent records 5 years from consent date DPDP compliance
Call recordings 90 days Quality assurance
Website analytics data 26 months (Google default) Performance analysis
Financial records 8 years Income Tax Act compliance

After the applicable retention period, data is securely deleted or anonymised. You may request earlier deletion (see Section 8).


Section 08

Your Rights Under the DPDP Act, 2023

As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the following rights:

๐Ÿ“‹

Right to Information

Request a summary of what personal data we hold about you and how it is being processed.

โœ๏ธ

Right to Correction

Request correction of inaccurate or incomplete personal data we hold about you.

๐Ÿ—‘๏ธ

Right to Erasure

Request deletion of your personal data where it is no longer necessary or where you withdraw consent.

๐Ÿšซ

Right to Withdraw Consent

Withdraw consent at any time. This will not affect the lawfulness of prior processing.

๐Ÿ“ฉ

Right to Grievance Redressal

File a complaint with our Data Protection Officer. We respond within 30 days.

โš–๏ธ

Right to Appeal

If dissatisfied with our response, appeal to the Data Protection Board of India (once operational).

How to Exercise Your Rights:
Email us at privacy@campuswalkin.com with the subject line "Data Rights Request โ€“ [Your Name]." We will respond within 30 days. We may ask for identity verification before processing your request.

Section 09

Cookies & Tracking Technologies

We use cookies and similar technologies on this Website. A cookie is a small text file placed on your device by your browser.

Types of Cookies We Use

Cookie Type Purpose Duration
Essential Cookies Enable core Website functionality (form submissions, page navigation) Session
Analytics Cookies Google Analytics โ€“ measure page visits, traffic sources, and user behaviour (anonymised) Up to 26 months
Advertising Cookies Google Ads conversion tracking & remarketing โ€” see Section 10 Up to 90 days
Preference Cookies Remember your preferences (e.g., language, region) 1 year

Managing Cookies

  • You can control or delete cookies via your browser settings at any time
  • Opting out of non-essential cookies will not affect your ability to use the Website
  • To opt out of Google Analytics tracking, install the Google Analytics Opt-out Browser Add-on
  • To manage Google Ads personalisation, visit Google Ads Settings

Section 10

Google Ads & Remarketing

We use Google Ads to promote the IIM Rohtak PGPx programme. This involves the use of tracking technologies provided by Google.

What We Use Google Ads For

  • Conversion Tracking: Measuring how many users who click our ads go on to submit an enquiry form
  • Remarketing: Showing our ads to users who have previously visited this Website, on other websites and Google properties
  • Audience Targeting: Showing ads to users matching demographic and interest profiles relevant to executive education

Google's Data Use

When you visit our Website, Google may place cookies or use other tracking signals. Google's use of these signals is governed by Google's Privacy Policy.

Your Choices

Consent & Google Ads: We have implemented Google's consent mode on this Website. Advertising and analytics cookies are only activated when you provide your consent through the cookie consent mechanism on the Website.

Section 11

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These include:

  • Encryption: All data transmitted between your browser and our servers is encrypted using TLS/HTTPS
  • Access Controls: Personal data is accessible only to authorised CampusWalkin staff on a need-to-know basis
  • Secure CRM: All enquiry data is stored in a secured, password-protected CRM system
  • Vendor Security: All third-party service providers are vetted for data security practices
  • Data Minimisation: We collect only the data necessary for the stated purposes
  • Regular Audits: Periodic internal reviews of data handling practices
Data Breach Notification: In the event of a data breach that is likely to result in a high risk to your rights, we will notify the Data Protection Board of India within 72 hours and affected individuals without undue delay, as required by the DPDP Act, 2023.

Section 12

Children's Privacy

This Website and the IIM Rohtak PGPx programme are intended solely for individuals who are 18 years of age or older and who have the required minimum work experience of 3 years.

We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at privacy@campuswalkin.com and we will delete it promptly.


Section 13

Cross-Border Data Transfers

Your personal data is primarily stored and processed in India. Where we use service providers (such as cloud platforms or CRM tools) that process data outside India, we ensure that adequate safeguards are in place, including:

  • Data Processing Agreements with standard contractual clauses
  • Transfer only to countries with adequate data protection frameworks
  • Compliance with Section 16 of the DPDP Act, 2023 (cross-border transfer provisions, once notified by the Central Government)

Section 14

Changes to This Privacy Policy

We review this Privacy Policy periodically and may update it to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page
  • Post a prominent notice on our Website
  • Notify you by email if the changes significantly affect how we use your data (for existing enquiries)

We encourage you to review this Policy regularly. Your continued use of the Website after changes are posted constitutes acceptance of the revised Policy.


Section 15

Data Protection Officer

CampusWalkin has appointed a Data Protection Officer (DPO) responsible for overseeing our data protection practices and serving as your point of contact for privacy matters.

Data Protection Officer

For privacy-related requests, complaints, or queries โ€” contact our DPO directly.

๐Ÿ‘ค Name
Campuswalkin
๐Ÿ“ง Email
๐Ÿ“ž Phone
โฑ Response Time
Within 30 days
๐Ÿข Address
B-17, Thinkvalley, Sector 32, Gurugram, Haryana โ€“ 122001

Section 16

Contact Us

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact:

CampusWalkin Pvt. Ltd. โ€” Data Privacy Team
๐Ÿ“ง enquire@campuswalkin.com
๐Ÿ“ž +91 9650927013
๐Ÿข B-17, Thinkvalley, Sector 32, Gurugram, Haryana โ€“ 122001
๐Ÿ• Mon โ€“ Sat, 10:00 AM โ€“ 6:00 PM IST

If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Board of India once it becomes operational under the DPDP Act, 2023.