Privacy Policy

• We collect only what we need to respond to you, run classes and bill for them.
• Our services are for children, but the customer is always a parent or legal guardian, who gives consent on the child's behalf.
• We do not sell personal data, and we do not use advertising cookies or track children for advertising.
• We use website analytics (Vercel Web Analytics, Google Analytics and Microsoft Clarity) to understand how the site is used and improve it, never for advertising. Anything typed into our forms is hidden from Clarity's recordings.
• You can ask us at any time to access, correct or delete your data, or withdraw consent.

CodingChamp is the "Data Fiduciary" (under India's Digital Personal Data Protection Act, 2023, the "DPDP Act") and the "controller" (under the EU/UK GDPR) for the personal data described in this policy. Registered address: A Block, Sector 62, Noida, Uttar Pradesh, India. Contact: hello@codingchamp.in.

The table below lists every category of personal data we handle, where it comes from and what we use it for.

We do not ask for, and ask you not to send us, sensitive information such as health data, government ID numbers or card details by email or chat.

Our classes are for students from Class/Grade 3 to 12, most of whom are under 18. Because of that:

• Our website forms, enrolment and payments are intended for parents and legal guardians. Children should not submit our forms themselves.
• We process a child's personal data only with the verifiable consent of their parent or legal guardian, given when enquiring or enrolling.
• We collect the minimum needed to teach: typically the child's first name, grade and learning details. We do not need a child's full address, photo or ID.
• We do not track, behaviourally monitor or target advertising at children, and we do not sell or share children's data for marketing.
• Student work and photos are never published without the parent's separate written consent (see the Child Safety Policy).

If you believe a child has given us personal data without a parent's consent, contact us and we will delete it.

• Consent (DPDP Act section 6; GDPR Article 6(1)(a)): for enquiries, trial bookings, children's data and optional communications. You may withdraw consent at any time.
• Legitimate uses (DPDP Act section 7) and performance of a contract (GDPR Article 6(1)(b)): to deliver classes you have paid for and to process payments and refunds.
• Legal obligation: to keep financial records and respond to lawful requests from authorities.
• Legitimate interests (GDPR Article 6(1)(f), for international users): to secure the website and understand aggregated usage, in ways that don't override your rights.

Withdrawing consent does not affect processing already carried out, and may mean we can no longer provide classes.

We never sell personal data. We share it only with service providers ("Data Processors") who help us run the service, under contracts or terms that require them to protect it and use it only on our instructions:

We may also disclose personal data where required by law, a court order or a government authority, to protect the safety of a child or any person, or as part of a merger or acquisition, in which case this policy continues to apply.

Some of our providers store or process data outside India, for example on cloud servers in other countries. We transfer personal data outside India only as permitted under the DPDP Act, and not to any country the Government of India restricts. For users in the EU/UK, transfers rely on appropriate safeguards such as standard contractual clauses offered by our providers.

We keep these to a minimum and use no advertising or cross-site tracking cookies. You can opt out of Google Analytics on any site with Google's browser add-on at https://tools.google.com/dlpage/gaoptout.

You can block or delete cookies and local storage in your browser settings. The site works without them.

• Enquiries and trial bookings that don't lead to enrolment: up to 24 months after our last contact, then deleted.
• Student and enrolment records: while the student is enrolled and for up to 3 years afterwards, so parents can request records and we can handle queries.
• Payment and invoice records: for the period required by Indian tax and accounting laws.
• Class recordings, if any: as set out in our Child Safety Policy.
• Consent records: for as long as we rely on that consent, plus the period needed to demonstrate it.

When we no longer need personal data, or you withdraw consent and no legal obligation requires us to keep it, we delete it or make it anonymous.

We use reasonable security safeguards, including encrypted connections (HTTPS), access limited to staff who need it, reputable providers with their own security programmes, and regular review of who can access what. No system is completely secure. If a personal data breach occurs, we will notify the Data Protection Board of India and affected users as required by law, and take steps to limit the harm.

Under the DPDP Act you have the right to:

• Access a summary of the personal data we hold about you (and your child) and how it is processed
• Correct, complete or update inaccurate or incomplete data
• Erase data that is no longer needed, unless we must keep it by law
• Withdraw consent at any time, as easily as you gave it
• Have your grievance addressed by our Grievance Officer
• Nominate another person to exercise your rights in the event of your death or incapacity

If you are in the EU or UK, you also have the rights to restriction, data portability and objection, and to complain to your local supervisory authority. If you live in a US state with a consumer privacy law (such as California), you have the right to know, correct and delete your data. We do not sell or share personal data for cross-context behavioural advertising.

To exercise any right, email hello@codingchamp.in with the subject "Privacy request". We may need to verify your identity, and we respond within 30 days.

For any privacy concern or complaint, contact our Grievance Officer, CodingChamp, email: hello@codingchamp.in. We acknowledge complaints within 48 hours and aim to resolve them within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India once it is accepting complaints.

We may update this policy as our services or the law change. We will post the new version here with a new "Last updated" date, and tell enrolled families by email about significant changes.