Privacy Policy

1. Summary

• We do not sell personal data, and we do not use it for third-party advertising, retargeting or cross-site tracking.
• We collect what we need to run our website, platforms and services, respond to you and improve what we do.
• When we process student or staff data for an Institution, the Institution decides how it is used and we act on its instructions.
• Subject to applicable law, you can ask to access, correct or erase your data, withdraw consent, or raise a grievance.

2. Who We Are and What This Policy Covers

This Privacy Policy explains how FlipPraxis (“we”, “us”) collects and uses personal data when you visit www.flippraxis.com, use our free tools and platforms, contact us, register for courses, tests, internships or the newsletter, or take part in a FlipPraxis engagement. It is written to meet India’s Digital Personal Data Protection Act and the rules made under it (“DPDP law”), and to respect other privacy laws, such as the GDPR, where they apply to you.

Some platforms (for example UniTech, CareerEdge AI, KnowledgeVault and WisdomConnect) have additional privacy notices that explain features specific to them. Those notices apply together with this Policy. Our Terms of Service also apply.

Our role

• For our website, free tools, enquiries, courses, tests, internships, newsletter and our own business records, FlipPraxis decides why and how personal data is used. We are the Data Fiduciary (or “controller”).
• When an Institution uses our services or platforms for its students and staff, the Institution is the Data Fiduciary, and FlipPraxis processes that data on its behalf as a Data Processor. The Institution is responsible for giving notice and obtaining any consent required, including verifiable consent from a parent or lawful guardian for children. Requests about that data should go to the Institution first, and we will help it respond.

3. What We Collect

Information you give us

• Contact and enquiry details: name, job title, institution, email, phone, country and your message, when you book a strategy conversation, request a proposal or contact us.
• Forms and assessments: your answers to ReadyScan, surveys and the Benchmark Survey, ratings and reviews, course and test registrations, and newsletter sign-ups.
• Courses, tests and certificates: your registration details, progress, answers, scores and results, and the name, institution and course or level shown on your certificate.
• Internship registrations: your contact details, education, availability, interests, links you choose to share and your statement.
• Account details: your sign-in email and profile information when you create an account on any of our platforms.
• Engagement information: programme documents, curriculum materials, feedback and correspondence shared during an engagement.

Information collected automatically

• Without your consent, we record only basic visit counts: the page visited, the time and the referring website, with no identifiers.
• With your consent (if you choose “Accept all” in the cookie banner), we also record a random visitor and session identifier, device type, browser, operating system, screen size, language, time zone, approximate country and a shortened (anonymised) IP address.
• Our hosting and security systems keep technical logs, such as IP address, time and request details, to keep the Services secure and working.

Ask FlipPraxis chat

Your messages are sent through our own server to our AI provider, which processes them under contract only to write the answer. Unless you switch it off in the chat menu, or your browser sends a Global Privacy Control signal, we keep the conversation for a limited period, without your name and with email addresses and phone numbers removed, to improve answers. If you ask us to contact you, the details you enter (name, email, institution, role, country, preferred contact method and, optionally, phone) are saved with your consent so that we can reply. Your language and time zone are recorded so that we reply in the right language at a sensible time. Please do not share sensitive personal information in the chat.

Website translation

If you choose a language with the language button, the page text is sent to a translation service to translate it, and a small preference cookie remembers your choice. Nothing is sent to the translation service unless you choose a language other than English, and choosing English again stops it.

We do not ask for sensitive information such as financial account details, health information or government identity numbers on our website. Please do not send it to us.

4. How We Use Personal Data

We use personal data to:

• respond to enquiries and requests, and arrange and hold conversations and meetings;
• provide, operate, secure and support our website, platforms, courses, tests and engagements, including issuing and verifying certificates;
• assess internship registrations and contact applicants about them;
• send service messages, and send newsletters and updates where you have opted in (you can unsubscribe at any time);
• understand how the website is used and improve our content, tools and services, using aggregated or de-identified information wherever possible;
• create de-identified, aggregated benchmarks and research insights that do not identify any individual or Institution;
• prevent fraud, misuse and security incidents, enforce our Terms, and meet legal, tax, accounting and regulatory obligations.

Legal basis. We rely on your consent (which you may withdraw at any time, without affecting earlier processing), on the legitimate uses permitted by DPDP law (such as data you voluntarily provide for a specified purpose, or compliance with law), and, where the GDPR applies, on performing a contract, our legitimate interests in running and improving our business, consent and legal obligations.

5. Data We Process for Institutions

Where we process student, staff or employer-partner data for an Institution:

• we use it only to provide the contracted Services and according to the Institution’s documented instructions;
• we do not sell it, and we do not use it for our own marketing or to contact the Institution’s students or employer partners for our own purposes;
• we may use it in de-identified and aggregated form to operate, secure, benchmark and improve our Services;
• at the end of the engagement, we return or delete it as agreed with the Institution, unless we must keep it by law.

Specific data protection terms can be agreed in the Institution’s Order or data processing agreement.

6. When We Share Personal Data

We share personal data only as follows:

• Service providers: we use a limited number of trusted third-party tools to run our website and deliver our services (for example hosting, email and video conferencing). They are selected for privacy and security, act under contract and confidentiality obligations, and use personal data only to provide their service to us.
• FlipPraxis affiliates, for the purposes described in this Policy.
• Your Institution, where you take part in a programme it has arranged with us.
• Public verification, where you obtain a certificate and its verification page shows the details described when you registered.
• Professional advisers, such as auditors and lawyers, under confidentiality.
• Legal and safety reasons, where required by law, court order or a government authority, or where needed to protect the rights, safety or property of FlipPraxis, our users or others.
• Business transfers, as part of a merger, acquisition, restructuring or sale of assets, subject to this Policy continuing to protect your data.

We do not sell personal data, and we do not share it with third parties for their own marketing.

7. International Processing

FlipPraxis and its service providers may store or process data outside India. Where we do this, we use providers with appropriate security and contractual safeguards, and we comply with any restrictions the Government of India places on transfers.

8. How We Protect Data

We use reasonable security safeguards appropriate to the nature of the data, including encryption in transit (TLS), encryption at rest provided by our hosting providers, role-based access limited to people who need it, authentication controls, logging and monitoring, and confidentiality obligations for our personnel and associates. No system is completely secure. If a personal data breach occurs, we will act promptly to contain it and will notify the Data Protection Board of India and affected individuals as required by law.

9. How Long We Keep Data

• Enquiries and form submissions: for as long as needed to respond and follow up with you, unless they become part of an engagement.
• Chat conversations: for a limited period to improve answers. Contact requests made through the chat are kept until you ask us to delete them.
• Visit statistics: for as long as needed to understand how the website is used.
• Accounts, course and test records and certificates: for as long as your account is active, or for as long as the certificate remains verifiable, unless you ask us to delete them.
• Internship registrations: for as long as needed to consider you for suitable openings, unless you ask us to delete them sooner.
• Engagement records: for the engagement and afterwards for as long as needed for legal, tax, audit, contractual and dispute-resolution purposes.
• Security and processing logs: for the minimum period required by law, or longer where needed to protect the Services.

After these periods we delete data or make it anonymous. De-identified, aggregated information may be kept for research and service improvement.

10. Cookies and Similar Technologies

Our website uses browser storage in two ways. Essential storage remembers your cookie choice and keeps forms and sign-in working; it is always on. Visit statistics storage (a random visitor identifier) is used only if you choose “Accept all” in the cookie banner. You can change your choice at any time using Cookie settings in the footer, and choosing “Essential only” deletes the identifier. A preference cookie also remembers the language you choose. We do not use advertising cookies, retargeting or behavioural tracking. Visit records are visible only to FlipPraxis administrators.

11. Your Rights

Subject to applicable law, you can:

• access a summary of the personal data we hold about you and how we use it;
• correct, complete or update inaccurate or incomplete data;
• erase data that is no longer needed, unless we must keep it by law;
• withdraw consent at any time, as easily as you gave it (for example, through Cookie settings, the chat menu or the unsubscribe link);
• nominate another person to exercise your rights if you die or become unable to;
• raise a grievance with us, and, if you are not satisfied with our response, complain to the Data Protection Board of India;
• where the GDPR applies, also object to or restrict certain processing, ask for portability, and complain to your local supervisory authority.

To make a request, use the Book a call option and mention “Privacy request” in your message. We may need to verify your identity before acting. We will respond as soon as reasonably possible, and in any case within the time required by law. If your request concerns data we process for your Institution, we will pass it to the Institution and help it respond.

12. Children

Our website and free tools are intended for adults. We do not knowingly collect personal data from children without verifiable consent from a parent or lawful guardian. Where children take part through their Institution, the Institution is responsible for obtaining that consent. We do not track or profile children or direct advertising at them. If you believe a child has given us personal data without the required consent, please contact us and we will delete it.

13. Grievance Officer and Contact

For any question, request or complaint about your personal data, contact our Grievance Officer:

We will acknowledge your grievance and respond as soon as reasonably possible, and within the period required by law.

14. Changes to this Policy

We may update this Policy to reflect changes in our Services or in the law. The updated version will be posted on this page and applies from the time it is posted. Where a change materially affects how we use personal data you have already given us, we will notify you or ask for your consent where the law requires it.