Sanand Learning Hub · Last updated: June 2026 · DPDP Act 2023 Compliant
Sanand Learning Hub (sanandlearning.com) is operated by Prajvel Saini and Sneh Saini. We are the Data Fiduciary under the Digital Personal Data Protection Act 2023 — meaning we determine the purposes and means of processing your personal data.
Contact: prajvel@mail.sanandlearning.com
| Category | Data Points | Source |
|---|---|---|
| Identity | Full name, email address, phone number | Registration form |
| Account | Password (hashed, never stored in plain text), profile photo | Registration / profile |
| Learning Activity | Courses enrolled, mock test scores, practice exam results, time spent | Platform usage |
| Payment | Order ID, amount, payment method (card details are NOT stored — handled by Razorpay) | Subscription purchase |
| Technical | IP address, browser user-agent, session data | Automatic (server logs) |
| Communication | Feedback and support messages | Contact/feedback forms |
We do not collect biometric data, Aadhaar numbers, or financial account details.
Your data is never used for targeted advertising or sold to third parties.
| Data Type | Retention Period | Reason |
|---|---|---|
| Account data (name, email, phone) | Until account deletion + 30 days | Service delivery |
| Learning progress & exam results | Duration of active account + 1 year | Service continuity |
| Payment / order records | 7 years after transaction | Tax and legal compliance |
| Security & access logs (IP, user-agent) | 1 year minimum (DPDP Rules requirement) | Security investigation |
| Free trial logs | 90 days after trial end | Abuse prevention |
| Email correspondence | 2 years | Dispute resolution |
After the retention period, your data is permanently deleted from our systems. You may request earlier deletion — see Your Rights.
| Third Party | Purpose | Data Shared |
|---|---|---|
| Razorpay (India) | Payment processing | Name, email, order amount |
| Hostinger (Lithuania) | Web hosting & email | All platform data (stored on their servers) |
| Google (USA) | Google Sign-In (optional) | Name, email (only if you use Google login) |
| Anthropic (USA) | AI content generation (admin only) | Syllabus text (no student personal data) |
All third-party processors are required by contract to protect your data in accordance with applicable law.
In the event of a data breach, we will notify the Data Protection Board of India within 72 hours and inform affected users promptly.
| Right | What It Means | How to Exercise |
|---|---|---|
| Right to Access | Receive a copy of all your personal data | Download My Data |
| Right to Correction | Correct inaccurate personal data | Update in your Profile page |
| Right to Erasure | Request deletion of your account and data | Email us at prajvel@mail.sanandlearning.com with subject "Data Deletion Request" |
| Right to Withdraw Consent | Withdraw consent for optional data processing | Email us or use account settings |
| Right to Grievance | Raise a complaint about how your data is handled | See Contact section below |
We will respond to all rights requests within 30 days of receipt.
Under the DPDP Act 2023, any user below 18 years of age is a child. Our platform is designed for competitive exam preparation and may be used by students of all ages.
| Cookie Name | Type | Purpose | Duration |
|---|---|---|---|
| PHPSESSID | Essential | User session management (login state) | Session / 24 hours |
| sanand_cookie_consent | Essential | Records your cookie consent choice | 1 year |
| remember_token | Functional | "Remember Me" login persistence | 30 days |
We do not use third-party advertising or tracking cookies. Essential cookies cannot be disabled as they are required for the platform to function.
We automatically log your IP address and browser user-agent for security purposes — specifically to detect fraud, prevent brute-force attacks, and maintain audit trails required by the DPDP Rules 2025.
IP logs are retained for a maximum of 1 year and then permanently deleted. They are never shared for advertising or marketing purposes.
Our hosting provider (Hostinger) stores data on servers in the European Union. While the DPDP Rules on approved jurisdictions are pending finalisation, we take appropriate measures to ensure equivalent data protection standards apply.
We will update our data localisation strategy as the Data Protection Board of India publishes the list of approved jurisdictions.
If you have any questions about this policy or wish to exercise your rights:
| Role | Name | Contact |
|---|---|---|
| Grievance Officer & DPO | Prajvel Saini | prajvel@mail.sanandlearning.com |
| Postal Address | Sanand Learning Hub, Jammu & Kashmir, India | |
We will acknowledge your complaint within 48 hours and resolve it within 30 days. If you are unsatisfied with our response, you may escalate to the Data Protection Board of India.