DRONAA INTERNATIONAL, DEHRADUN
Effective Date: 18 January 2023 | Last Updated: 4 November 2026
1. PRELIMINARY
1.1 This Privacy Policy (“Policy”) is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023 (“DPDP Act”) together with the rules framed under it, as in force from time to time.
1.2 This Policy applies to the website of Dronaa International, Dehradun (“Institution”, “we”, “us” or “our”), and to all personal data collected through enquiry forms, telephone calls, WhatsApp and other messaging channels, email, counselling sessions, and admission-related processes.
1.3 For the purposes of the DPDP Act, the Institution acts as the Data Fiduciary, and you, the person to whom the personal data relates, are the Data Principal. Where the Data Principal is a child, the term includes the parent or lawful guardian.
1.4 By accessing the website or submitting your personal data, you acknowledge that you have read and understood this Policy.
2. DEFINITIONS
In this Policy, unless the context otherwise requires:
(a) “Personal Data” means any data about an individual who is identifiable by or in relation to such data.
(b) “Processing” means any operation performed on personal data, including collection, recording, storage, use, sharing, disclosure, erasure, or destruction.
(c) “Child” means an individual who has not completed eighteen years of age.
(d) “Applicable Law” means all laws, rules, regulations, and binding directions in force in India.
3. CONSENT AND COMMUNICATION
3.1 By submitting this form, you agree that Dronaa International Dehradun may contact you via phone, WhatsApp, or email regarding your enquiry, courses, counselling, and admissions support. Your information will be handled according to our Privacy Policy. You may opt out of promotional communication at any time.
3.2 Your consent is voluntary, specific to the purposes stated in this Policy, and given by a clear affirmative action. You may withdraw consent at any time as provided in Clause 9. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
3.3 Communications by telephone, SMS, or WhatsApp will be made in compliance with the Telecom Commercial Communications Customer Preference Regulations, 2018 and any registration made by you under the National Customer Preference Register.
4. PERSONAL DATA COLLECTED
4.1 Data provided by you: name, mobile number, email address, city and address, educational qualifications, course or programme of interest, identity and academic documents submitted for admission, and any other information you voluntarily disclose.
4.2 Data collected automatically: IP address, device and browser type, operating system, pages visited, time and duration of visit, and cookie identifiers.
4.3 The Institution does not intentionally seek “sensitive personal data or information” as defined under the SPDI Rules (such as passwords, financial instrument details, or health information) through enquiry forms. Where such data is required for a specific purpose, it will be collected only with your express consent.
5. PURPOSES OF PROCESSING
Personal data is processed only for lawful purposes, namely:
(a) responding to enquiries and providing information on courses and programmes;
(b) providing counselling and admission support;
(c) processing admissions, enrolment, and related administration;
(d) sending service communications and, subject to your right to opt out, promotional communications;
(e) maintaining records, internal audit, quality improvement, and website analytics;
(f) preventing fraud, misuse, or security incidents; and
(g) compliance with legal obligations, court orders, and requests of competent authorities.
6. DISCLOSURE AND SHARING
6.1 The Institution does not sell or rent personal data.
6.2 Personal data may be disclosed only to: (i) employees, counsellors, and authorised personnel on a need-to-know basis; (ii) service providers acting as Data Processors under a written contract imposing confidentiality and security obligations; (iii) affiliated or partner institutions and examination or regulatory bodies, where necessary for admission or certification; and (iv) governmental, judicial, or law-enforcement authorities where required by Applicable Law.
6.3 The Institution remains responsible for personal data processed on its behalf by a Data Processor.
7. DATA SECURITY, ACCURACY AND RETENTION
7.1 The Institution implements reasonable security safeguards, including technical, administrative, and organisational measures, to prevent personal data breach, in line with Section 8 of the DPDP Act and Rule 8 of the SPDI Rules.
7.2 In the event of a personal data breach, the Institution will notify the Data Protection Board of India and affected Data Principals in the manner prescribed by law.
7.3 Personal data is retained only for as long as necessary to fulfil the purposes stated in this Policy or as required by Applicable Law, after which it will be erased or anonymised, unless retention is legally mandated.
7.4 You are responsible for ensuring that the information you provide is accurate and complete.
8. RIGHT TO PRIVACY AND STATUTORY COMPLIANCE
8.1 The Institution acknowledges that the right to privacy is a fundamental right guaranteed under Article 21 of the Constitution of India, as declared by the Hon’ble Supreme Court in Justice K.S. Puttaswamy (Retd.) v. Union of India (2017) 10 SCC 1, and undertakes to process personal data in a manner consistent with the principles of legality, necessity, and proportionality recognised in that judgment.
8.2 The Institution shall process personal data in accordance with:
(a) the Digital Personal Data Protection Act, 2023, including provisions on notice, consent, legitimate uses, obligations of the Data Fiduciary, and rights of the Data Principal;
(b) the Information Technology Act, 2000, including Section 43A (compensation for failure to protect data, to the extent in force), Section 66E (punishment for violation of privacy), and Section 72A (punishment for disclosure of information in breach of lawful contract), together with the SPDI Rules; and
(c) the Bharatiya Nyaya Sanhita, 2023, which provides criminal remedies against offences such as criminal breach of trust (Section 316), cheating, and other offences involving the dishonest misuse of personal information.
8.3 Any person whose privacy rights are infringed may seek remedies under the above laws, including compensation and criminal or regulatory proceedings, without prejudice to any other remedy available in law.
9. RIGHTS OF THE DATA PRINCIPAL
Subject to Applicable Law, you have the right to:
(a) obtain a summary of the personal data processed, the processing activities undertaken, and the identities of those with whom it has been shared (Section 11, DPDP Act);
(b) request correction, completion, updating, or erasure of your personal data (Section 12);
(c) withdraw consent at any time, with the same ease as it was given (Section 6);
(d) opt out of promotional calls, WhatsApp messages, SMS, and emails by replying “STOP”, using the unsubscribe link, or writing to the Grievance Officer;
(e) have readily available means of grievance redressal (Section 13); and
(f) nominate another individual to exercise your rights in the event of death or incapacity (Section 14).
Requests under this Clause may be sent to the Grievance Officer. The Institution may take reasonable steps to verify your identity before acting on a request.
10. CHILDREN’S PERSONAL DATA
10.1 The Institution processes the personal data of a Child only with the verifiable consent of the parent or lawful guardian, as required by Section 9 of the DPDP Act.
10.2 The Institution does not undertake tracking or behavioural monitoring of Children or targeted advertising directed at Children, and does not process their data in any manner likely to cause detrimental effect on their well-being.
11. COOKIES AND SIMILAR TECHNOLOGIES
The website may use cookies and analytics tools to enhance functionality and understand usage. You may disable cookies through your browser settings; certain features may be affected as a result.
12. THIRD-PARTY LINKS
The website may contain links to third-party websites. The Institution is not responsible for the privacy practices or content of such websites, and this Policy does not apply to them.
13. GRIEVANCE REDRESSAL
13.1 In accordance with Rule 5(9) of the SPDI Rules and Section 13 of the DPDP Act, grievances may be addressed to:
Grievance Officer: Mrs Kalpana Dagar
Designation:Branch head
Address: Dronaa International, 1st floor, Jeet Arcade, Dehradun, Uttarakhand,248001
Email: dronaddn@gmail.com
Telephone: +91 93684 02890
Hours: Mon-Fri 10.00 am to 5.00 pm
13.2 The Institution shall acknowledge the grievance within [48 hours] and endeavour to resolve it within [30 days] of receipt, or within such period as may be prescribed.
13.3 A Data Principal who is not satisfied with the resolution, or who has not exhausted the above remedy, may approach the Data Protection Board of India in the manner provided under the DPDP Act.
14. AMENDMENTS
The Institution reserves the right to amend this Policy to reflect changes in law or its practices. The revised Policy will be published on this page with the updated date. Continued use of the website or services after such publication constitutes acceptance of the revised Policy, and where Applicable Law requires fresh consent, it will be sought.
15. GOVERNING LAW AND JURISDICTION
This Policy shall be governed by the laws of India. Subject to Clause 13, the courts at Dehradun, Uttarakhand shall have exclusive jurisdiction over any dispute arising out of or in connection with this Policy.
16. CONTACT
For any queries relating to this Policy, write to dronaddn@gmail.com or contact +918279935721.