Privacy Policy

Who we are

This website is operated by Indo German Language Private Limited (“IGL”, “we”, “us”), a private limited company incorporated in India on 21 August 2025, with its registered office at MKJ Heights, Second Floor, Front of District Court, Sikar – 332001, Rajasthan, India

For anything in this policy you can reach us at contact@indogermanlanguage.org.in or 8058566777. We are the data fiduciary under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) and the data controller under the EU General Data Protection Regulation (GDPR) for visitors in the EU or UK.

What we collect

We collect only what you type into the enquiry form on our contact page. There is no account system on this website, and nothing is collected in the background as you browse.

We do not log your IP address or your browser’s user agent with your enquiry, and we record no tracking identifier of any kind. That is a deliberate choice in the database design rather than an oversight: data we do not hold cannot be lost or misused.

What we send you

One email, automatically, confirming that your enquiry reached us and repeating our phone number, WhatsApp and address so you have them to hand. It contains no copy of what you wrote. After that, a person replies to you — usually within one working day. We send no marketing emails and no newsletter, and we will not add you to one.

Why we are allowed to use it

Your consent, given by ticking the box on the form. Under the GDPR that is Article 6(1)(a); under the DPDP Act it is consent for the specified purpose of answering your enquiry and telling you about the courses and guidance services you asked about. You may withdraw it at any time — see Your rights below — and withdrawing it is as easy as giving it.

How long we keep it

Up to 36 months from our last contact with you, after which we delete it. Students commonly enquire, take time to decide, and come back a year or two later, so this period lets us pick the conversation up where it stopped instead of asking you to repeat yourself. If you ask us to delete it sooner, we will.

Who else sees it

We do not sell your data, we do not share it for advertising, and we do not pass it to any recruiter, employer or institution without asking you first. The only parties that necessarily process it are:

• Our hosting provider, which runs the server and the database where enquiries are stored.
• Our email provider, which delivers the internal notification telling our team that a new enquiry has arrived, and the confirmation we send back to you.

Both act on our instructions only. Depending on where those services run, your data may be processed outside India or outside the EEA; where that happens we rely on the provider’s contractual safeguards.

Google. Our homepage can show our public Google reviews. When it does, those reviews are fetched by our server directly from Google — your browser never contacts Google, no Google cookie is set, and nothing about you is sent to them. We draw reviewer initials ourselves rather than loading Google-hosted profile pictures, for the same reason.

What we do not do

• No analytics. We do not use Google Analytics or any equivalent.
• No advertising or remarketing pixels of any kind.
• No third-party embeds, chat widgets, maps or video players.
• No profiling and no automated decision-making.
• No marketing emails unless you ask us for them.

This is enforced technically as well as in writing: the site’s Content Security Policy blocks every third-party origin outright, so a tracker could not load even if one were added by mistake.

Cookies

One cookie, and it exists purely for security. The detail is in our Cookie Policy.

How we protect it

• The whole site is served over HTTPS, with HSTS enforced.
• Enquiries are written using prepared statements, so what you type can never be executed as a database command.
• The form is protected against cross-site request forgery and is rate-limited against abuse.
• Database credentials live in server-side environment variables and never reach the browser.
• Error messages shown to you are generic; internal detail goes to our server log only.

No system is perfectly secure and we will not pretend otherwise. If we ever become aware of a breach affecting your data, we will notify you and the relevant authority as the DPDP Act and the GDPR require.

Your rights

You can ask us to:

• tell you what personal data of yours we hold, and give you a copy;
• correct anything that is wrong or out of date;
• delete it, and withdraw the consent you gave;
• stop using it for any purpose you no longer agree to;
• accept a nominee acting on your behalf if you are unable to act yourself (DPDP Act);
• provide it in a portable form, or stop processing you object to (GDPR, where it applies to you).

Email contact@indogermanlanguage.org.in and we will respond within 30 days. We may first ask you to confirm your identity — only so that we do not hand your data to somebody else.

Grievances

If you are not satisfied with how we have handled your data or your request, write to our grievance officer at contact@indogermanlanguage.org.in with “Data grievance” in the subject line. If we still cannot resolve it, you may complain to the Data Protection Board of India, or — if you are in the EU or UK — to your national supervisory authority.

Children

Our courses and this website are intended for adults. If you are under 18, please have a parent or guardian make the enquiry for you. We do not knowingly collect data from children without verifiable parental consent, and will delete any we find.

Changes to this policy

If what we collect or what we do with it changes, this page changes at the same time and the date at the top is updated. Material changes will be announced on the website.