MATA SUNDRI COLLEGE FOR WOMEN

Privacy Policy

Date: 01 Aug 2025

Privacy Policy

Privacy Policy Effective date: 01-09-2025 Applies to: The official website and online portals of Mata Sundri College for Women, University of Delhi (collectively, “Website”).

1. Introduction This Privacy Policy explains how the College collects, uses, shares, and protects your personal information when you access or use the Website and associated services. It is drafted in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and applicable University of Delhi regulations. By using the Website, you consent to the practices described here. If you do not agree, please discontinue use.

2. Categories of Data Collected

Identity Data: Name, gender, date of birth, photograph, identification numbers (e.g., roll number, UID, employee ID).
Contact Data: Email, phone, postal address.
Academic/Employment Data: Course/programme, department, marks, examination records, attendance, employee service details.
Transaction Data: Fee payments, receipts, refunds.
Technical Data: IP address, device identifiers, browser type, cookies, system logs.
Special Categories (where applicable): Health or disability details (only where required for accommodations or compliance).

3. Purposes of Processing Personal data is processed for: -

Admissions, enrolment, examinations, and academic administration. - Faculty/staff employment and service records. - Placements, internships, and alumni relations. - Fee payment, refunds, and financial management. - Research, accreditation, quality assurance, and statutory reporting. - IT security, fraud prevention, and grievance redressal. - Compliance with laws and regulations.

4. Legal Basis for Processing Processing is based on one or more of the following grounds under Indian law: -

Consent of the individual (where explicitly sought). - Performance of institutional obligations under University/UGC/Statutory rules. - Compliance with legal obligations. - Legitimate interests of the College in running academic, administrative, and research functions.

5. Consent & Withdrawal Where consent is required, it will be obtained through clear notices. You may withdraw consent at any time by writing to [privacy@college-domain.ac.in]. Withdrawal does not affect prior lawful processing.

6. Data Sharing & Disclosure Personal data may be shared with: - University of Delhi for academic and administrative purposes. - Regulatory/statutory authorities (e.g., UGC, NAAC, NIRF, Government bodies) when legally required. - Service providers (IT, payment gateways, cloud storage, learning platforms) under strict confidentiality and data processing agreements. - Recruiters/partners for placements, internships, research collaborations (with consent/legitimate interest). We do not sell personal data.

7. Data Retention Records are retained only as long as necessary for the purposes described or as required by law. Illustrative schedule: - Admissions: Application data retained for one academic cycle beyond completion. - Examinations: As per University/Statutory requirements. - Financial transactions: As per tax/audit requirements. - System logs: As per CERT-In directions (minimum 180 days).

8. Data Protection & Security The College employs reasonable administrative, technical, and physical safeguards, including: -

Access controls and role-based permissions. - Two-factor authentication for sensitive portals. - Encryption (in transit, and at rest where feasible). - Regular backups and patching. - Security monitoring and logging. Despite safeguards, no system is fully secure. Users are advised to practice caution.

9. Cookies & Tracking The Website uses cookies and similar technologies for authentication, analytics, and service improvement. You may adjust browser settings to disable cookies, though some features may not function properly.

10. Cross-Border Transfers Where service providers process data outside India, the College ensures contractual and technical safeguards in line with Indian law. By using certain services, you consent to such transfers.

11. Your Rights (under DPDP Act)

Right to Access: Request a copy of your personal data.
Right to Correction: Request correction of inaccurate/incomplete data.
Right to Erasure: Request deletion, subject to legal/academic retention requirements.
Right to Grievance Redressal: Lodge complaints with the Grievance Officer.
Right to Nominate: Appoint a nominee to exercise rights in case of incapacity/death (where applicable).
Requests may be sent to [privacy@college-domain.ac.in] with proof of identity.

12. Children & Minors For users under 18, data processing (where applicable) will comply with DPDP Act obligations. Parental/guardian consent may be sought for certain activities.

13. Grievance Redressal

Grievance Officer (Privacy/Data Protection): [Name, Designation, Email, Phone, Address].
Complaints will be acknowledged within statutory timelines and resolved in accordance with law.

14. Updates to this Policy This Privacy Policy may be revised periodically. Material changes will be notified via Website notice boards, portals, or email. Continued use constitutes acceptance of updated terms.