Privacy Policy

At GOF Digital (a unit of Udayan Education Private Limited), accessible from https://gofdigital.com, one of our main priorities is the privacy of our visitors and users. This Privacy Policy document explains the types of information that is collected and recorded by GOF Digital and how we use it.

This Privacy Policy applies to our website, our mobile applications, and our cloud-based ERP + CRM platform for schools, colleges, and coaching centers, accessible at https://uddy.gofdigital.com (the “Platform” or “UDDY”), collectively referred to as the “Services”.

If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.

1. Consent

By accessing or using our Services, you hereby consent to this Privacy Policy and agree to its terms. Where required by applicable law, we rely on your consent, our legitimate interests, or the performance of a contract as the legal basis for processing your personal information.

2. Our Role: Controller and Processor

GOF Digital acts as a data controller for information collected through our website and our own business communications (for example, when you enquire about a demo or contact us).

GOF Digital acts as a data processor for the student, parent, guardian, staff, and institutional data that our client schools, colleges, and coaching centers upload to or manage within the UDDY Platform. In that capacity, we process such data only on the instructions of the client institution, and the client institution is the data controller responsible for that data.

3. Information We Collect

The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.

• If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.
• When you register for an account or when a client institution creates an account for you on the Platform, we may collect your name, role, email address, telephone number, and institutional affiliation.
• When you sign in to the Platform at uddy.gofdigital.com, we collect authentication and session information, including your email address, password (stored in hashed form), and sign-in metadata such as timestamps and IP address. Failed sign-in attempts may be rate limited for security purposes.
• When you use Platform features such as enquiry management, admissions, fee payment, or communication, we process the data you enter or upload in the course of those activities, as described in the next section.

4. Information We Process on Behalf of Our Clients

When a school, college, or coaching center uses UDDY, the following categories of data may be processed on behalf of that client institution:

• Enquiry and admission data: names, contact details, enquiry source, programme of interest, application details, and admission status.
• Student and family data: student records, guardian and family contact details, and communication preferences.
• Staff data: names, roles, contact details, and platform access permissions.
• Fee and payment data: fee schedules, invoices, payment status, and payment gateway references. We do not store full payment card details; card data is handled by our payment gateway partners.
• Communication data: messages, notifications, and emails or SMS sent through the Platform to students, parents, or staff.

We process this data strictly to provide the Services, on the documented instructions of the client institution, and in accordance with our agreement with that institution.

5. How We Use Your Information

We use the information we collect in various ways, including to:

• Provide, operate, and maintain our website and the UDDY Platform
• Improve, personalize, and expand our Services
• Understand and analyze how you use our Services
• Develop new products, services, features, and functionality
• Authenticate users and secure access to the Platform
• Enable enquiry-to-admission workflows, fee payment, and communication features
• Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the Services, and for marketing and promotional purposes
• Send you emails and platform notifications
• Find and prevent fraud and abuse

6. Log Files

GOF Digital follows a standard procedure of using log files. These files log visitors and authenticated users when they access our Services. All hosting companies do this and a part of hosting services' analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users' movement on the website, and gathering demographic information.

7. Cookies and Web Beacons

Like any other website, GOF Digital uses “cookies”. These cookies are used to store information including visitors' preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimize the users' experience by customizing our web page content based on visitors' browser type and/or other information.

The UDDY Platform also uses essential session cookies and similar technologies to keep you signed in, to remember your preferences (such as “Keep me signed in”), and to protect against unauthorized access. You can control or disable cookies through your browser settings, but disabling essential cookies may prevent you from signing in or using parts of the Platform.

8. Data Security

We implement reasonable technical and organizational measures to protect personal information, including encrypted connections (HTTPS), hashed password storage, role-based access controls, rate limiting on sign-in attempts, and regular backups. No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

9. Third-Party Service Providers

We may share personal information with trusted third-party service providers who help us operate the Services, including:

• Cloud hosting and infrastructure providers
• Payment gateway providers that process fee payments
• Email, SMS, and messaging providers used for platform communication
• Analytics and support tooling providers

These providers are bound by contractual confidentiality and data protection obligations and are permitted to use the information only to provide services to us.

10. Advertising Partners Privacy Policies

You may consult this list to find the Privacy Policy for each of the advertising partners of GOF Digital.

Third-party ad servers or ad networks uses technologies like cookies, JavaScript, or Web Beacons that are used in their respective advertisements and links that appear on GOF Digital, which are sent directly to users' browser. They automatically receive your IP address when this occurs. These technologies are used to measure the effectiveness of their advertising campaigns and/or to personalize the advertising content that you see on websites that you visit.

Note that GOF Digital has no access to or control over these cookies that are used by third-party advertisers.

11. Third Party Privacy Policies

GOF Digital's Privacy Policy does not apply to other advertisers or websites. Thus, we are advising you to consult the respective Privacy Policies of these third-party ad servers for more detailed information. It may include their practices and instructions about how to opt-out of certain options.

12. Your Rights as a Data Principal (India – DPDP Act)

If you are located in India, you may have the following rights under the Digital Personal Data Protection Act, 2023:

• The right to access information about the personal data we process about you.
• The right to correction and erasure of your personal data, subject to legal and contractual limitations.
• The right to grievance redressal.
• The right to nominate another individual to exercise your rights in the event of death or incapacity.

Where we process data on behalf of a client institution, requests relating to student, parent, or staff data should be directed to that institution, and we will assist the institution in responding.

13. CCPA Privacy Rights (Do Not Sell My Personal Information)

Under the CCPA, among other rights, California consumers have the right to:

• Request that a business that collects a consumer's personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.
• Request that a business delete any personal data about the consumer that a business has collected.
• Request that a business that sells a consumer's personal data, not sell the consumer's personal data.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us. We do not sell personal information.

14. GDPR Data Protection Rights

We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

• The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.
• The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
• The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us.

15. Children's Information

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.

GOF Digital does not knowingly collect any Personal Identifiable Information from children under the age of 13 directly through our website. Where student data is processed through the UDDY Platform, it is provided by the client institution, which is responsible for obtaining any required parental or guardian consent. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.

16. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies. Data processed on behalf of a client institution is retained according to the instructions of that institution and the terms of our agreement with it.

17. International Data Transfers

Your information may be transferred to and processed in countries other than your own. Where required, we implement appropriate safeguards to protect personal information in accordance with applicable law.

18. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, we advise you to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted on this page.

19. Contact Us

If you have any questions about this Privacy Policy, or if you wish to exercise your data protection rights, please contact us at:

GOF Digital
B/12, B Block, Bagdola, Sector 8, Dwarka, New Delhi 110077
Email: info@gofdigital.com
Phone: +91 78270 16141