Privacy notice

A plain-language explanation of the information our marketing forms are designed to use. Form submissions are currently disabled while business, legal, and service details are confirmed.

Notice version 2026-11-v1 · Last reviewed 4 November 2026

Who operates this website

This website is operated under the EduPrava name. The legal entity name, registered or business address, and official contact details are pending confirmation. These details must be added before the enquiry forms are enabled.

Information the forms may collect

If the forms are enabled, they may collect your name, work email, school name, role, selected product or enquiry type, and the message you choose to send. They also record the form type, submission time, privacy notice version, processing-basis choice, and your separate product-updates choice.

Cloudflare Turnstile may process a bot-check token and technical connection information such as your IP address and browser signals to assess automated traffic. Rate limiting may use a keyed, non-reversible address digest and a short-lived request counter. Do not include student or staff personal information in these marketing forms.

Why information would be used

Contact details and message content would be used to respond to the enquiry or demo request you make. If you separately opt in, your email may be used for product news. The marketing choice is optional and is not required to send an ordinary enquiry.

Processing basis

The applicable processing basis has not been approved yet. Legal review must decide whether enquiry processing relies on consent or another applicable basis, including whether section 7(a) of India’s Digital Personal Data Protection Act applies to details voluntarily provided for the stated purpose. See the official text of the Act. The correct notice and control will follow that decision. Until it is documented and approved, the forms do not accept or store submissions.

Service providers and sharing

Cloudflare Turnstile is the planned bot-protection service. Its verification service receives the CAPTCHA response and may receive the visitor’s IP address for verification. If distributed rate limiting is enabled, Upstash Redis receives a keyed digest and expiring request counter, not the enquiry message. The form acceptance service, website host, their locations, and any other processors or recipients have not yet been confirmed. Their identities and relevant sharing details must be added before the forms are enabled.

We do not sell form information. Any sharing needed to answer a request must be documented and limited to the approved service providers.

Security and retention

The marketing application currently has no enquiry database or notification integration, and its forms are disabled. The application is designed to send accepted requests only to a configured server-side service, with transport and access controls; this is not a substitute for approving that service’s security. Before activation, the business must confirm the storage location, access controls, deletion process, and retention period. No lead-retention duration is being stated until that policy is approved.

Your choices and requests

Product updates have a separate, unchecked opt-in. If the marketing list is activated, an independent unsubscribe method must be provided. Where consent is the approved basis for handling an enquiry, you may ask to withdraw it. You may also request access, correction, or erasure, or raise a privacy grievance. The Contact form is being prepared to route these request types, but it is not accepting submissions yet. Please do not submit sensitive information through it while it is disabled.

The verified identity-check and response process for rights requests, and an alternate contact route, remain to be confirmed.

Grievance contact

The privacy grievance contact and any authorised grievance or privacy representative are pending confirmation. This information must be supplied before production form intake is enabled.

Details still to confirm

  • EduPrava’s legal operating entity and official postal/contact details
  • The processing basis for each form, including legal review of section 7(a)
  • The form acceptance service, hosting provider, data locations, and any subprocessors
  • Retention and deletion periods and the operational rights-request workflow
  • The grievance contact and authorised representative

Return to Contact Us or Book a demo.