1. Personal Data Collected
We may collect name, nickname, email, mobile number, circle, division, target exam, login details, selected or purchased course, payment ID, invoice/receipt details, support messages, test-attempt summaries, scores, answer-review data, course progress, and limited device/login security details.
Payment card, UPI PIN, banking credentials, and wallet passwords are processed by the payment gateway or bank. Pinak Postal Merit Academy should not store those sensitive payment credentials.
2. Purpose of Processing
Data is used to create candidate accounts, verify identity/contact details, provide course access, show profile progress, save test attempts, process payments/refunds, send course updates, respond to support requests, prevent misuse, enforce device/session security, maintain records, and comply with legal or tax obligations.
3. Consent and Communication
By registering, contacting us, requesting enrollment updates, purchasing a course, or attempting tests, candidates consent to the use of their data for the stated purposes. Promotional messages should include a reasonable unsubscribe or opt-out option when production communication tools are connected.
4. Sharing of Data
Data may be shared with payment gateways, hosting providers, email/SMS/WhatsApp service providers, analytics/security tools, accountants, legal advisors, tax authorities, or law-enforcement/government authorities where required. We do not sell candidate personal data.
5. Storage, Security and Retention
Candidate records are handled with secure authentication, access controls and limited administrative access. OTP and completed verification records are normally cleared within 7 days, routine session/security logs within 90 days, and closed administrative audit records are retained for up to 1 year. Learning progress and attempt summaries remain available while the candidate account is active; payment and invoice records may be retained for the legally required accounting or dispute period. A verified deletion request is completed unless a record must be retained for security, payment, dispute or legal compliance.
For account protection, the platform may use limited device and session details to apply login security rules, including one active device and a maximum of two trusted devices.
Some account preferences may be saved on the candidate's device for convenience. Candidates should avoid using shared devices for account access and should keep login details confidential.
6. Candidate Rights and Grievance Contact
Candidates may request correction, access, update, deletion where legally permitted, communication opt-out, or grievance review by contacting support@pinakpma.com. Support will share the suitable escalation path when a grievance needs further review.
7. Breach Notification
If a personal-data breach affects candidates, Pinak Postal Merit Academy should investigate, take corrective action, notify affected users where required, and follow applicable legal notification requirements.