POLICIES
Privacy Policy
This policy explains how GNR Robotics, a program of SRS EduTech ("GNR Robotics", "we", "us"), handles personal data when you use this website, contact us, book a demo, or use the student portal. We act as the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and its Rules.
In short: we collect only what we need to respond to you and run our classes, we don't sell your data, we don't run advertising or tracking cookies, and you can ask us to see, correct or delete your data at any time.
1. What we collect and why
| Where | Data | Purpose | Legal basis |
|---|---|---|---|
| Demo / contact form | Parent or guardian name, phone number; optionally email, child's grade band, message | To reply to your request and arrange a demo class | Your consent (tick box on the form) |
| Student portal sign-up | Student's name, email address, password (stored only as a secure hash by Google Firebase), who created the account, consent record | To let students sign in and see their enrolled courses | Consent of the parent/guardian, or of the student if 18 or older |
| Enrolment records | Courses a student is enrolled in | To run the program | Consent; performance of our agreement with you |
| Data requests | Name, contact details, details of your request | To verify and fulfil your request | Legal obligation under the DPDP Act |
| Cookie choice | Your accept/reject choice, stored in your browser | To remember your choice | Strictly necessary |
We do not ask for, and ask you not to send us, sensitive details such as a child's health, religion, caste, Aadhaar number or financial information through this website.
Photos and videos taken in class are only published (for example in our gallery or on Instagram) with the written consent of the child's parent or guardian. See our Children's Data & Parental Consent notice.
2. Children's data
Our students are mostly under 18. Under the DPDP Act we process a child's personal data only with verifiable consent of a parent or lawful guardian, and we do not track, behaviourally monitor or target advertising at children. Full details are in our Children's Data & Parental Consent notice.
3. Who we share data with
We do not sell or rent personal data. We use a small number of service providers (Data Processors) who handle data on our behalf, only for the purposes above:
| Provider | What it does | Data involved |
|---|---|---|
| FormSubmit (formsubmit.co) | Delivers contact and data-request form submissions to our email inbox | Whatever you enter in the form |
| Google Firebase (Authentication & Cloud Firestore) | Student portal sign-in and enrolment records; the Firebase code library is loaded from gstatic.com on portal pages only | Student name, email, password hash, courses, consent record |
| Google Calendar appointment pages | Only if you click "Book a Demo Slot": you leave our site and book directly with Google | Whatever you enter on Google's booking page |
Links to Instagram, SRS EduTech, Dronacharya Tech Hub and Google take you to sites with their own privacy policies. Some providers may store data outside India; we only use providers that offer appropriate safeguards and as permitted by the DPDP Act. We may also disclose data where required by law.
4. How long we keep it
- Demo and contact enquiries: deleted once we have responded and the demo is done, unless you enrol.
- Student portal and enrolment records: kept only while the student is enrolled, and deleted when they finish or leave the program. We don't keep student data after that, unless the law requires it (for example, tax records of payments).
- Data requests: deleted once the request is completed, apart from a short note that it was completed.
When the purpose is served, or you withdraw consent, we delete the data unless the law requires us to keep it.
5. Your rights
Under the DPDP Act you (or, for a child, their parent or guardian) can:
- Access a summary of the personal data we hold and how we use it, and who we have shared it with;
- Correct, complete or update inaccurate or incomplete data;
- Erase data we no longer need, or ask us to delete it;
- Withdraw consent at any time, as easily as you gave it (this doesn't affect processing already done);
- Nominate another person to exercise your rights if you die or become incapable;
- Raise a grievance with us, and then with the Data Protection Board of India if you're not satisfied.
Use our Data Deletion & Requests page or email support@gnrrobo.com. We may need to verify your identity first. We aim to respond promptly.
6. Security
We use reasonable security safeguards: encrypted (HTTPS) connections, access to student records limited to authorised staff, and password storage handled by Google Firebase. If a personal data breach occurs, we will notify affected people and the Data Protection Board as the law requires.
7. Cookies
We don't use advertising or tracking cookies. See our Cookie Policy.
8. Contact and grievances
Grievance contact: GNR Robotics Support
SRS EduTech / GNR Robotics, SRS Learning Centre, Kalpavruksha Nidhi, Horamavu Agara Rd, Horamavu, Bengaluru, Karnataka 560043
Email: support@gnrrobo.com · Phone: +91 81239 54510
If we don't resolve your grievance, you may complain to the Data Protection Board of India.
9. Changes
If we change this policy in a way that affects how we use your data, we will update the date above and, where needed, ask for your consent again.