Privacy Policy

This policy explains how [Registered business name] (“OmniX Labs”, “we”, “us”) collects, uses, shares and protects your personal data when you use omnixlabs.org and our related services. We act as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and follow applicable Indian law, including the Information Technology Act, 2000.

1. Data we collect

• Contact enquiries: your name, email, phone number (optional) and message, when you contact us.
• Orders (once online purchase is available): name, email, mobile number, state, GSTIN (optional) and order details.
• Payments: processed by our payment partner. We receive a payment confirmation and reference, but never your full card, UPI PIN or bank login details.
• Learning data (once accounts are available): progress and practice results, used only to provide the service.
• Technical data: basic information your browser sends, such as IP address and device type, which our hosting and font providers may log for security and performance.

2. How we use your data

• To reply to enquiries and provide the products and services you request
• To process orders, issue invoices and meet tax and legal obligations
• To send service messages, such as access details and order updates
• To send updates you asked for (for example, “Notify me”). You can opt out at any time.
• To keep our website secure and prevent fraud

We process personal data on the basis of your consent, or for legitimate uses allowed by the DPDP Act, such as meeting a legal obligation.

3. Children’s data

Many of our learners are under 18. Under the DPDP Act, we:

• obtain verifiable consent from a parent or lawful guardian before processing a child’s personal data
• do not track children’s behaviour or monitor them, and do not target advertising at children
• collect only the data needed to provide the learning service

For school programs, we process student data under an agreement with the school, which is responsible for obtaining the appropriate consents.

4. Sharing your data

We do not sell personal data. We share it only with:

• service providers that help us run our business, such as hosting, email, payment and invoicing providers, under appropriate safeguards
• authorities, when required by law

Some providers may store data outside India, as permitted under the DPDP Act.

5. Retention

We keep personal data only as long as needed for the purpose it was collected for, or as required by law (for example, tax records). We then delete or anonymise it.

6. Your rights

Under the DPDP Act, you have the right to:

• access a summary of your personal data and how we process it
• correct, complete, update or erase your personal data
• withdraw your consent at any time (this does not affect processing that already took place)
• nominate another person to exercise your rights if you die or become incapacitated
• have your grievances addressed

To use any of these rights, email [Privacy email – to be updated].

7. Security

We use reasonable security measures, including encrypted connections (HTTPS), access controls and trusted providers, to protect your data. If a personal data breach occurs, we will notify affected users and the Data Protection Board of India as required by law.

8. Cookies

See our Cookie Policy.

9. Grievance Officer

Name	[Grievance Officer name]
Email	[Privacy email – to be updated]
Address	[Registered address, City, State, PIN code]

We aim to acknowledge complaints within 48 hours and resolve them within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

10. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new “Last updated” date, and tell you about significant changes.