Legal

Privacy policy

We ask for as little as we can, use it only to reply to you, and never sell it. Here's the detail.

Effective

Who we are

Brainfloss Foundation ("the Foundation", "we") is a Section 8 company registered in India under the Companies Act, 2013 (CIN U85500PN2024NPL235093) and the charitable arm of Brainfloss. Our registered office is in Kothrud, Pune 411038, Maharashtra, India. For the purposes of India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), we are the Data Fiduciary for the personal data described here.

What we collect

We only collect what you choose to type into one of our forms:

  • Contact form: your name, email address, organisation (optional), the topic and your message.
  • Scholarship interest: your name, email address and institution.
  • Course launch sign-up: your email address.

Please don't include sensitive information (such as health, financial or identity documents) in a message. We don't need it to reply.

Like every website, the servers that deliver our pages also process technical data such as your IP address and browser type, to send you the page and to protect the site from abuse. We don't use this to identify you.

How we use it

  • To reply to your enquiry, for example about hosting a workshop, volunteering or partnering.
  • To tell you when scholarships open or courses launch, if you asked us to.

We rely on your consent, which you give when you submit a form. You can withdraw it at any time by emailing us, and we'll stop using your data for that purpose. We won't add you to any other mailing list or use your details for anything you didn't ask for.

How your data travels

When you press submit, your form is sent securely (over HTTPS) to a small program running on Cloudflare, which emails it to the Foundation's inbox using Amazon Simple Email Service (Amazon SES), an email delivery service. The website itself does not keep a database of submissions: your message lives in our email account, where only authorised people at the Foundation can read it.

We use these service providers, who process data on our behalf and only as needed to provide their service:

  • Cloudflare: hosts the website, runs the form handler and protects the site against attacks and spam.
  • Amazon Web Services (Amazon SES): delivers form submissions to us by email.
  • Our email provider: Google Workspace, where we receive and store messages.

These providers may process data on servers outside India. We only use providers with appropriate security measures, and we don't transfer data to any country the Government of India has restricted under the DPDP Act.

Cookies and analytics

This website does not set cookies and does not use advertising, tracking pixels or cross-site analytics. Our fonts are served from our own site, not from a third party. If we measure visits, we use Cloudflare Web Analytics, which is cookieless: it counts page views in aggregate and does not build a profile of you or follow you across other websites.

Who we share it with

Nobody, beyond the service providers above. We don't sell, rent or trade personal data, and we don't share it for marketing. We would disclose it only if the law requires us to.

How long we keep it

We keep enquiries for as long as we need them to deal with your request and any follow-up, and then delete them within 12 months. Course and scholarship sign-ups are kept until we've sent the announcement you asked for, or until you ask us to remove you, whichever comes first.

Your rights

Under the DPDP Act you can ask us to:

  • tell you what personal data we hold about you and how we've used it;
  • correct, complete or update it;
  • erase it, where we no longer need it or you withdraw consent;
  • nominate someone to exercise these rights for you if you're unable to.

To do any of these, email us at [email protected]. We'll respond within 30 days. If you're not satisfied with our response, you can complain to the Data Protection Board of India.

Children

Our programmes are mainly for college and university students. Our forms aren't intended for anyone under 18. If you're under 18, please ask a parent or guardian to contact us on your behalf.

Keeping data safe

Everything on this site is served over HTTPS, forms are checked for spam, and access to the Foundation's inbox is limited to the people who need it. No system is perfectly secure, but if something goes wrong we will notify affected people and the Data Protection Board as the law requires.

Changes to this policy

If we change how we handle personal data, for example by adding a new form or service, we'll update this page and the effective date above.

Contact and grievances

Questions or complaints about privacy go to our grievance officer, Pranav Phadke, at [email protected], or by post to Brainfloss Foundation, Kothrud, Pune 411038, Maharashtra, India.