Privacy Policy

SCU Private Limited ("SCU", "Company", "we", "our" or "us") is committed to protecting the privacy and security of the personal data entrusted to us. This Privacy Policy describes how we collect, use, process, disclose, store, retain and otherwise handle Personal Data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000,the rules framed thereunder, and other applicable laws in India.

By accessing our website, applying for admission, enrolling in our programmes, engaging with our services or otherwise interacting with us, you acknowledge that your Personal Data may be processed in accordance with this Privacy Policy.

Unless the context otherwise requires:

Capitalised terms not defined herein shall have the meaning assigned to them under the DPDP Act.

SCU may collect Personal Data directly from you, your parent or guardian, educational institutions, placement agencies, service providers, publicly available sources or other lawful sources.

SCU processes Personal Data for one or more of the following purposes:

• Processing admissions and enrolment
• Delivering academic programmes
• Conducting examinations and evaluations
• Issuing certificates and transcripts
• Student welfare and counselling
• Placement and internship activities
• Alumni engagement
• Fee collection and accounting
• Scholarships and financial assistance
• Library management
• Campus security
• Hostel administration
• Regulatory reporting
• Website administration
• Recruitment and HR management
• Vendor onboarding
• Customer support
• Compliance with legal obligations
• Prevention of fraud
• Information security
• Internal audits
• Risk management
• Research and analytics
• Service improvement
• Any other lawful purpose communicated to the Data Principal

SCU processes Personal Data only where permitted under the DPDP Act, including:

SCU uses cookies, web beacons, pixels and similar technologies ("Cookies") to improve the functionality, performance and security of its website and digital platforms.

Cookies may be used for the following purposes:

• To enable website functionality
• To remember user preferences
• To authenticate users and maintain secure sessions
• To analyse website traffic and visitor behaviour
• To improve website performance and user experience
• To conduct analytics and statistical reporting
• To detect fraud and enhance cybersecurity
• To provide personalised content and communications, where permitted under applicable law

SCU may disclose Personal Data only where such disclosure is necessary, lawful and proportionate for the purposes described in this Privacy Policy.

Personal Data may be shared with:

• Government authorities, statutory authorities and regulatory bodies
• Courts, tribunals, law enforcement agencies and judicial authorities
• Universities, educational institutions and accreditation bodies
• Examination and certification authorities
• Banks, payment gateways and financial institutions
• Cloud service providers, IT service providers and software vendors
• Professional advisors including advocates, auditors, consultants and tax advisors
• Recruitment agencies and placement partners
• Insurance providers
• Vendors, contractors and consultants engaged by SCU
• Affiliates, subsidiaries and group companies
• Third-party service providers engaged for operational, administrative or educational purposes
• Any other person where disclosure is required or permitted by Applicable Law

SCU shall ensure that all third parties receiving Personal Data are contractually obligated to maintain appropriate confidentiality, security and data protection measures consistent with Applicable Law.

SCU may engage third-party service providers to perform services on its behalf, including but not limited to:

• Cloud hosting services
• Learning Management Systems (LMS)
• Student Information Systems
• ERP providers
• Email and communication platforms
• Payment processing services
• IT infrastructure management
• Website hosting
• Cybersecurity services
• Customer support
• Data analytics
• Recruitment and HR platforms
• Marketing automation tools

Such service providers shall process Personal Data solely in accordance with SCU's documented instructions and applicable contractual obligations. SCU shall take reasonable steps to ensure that such service providers implement appropriate technical and organisational safeguards for the protection of Personal Data.

SCU may transfer Personal Data outside India where such transfer is necessary for academic collaborations, cloud hosting, technology services, international admissions, research collaborations or other legitimate business purposes.

Any cross-border transfer of Personal Data shall be undertaken only in accordance with the Digital Personal Data Protection Act, 2023 and any notifications, restrictions or requirements issued by the Government of India from time to time.

Where appropriate, SCU shall implement suitable contractual, technical and organisational safeguards to ensure that Personal Data transferred outside India receives an adequate level of protection consistent with Applicable Law.

SCU shall retain Personal Data only for as long as is reasonably necessary to fulfil the purposes for which it was collected, including for:

• Admission and academic administration
• Student lifecycle management
• Alumni relations
• Employment administration
• Financial reporting
• Taxation
• Regulatory compliance
• Accreditation requirements
• Contractual obligations
• Internal audits
• Investigation of complaints
• Resolution of disputes
• Establishment, exercise or defence of legal claims

Retention periods shall vary depending upon the nature of the Personal Data, applicable legal requirements and operational needs.

Upon expiry of the applicable retention period, SCU shall securely delete, anonymise or permanently destroy Personal Data unless continued retention is required or permitted under Applicable Law.

SCU is committed to protecting Personal Data through appropriate technical, organisational and administrative safeguards.

Such measures may include:

SCU maintains appropriate procedures for identifying, investigating, reporting and responding to Personal Data breaches.

In the event of an actual or suspected Personal Data breach, SCU shall:

• Promptly investigate the incident
• Assess the nature, scope and impact of the breach
• Take immediate remedial measures to contain and mitigate the breach
• Preserve evidence relating to the incident
• Notify affected individuals and the appropriate regulatory authority, where required under Applicable Law
• Cooperate with competent governmental or regulatory authorities
• Implement corrective measures to prevent recurrence

SCU shall maintain appropriate records of all significant Personal Data breaches in accordance with Applicable Law.

Subject to the provisions of the Digital Personal Data Protection Act, 2023 and other Applicable Laws, every Data Principal shall have the following rights:

Data Principals shall:

• Provide authentic and accurate Personal Data
• Promptly notify SCU of any changes to their Personal Data
• Not impersonate another person while providing Personal Data
• Comply with Applicable Laws while using SCU's services
• Refrain from submitting false, frivolous or misleading requests

SCU reserves the right to reject requests that are manifestly unfounded, excessive or contrary to Applicable Law.

Where SCU processes the Personal Data of a child, such processing shall be carried out strictly in accordance with the Digital Personal Data Protection Act, 2023.

Where required under Applicable Law, SCU shall obtain verifiable consent from the parent or lawful guardian before processing the Personal Data of a child.

SCU shall not undertake any processing that is likely to cause any detrimental effect on the well-being of a child.

SCU shall implement appropriate safeguards while processing Personal Data relating to children.

Where processing is based on consent:

• Consent shall be free, specific, informed, unconditional and unambiguous
• Consent shall be obtained through clear affirmative action
• Data Principals may withdraw consent at any time
• Withdrawal of consent shall be as easy as giving consent

Where required by Applicable Law, SCU may utilise a Consent Manager or any other mechanism recognised under the Digital Personal Data Protection Act, 2023.

Where SCU uses automated systems, artificial intelligence, machine learning or similar technologies, such systems shall be used specifically for marketing and lead generation purposes, including the implementation, optimisation and management of digital marketing campaigns and related customer lead generation activities.

SCU shall ensure that any such automated systems and AI technologies are deployed responsibly and in accordance with all Applicable Laws.

SCU shall implement reasonable technical and organisational safeguards to minimise risks arising from the use of automated processing, artificial intelligence and machine learning in connection with such marketing and lead generation activities.

SCU's website may contain links to third-party websites or applications.

SCU does not control and is not responsible for the privacy practices, content or security of such third-party websites.

Users are encouraged to review the privacy policies of such third parties before providing any Personal Data.

In accordance with the Digital Personal Data Protection Act, 2023 and other Applicable Laws, SCU has designated a Grievance Officer to address concerns relating to the processing of Personal Data.

The Grievance Officer shall acknowledge and address complaints within the timelines prescribed under Applicable Law.

If a Data Principal believes that Personal Data has been processed in violation of Applicable Law or this Privacy Policy, the Data Principal may:

• Submit a complaint to the Grievance Officer using the contact details provided above
• Where available under Applicable Law, approach the Data Protection Board of India or any other competent authority established under the Digital Personal Data Protection Act, 2023

Nothing contained herein shall prejudice any statutory rights available under Applicable Law.

SCU reserves the right to modify, amend or update this Privacy Policy at any time to reflect:

• Changes in Applicable Law
• Regulatory guidance
• Judicial decisions
• Technological developments
• Operational changes
• Improvements in privacy practices

The updated Privacy Policy shall be published on SCU's website and shall become effective from the date specified therein.

Users are encouraged to periodically review this Privacy Policy.

This Privacy Policy shall be governed by and construed in accordance with the laws of India.

If any provision of this Privacy Policy is held to be invalid, illegal or unenforceable by a court of competent jurisdiction, the remaining provisions shall continue in full force and effect.

No failure or delay by SCU in exercising any right under this Privacy Policy shall constitute a waiver of such right.

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your Personal Data, you may contact us at: