Effective date: 9 October 2026 · Last updated: 9 October 2026
This policy explains how ACCOFIN ACADEMY processes personal data in line with India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made under it, and, for visitors from the European Economic Area or UK, the principles of the GDPR.
1. Who we are
ACCOFIN ACADEMY, Pune, Maharashtra (“ACCOFIN”, “we”, “us”), is the Data Fiduciary (data controller) for personal data collected through www.accofinacademy.com and in connection with our programmes. Contact: accofinacademy@gmail.com.
2. Personal data we collect
a) Data you give us
- Enquiry form: full name, mobile number, course of interest and an optional message (for example, preferred batch).
- WhatsApp, calls and email: the details you choose to share when you contact us.
- Admission (if you enrol): details required for admission, fee receipts and certification, as set out in the admission form.
b) Data collected automatically
- Technical data when you submit a form: IP address, browser/device type (user agent), page from which you enquired and the date and time — used to prevent spam and abuse and to keep an audit trail of your consent.
- Analytics data (only if Google Analytics is enabled): pages visited, approximate location (city level), device and referral source, collected in aggregated form with IP anonymisation.
We do not ask for sensitive information such as Aadhaar, bank or card details, passwords or health data through the Website. Please do not include such information in the message field.
3. How we use your data
- To respond to your enquiry and share course details, fees, batch timings and guidance by call, WhatsApp, SMS or email;
- To process admissions, conduct classes and assessments, issue certificates and provide career and placement support to enrolled Learners;
- To keep records of enquiries and follow-ups;
- To protect the Website against spam, fraud and misuse (for example, rate limiting);
- To understand how the Website is used and improve it (aggregated analytics);
- To comply with legal, tax and regulatory obligations.
We do not sell, rent or trade your personal data, and we do not use it for automated decision-making that produces legal effects for you.
4. Consent & legal basis
We process enquiry data on the basis of your consent, which you give by ticking the consent box on our form or by contacting us directly. For enrolled Learners, we also process data for the legitimate purposes of providing the programme you have requested and complying with law, as permitted under Section 7 of the DPDP Act.
You may withdraw consent at any time by emailing accofinacademy@gmail.com or replying “STOP” on WhatsApp. Withdrawal is as easy as giving consent; it does not affect processing already carried out, and we will stop contacting you about the enquiry.
5. Children’s data
Some of our learners (for example, 11th–12th Commerce students) may be under 18. Under the DPDP Act, personal data of a child is processed only with the verifiable consent of a parent or lawful guardian. If you are under 18, please submit an enquiry only with your parent/guardian’s knowledge and consent; we may ask to speak with your parent/guardian before admission. We do not track, profile or target advertising at children. If you believe a child has submitted data without consent, contact us and we will delete it.
6. Sharing & data processors
We share personal data only as needed, with:
- Service providers (Data Processors) who help us operate — for example, our web hosting provider, email service, and (if enabled) Google Analytics — under obligations to protect your data and use it only on our instructions;
- WhatsApp (Meta), when you choose to continue your enquiry on WhatsApp; messages are then also subject to WhatsApp’s own privacy policy;
- Prospective employers, only for enrolled Learners who opt in to placement support, and only the profile/resume details the Learner has agreed to share;
- Authorities, where required by law or to protect our legal rights.
7. Cross-border transfer
Some service providers (such as WhatsApp, Google or cloud/email providers) may store or process data outside India. Such transfers are made in accordance with the DPDP Act and any restrictions notified by the Government of India, and with appropriate safeguards.
8. Data retention
- Enquiries that do not lead to enrolment: retained for up to 24 months from your last interaction, then deleted or anonymised — or earlier if you ask us to erase them.
- Enrolled Learners: admission, fee and certification records are retained for as long as required for certificate verification and by applicable tax and accounting laws (generally up to 8 years).
- Technical logs: retained for a short period for security purposes.
9. Security
We use reasonable security safeguards, including HTTPS encryption, restricted admin access with strong passwords, regular backups, server firewalls, spam protection and access only on a need-to-know basis. No method of transmission or storage is completely secure, but we work to protect your data and will notify affected users and the Data Protection Board of India of a personal data breach as required by law.
10. Cookies & analytics
- Essential cookies: a security cookie (
csrftoken) protects our forms from forgery, and a session cookie may be set when you submit a form. These are necessary for the Website to work. - Analytics cookies: if Google Analytics is enabled, it sets cookies (such as
_ga) to measure visits in aggregate. You can block these through your browser settings or the Google Analytics opt-out add-on.
We do not use advertising or cross-site tracking cookies.
11. Your rights
As a Data Principal under the DPDP Act (and, where applicable, a data subject under the GDPR), you have the right to:
- Access a summary of the personal data we hold about you and how it is processed;
- Correct, complete or update inaccurate or incomplete data;
- Erase your data where it is no longer needed for the purpose or you withdraw consent (subject to legal retention requirements);
- Withdraw consent at any time;
- Grievance redressal through our Grievance Officer;
- Nominate another person to exercise your rights in the event of death or incapacity;
- Where the GDPR applies: object to processing, restrict processing and request data portability.
To exercise these rights, email accofinacademy@gmail.com with the subject “Data request”. We may need to verify your identity (for example, by confirming the mobile number you used). We aim to respond within 30 days.
12. Grievance officer
Grievance Officer — ACCOFIN ACADEMY
Pune, Maharashtra
Email: accofinacademy@gmail.com
Phone: +91 87673 72312
If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India after exhausting our grievance process, as provided under the DPDP Act.
13. Changes to this policy
We may update this policy from time to time. The latest version will always be available on this page with the “Last updated” date. Where changes are significant, we will take reasonable steps to inform you.