ScienceUtsav Privacy Policy
Last Updated: May 2026
1.1 This Privacy Policy explains how SCIENCEUTSAV EDUCATIONAL SERVICES PRIVATE LIMITED, a Private Limited Company with its registered office at Floor No.: 1st, Floor Building No./Flat No.: 11 Road/Street: 19th A Main Road, Nearby Landmark: Venkataramanaswamy Temple, Locality/Sub Locality: J P Nagar 2nd Phase Marenahalli City/Town/Village: Bengaluru, District: Bengaluru Urban, State: Karnataka, PIN Code: 560078 (29ABACS9853P1ZC), which operates the ScienceUtsav brand (“ScienceUtsav”, “we”, “us” and “our”), collects, uses, shares, stores and protects personal data. Under Indian data-protection law we are the “Data Fiduciary” for the personal data described in this Policy, except where section 9.2 explains that we act as a “Data Processor” on behalf of a school or partner.
1.2 This Policy applies to personal data we handle through:
1.3 It applies to parents, guardians, students, teachers, schools and institutional representatives, NGO and CSR partners, resellers, distributors, franchise and activity-centre applicants, vendors and website visitors.
1.4 In this Policy, “personal data” means any data about an individual who can be identified by or in relation to that data. A “child” means any person under 18 years of age. A reference to a child’s “parent” includes the child’s lawful guardian, and, for a person with a disability, that person’s lawful guardian.
1.5 We handle personal data in line with the Information Technology Act, 2000 and the rules made under it (including the Reasonable Security Practices and Procedures and Sensitive Personal Data or Information Rules, 2011), the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as their provisions come into force, and other applicable Indian laws.
1.6 A school agreement, partner agreement, consent form or programme-specific notice may contain additional privacy terms. If it conflicts with this Policy, the more specific term applies to that activity, to the extent the law permits.
2.1 Information you give us. Depending on how you interact with us, this may include:
2.2 Information collected automatically. When you use our website or digital services, we may collect your IP address, browser type, device type and identifiers, operating system, referring page, pages viewed, time spent, links clicked, approximate location derived from your IP address, date and time of access, login activity, activity on our learning platforms, and cookie or similar identifiers (see section 7).
2.3 Information from others. We may receive personal data from a parent or guardian, school, NGO or CSR partner, event organiser, reseller, distributor, payment provider, delivery partner, or a social-media platform (for example, when you message us on WhatsApp, Instagram or LinkedIn). If you give us another person’s personal data, you confirm that you have the authority and any consent needed to do so.
2.4 What is required and what is optional. Some details, such as your name and contact details for an enquiry or order, or a parent’s details for a child’s registration, are needed to provide the service you asked for. If you do not provide them, we may not be able to help you. Everything else is optional.
We use personal data only for the following purposes:
We process personal data on the basis of your consent (or, for a child, a parent’s consent), or for other “legitimate uses” that the law permits. Examples include where you voluntarily give us your details for a stated purpose, such as an enquiry or an order, and do not object to that use; where we must comply with the law; and where we must respond to a medical emergency or a threat to someone’s safety. We do not sell personal data, and we do not use personal data to make automated decisions that have legal or similarly significant effects on you.
4.1 Where we rely on consent, we will tell you what personal data we are asking for and why. Your consent is voluntary and specific to that purpose.
4.2 You may withdraw consent at any time, and it will be as easy to withdraw as it was to give. Use the unsubscribe link in a message, your account settings where available, or contact us using the details in section 17.
4.3 Withdrawal does not affect processing that was lawful before you withdrew. It may limit our ability to provide a requested service. After you withdraw, we will stop the processing that depended on that consent and, within a reasonable time, delete the related personal data and ask our service providers to do the same, unless the law requires us to keep it.
4.4 Consent for a child must be given, and can be withdrawn, by the child’s parent.
5.1 ScienceUtsav provides educational services to children, so we treat children’s personal data with particular care. In this Policy, a child is anyone under 18.
5.2 Parental consent. Before we process a child’s personal data, for example to create an LMS account or enrol a child in a programme, we obtain verifiable consent from the child’s parent. We take reasonable steps to check that the adult giving consent is the child’s parent, using the methods the law permits. Where a programme runs through a school, the school arranges enrolment as set out in our agreement with it.
5.3 Limits on what we do with children’s data. We collect only the child-related data reasonably needed for enrolment, age-appropriate delivery, safety, learning support, reporting and administration. We do not track or behaviourally monitor children, and we do not direct targeted advertising at them. Learning-platform activity, such as logins, progress, assessment results and time spent, is used only to deliver, support, secure and improve the educational service and to report to the child’s parent and school. We do not sell children’s personal data. We send promotional messages only to parents and other adults, not to children.
5.4 Parents’ choices. A parent can ask to see, correct or delete a child’s personal data, or withdraw consent, at any time (see section 14). Withdrawing consent or deleting a child’s account may end the child’s access to a programme or platform.
5.5 If a child’s data was provided without authority. If you believe a child’s personal data was given to us without proper authority or consent, please contact us promptly. We will review the request and delete or restrict the data where the law requires, subject to any lawful retention obligation.
6.1 We may photograph or record programmes, classes, workshops, camps, festivals, competitions, parties and events for safeguarding, quality, training, reporting and promotion. Promotional use may include our website, social-media pages, brochures, presentations and reports.
6.2 We use an identifiable image, voice, work or testimonial of a child for promotion only with the consent of the child’s parent. Where a school arranges parental consent for a programme it runs, we rely on the consent the school confirms to us. Consent to promotional use is optional. Declining it will not prevent participation, unless recording is an essential part of a specific event and we tell you so in advance.
6.3 We use testimonials, and the names and logos of schools and other institutions, only with their permission.
6.4 You can withdraw consent to promotional use at any time by contacting us. We will stop new use and remove the material from our websites and social-media pages within 30 days. We cannot recall printed or distributed material published lawfully before we received your request, but we will not reuse it.
6.5 If you do not want your child photographed during a session, please tell the facilitator or contact us before the session.
7.1 Cookies are small files placed on your device. We and our service providers use cookies and similar technologies for the purposes below.
Category | What it is used for | Examples |
|---|---|---|
Strictly necessary | Keeping the website working and secure, and remembering your preferences and login. | Session and security cookies. |
Analytics and tag management | Understanding traffic, performance and how visitors use the website. | Google Tag Manager, and measurement tags deployed through it. |
Embedded media | Playing videos embedded on our pages. The provider may set cookies when the video loads or plays. | YouTube. |
Social and campaign | Connecting to our social-media pages and, where we use them, measuring the results of our campaigns. | Links to Instagram, Facebook, X, LinkedIn and YouTube. |
7.2 Where the law requires, we ask for your consent before placing non-essential cookies, through a banner or preference tool on our website. You can also control cookies through your browser or device settings. Blocking some cookies may affect how the website works.
7.3 We do not use children’s personal data for tracking, behavioural monitoring or targeted advertising (see section 5.3).
8.1 Service messages. We send messages that are necessary for what you asked for, such as order and delivery updates, class schedules, certificates, and account and security notices. You cannot opt out of these while you use the service.
8.2 Enquiries. When you submit an enquiry form, you ask us to contact you by phone, WhatsApp or email about your enquiry. We aim to respond within 24 hours.
8.3 Marketing. We send marketing emails, SMS, WhatsApp messages and calls only where you have agreed or the law permits, and we follow the rules on commercial communications, including the Do Not Disturb preferences you have registered.
8.4 Opting out. You can stop marketing at any time by using the unsubscribe link, replying STOP where available, or contacting us. We will act on your request promptly, and we will keep a minimal record (such as your email address) so that we do not contact you again.
9.1 We do not sell or rent personal data. We share it only as reasonably necessary, with:
9.2 Schools and partners. For school and CSR or NGO programmes, we share student-level information such as attendance, participation, assessment results and certificates with the school or partner running the programme. For data we collect for our own purposes, such as LMS accounts and orders, we are the Data Fiduciary. Where a school or partner gives us student data and instructs us how to use it for its own purposes, that school or partner is the Data Fiduciary and we act as its Data Processor. Our agreement with the school or partner sets out which applies.
9.3 Our service providers. Service providers may process personal data only for agreed purposes, under contract, and must protect it appropriately.
9.4 Aggregated information. We may share or publish aggregated or de-identified information that does not reasonably identify an individual, for example in impact reports.
Payments are processed by third-party payment gateways, banks and UPI providers. We may receive transaction identifiers, payment status and limited billing information. Card details, UPI PINs and net-banking credentials are generally handled directly by the payment provider, and we do not store them. Your use of a payment provider is also governed by that provider’s privacy notice and terms.
Some of our service providers, such as cloud, communications, analytics and video providers, may process or store personal data outside India. We may transfer personal data to any country or territory outside India except those the Government of India restricts by notification. Where we do, we take reasonable steps to use appropriate contractual, technical and organisational safeguards. You can ask us where your personal data is processed by contacting us using the details in section 17.
We keep personal data only for as long as it is needed for the purpose it was collected, and for as long as the law requires. The periods below apply unless you ask us to delete data earlier and the law allows it, or a longer period is required by law or a contract. When the period ends, we delete or anonymise the data, or securely isolate it from further use.
Type of data | How long we keep it |
|---|---|
Enquiries that do not lead to an order or programme | 24 months after our last interaction with you. |
Account and LMS data, and student learning records | While the account is active or the programme runs, and for 3 years afterwards so that certificates and records can be verified. |
Orders, invoices, tax and accounting records | For the period required by tax and company law, which is generally between six and eight years. |
Marketing subscriptions | Until you unsubscribe or withdraw consent. We then keep a minimal record so that we honour your opt-out. |
Photographs, videos and testimonials used for promotion | Until you withdraw consent or the material is no longer in use. See section 6. |
Emergency contact, allergy and medical information for camps and events | For 90 days after the programme ends, unless an incident or claim requires us to keep it longer. |
Website, security and technical logs | For at least one year, as the law requires, and then deleted or anonymised. |
Records needed for a complaint, dispute or legal claim | Until the matter is resolved and the time allowed for bringing a claim has ended. |
13.1 We use reasonable administrative, technical and physical safeguards designed to protect personal data from unauthorised access, alteration, disclosure, loss or destruction. These include, where appropriate, access controls, protected passwords, encryption in transit, secure hosting, backups, activity logs, confidentiality obligations for staff and facilitators, and contracts with service providers.
13.2 No website, transmission or storage system is completely secure, so we cannot guarantee absolute security. Please keep your login credentials confidential, do not share them except with a parent, guardian or authorised institutional administrator where the service permits, and tell us promptly if you suspect unauthorised use.
13.3 If a personal data breach affects you, we will notify the Data Protection Board of India and each affected person (or, for a child, the child’s parent) as the law requires, and report to CERT-In where applicable. Our notice will explain what happened, the likely consequences, what we are doing about it, and how to contact us.
14.1 Subject to applicable law, you (or a parent, on behalf of a child) have the right to:
14.2 To make a request, email or write to us using the details in section 17. Please include your name, your contact details, your relationship to the child if the request concerns a child, and enough information for us to identify the interaction and understand your request.
14.3 To protect you and prevent unauthorised disclosure, we may verify your identity and, for a child, your authority as parent, before acting on a request. Some requests may be limited where the law, a contract, safety or legal claims require us to keep or use the data.
14.4 We will acknowledge your request within 48 hours and aim to resolve it within one month. If you are not satisfied with our response, you may complain to the Data Protection Board of India after you have used our grievance process in section 17.
Our website and messages may link to websites, applications, payment services and social-media platforms that we do not control, such as YouTube, Instagram, Facebook, X and LinkedIn. Their privacy practices are governed by their own policies, and we are not responsible for them.
We may update this Policy when our services, technology, business practices or legal obligations change. We will publish the updated version on this page with a new “Last Updated” date. For material changes, we will also give notice on our website and, where we hold your email address, by email, and where the law requires it, we will ask for your consent again. Earlier versions are available on request.
For questions, privacy requests or grievances, please contact us using the details below. We will acknowledge your message within 48 hours and aim to resolve it within one month. You can ask for this Policy in English or in any language listed in the Eighth Schedule to the Constitution of India.
Contact point | Details |
|---|---|
Data Fiduciary | SCIENCEUTSAV EDUCATIONAL SERVICES PRIVATE LIMITED, operating the ScienceUtsav brand |
Registered office | Floor No.: 1st Floor Building No./Flat No.: 11 Road/Street: 19th A Main Road Nearby Landmark: Venkataramanaswamy Temple Locality/Sub Locality: J P Nagar 2nd Phase Marenahalli City/Town/Village: Bengaluru District: Bengaluru Urban State: Karnataka PIN Code: 560078 |
Registration details | 29ABACS9853P1ZC |
Phone | +91 81051 62640 |
Call or WhatsApp (enquiries) | +91 90362 04433 |
Website | https://www.scienceutsav.com/ |
Head office (Bengaluru) | 25/1, V K J S Nilaya, 9th Cross, 19th A Main, JP Nagar 2nd Phase, Bengaluru 560078, Karnataka, India |
Mumbai office | LG 643, Thakur Compound, Asalpha Village, Ghatkopar (W), Mumbai 400084, Maharashtra, India |
Pune office | Sno 14/1/2, Sai Chetna Residency, Thite Wasti, Kharadi, Pune 411014, Maharashtra, India |
Mangalore office | Vinay villa Makermasti Office 2nd floor Opposite to Shivadeep residency Beside of land traders Kadri Shivabag - 575002 |