Privacy Policy

1. Overview

Eminent Education Consultancy ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have in relation to it.

We are an educational consultancy registered in India, operating from Noida, Uttar Pradesh. We process personal data in accordance with the applicable laws of India, including the Information Technology Act, 2000 and the IT (Amendment) Act, 2008.

2. Information We Collect

We collect personal information through several channels:

a) Information You Provide Directly

• Contact forms & enquiry forms: Name, email address, phone number, message content, country of interest, and NEET status.
• Application forms: Name, email, phone, NEET score, academic background, preferred country, and budget range.
• WhatsApp & phone conversations: Information shared during counseling sessions.
• Email correspondence: Any information you share when emailing us directly.

b) Information Collected Automatically

• IP address: Collected for security, rate-limiting, and fraud prevention purposes.
• Browser & device info: Browser type, operating system, and device type for analytics.
• Pages visited: Which pages you visited, time spent, and navigation paths (via analytics tools).
• Referral source: How you arrived at our website (search engine, social media, direct).

c) Sensitive Information

We do not intentionally collect sensitive personal data such as financial account numbers, biometric data, religious beliefs, or medical records. NEET scores and academic results shared with us are used solely for educational counseling purposes and are never shared without your explicit consent.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• Counseling & Admissions: To provide personalised MBBS abroad counseling, recommend suitable universities, and assist with the application and visa process.
• Communication: To respond to your enquiries, schedule counseling sessions, and follow up on your application status.
• Marketing communications: To send relevant information about universities, admission deadlines, scholarship opportunities, and our services — only if you have not opted out.
• Service improvement: To analyse website usage patterns and improve our content, user experience, and counseling processes.
• Security & fraud prevention: To detect and prevent fraudulent submissions, spam, and abuse of our services.
• Legal compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

4. Data Sharing Policy

We respect your privacy deeply and operate with a strict no-sale policy for personal data. We do not sell, rent, or trade your information to any third party.

However, we may share your data in the following limited circumstances:

• Partner Universities (with your consent): When you agree to apply to a specific university, we share your academic profile and application documents with that institution only. This sharing is necessary to process your admission.
• Visa & Documentation Agents: Licensed visa agents and document attestation services who assist your application process under strict confidentiality agreements.
• Technology service providers: Email service providers, website hosting companies, and analytics tools — all operating under data processing agreements with us.
• Legal requirements: If required by law, court order, or government authority, we may disclose information as legally mandated. We will notify you of such disclosures where legally permitted.

5. Data Security

We implement robust technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction:

• SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using SSL.
• Prepared SQL statements: All database queries use parameterised prepared statements to prevent SQL injection attacks.
• Input sanitization: All user inputs are sanitized and validated server-side before processing.
• Access controls: Access to the admin panel and customer data is restricted to authorised personnel only, protected by secure password hashing (bcrypt).
• Rate limiting: Form submissions are rate-limited by IP address to prevent automated abuse.
• Regular security reviews: Our technical team reviews security practices periodically.

While we take every reasonable precaution, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security, but we commit to promptly notifying affected users in the event of a data breach.

6. Cookies & Tracking

Our website uses cookies to improve your browsing experience. Cookies are small text files stored on your device.

We use the following types of cookies:

• Essential cookies: Required for the website to function correctly (e.g., session management, form submission). These cannot be disabled.
• Preference cookies: Store your preferences such as cookie consent choice.
• Analytics cookies (if enabled): Help us understand how visitors interact with our website using anonymised, aggregated data. No personally identifiable information is included.

You can control or disable cookies through your browser settings. Disabling essential cookies may affect the functionality of our website. Our cookie consent banner allows you to accept or decline non-essential cookies.

7. Your Rights

You have the following rights regarding your personal data held by us:

• Right of Access: Request a copy of all personal data we hold about you.
• Right to Rectification: Request correction of any inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Right to Withdraw Consent: Withdraw consent for marketing communications at any time by replying "STOP" to any message or emailing us.
• Right to Restriction: Request that we limit the processing of your personal data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format (CSV) upon request.

To exercise any of these rights, please contact us at privacy@eminentmbbs.com. We will respond within 30 days of receiving your request.

8. Data Retention

We retain your personal data only for as long as necessary for the purposes outlined in this policy:

• Lead and enquiry data: Retained for up to 3 years from last interaction, to allow us to assist you if you re-enquire.
• Active student records: Retained for the duration of your MBBS program plus 2 years.
• IP and security logs: Retained for up to 12 months for fraud prevention.
• Marketing preferences: Retained until you withdraw consent or request deletion.

After the applicable retention period, data is securely deleted or anonymised. You may request early deletion of your data at any time by contacting us.

9. Third-Party Links

Our website may contain links to third-party websites such as partner university websites, social media platforms, and travel booking services. We are not responsible for the privacy practices or content of these external sites.

We encourage you to read the privacy policy of every website you visit. The inclusion of a link on our website does not imply endorsement of the linked site's privacy practices.

10. Children's Privacy

Our services are designed for students aged 17 and above (the minimum age for MBBS admissions abroad). We do not knowingly collect personal information from individuals under the age of 17 without verifiable parental or guardian consent.

If you are a parent or guardian and believe your child under 17 has submitted personal information to us without your consent, please contact us immediately and we will delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Post a notice on our website homepage for 30 days.
• Notify active users via email where feasible.

Continued use of our services after the effective date of a revised policy constitutes your acceptance of the updated terms. We encourage you to review this policy periodically.

12. Contact Us Regarding Privacy

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Officer:

If you are not satisfied with our response to your privacy query, you have the right to escalate the matter to the relevant data protection authority in India.