Privacy Policy

1. Introduction

MDM MADHUBANI TECHNOLOGIES PRIVATE LIMITED (together with its subsidiaries and international affiliates, hereinafter “Gradus”, “we”, “our”, “us” or “the Company”) is committed to protecting the privacy, confidentiality, and security of all personal information shared with us by students, educational institutions, partners, and users. In doing so, it is essential that people’s privacy is protected through the lawful and appropriate means for handling the personal data. Therefore, we have implemented this privacy policy (hereinafter referred to as “policy”).

This Privacy Policy explains how Gradus collects, uses, stores, processes, and protects data in accordance with applicable lndian laws, including the Information Technology Act, 2000 and related rules.

2. Aim

This policy aims to protect personal data of the various users connected to our organization. This policy is aimed at providing individuals notice of the basic principles by which the company processes the personal data of individuals (“Personal Data/Personal information”) who visits, uses, deals with and/or transacts through the website/platform and includes a guest user and browser (hereinafter ‘you’, ‘user’).

3. Information Collection

We collect the following personal information from users who express interest in our services, in the following categories of data:

3.1 Student Information

• Name, contact details (phone/email/address)
• Academic Records and Educational Background
• Attendance and performance data
• Placement related details

3.2 Institutional Information

• College name, representative details
• Enrollment verification information
• Campus engagement and seminar participation data

3.3 Technical Data

• Device information
• IP address, login activity
• Website usage analytics

4. Special Categories of Personal Data

Special Category of personal data includes details about your race or ethnicity, religious or philosophical belief, political opinions, trade union memberships, information about your health and genetic and biometric data.

We do not collect or process any special or sensitive Personal Data.

Should we specifically require “special” or “sensitive” Personal Data in connection with one or more of the uses described below, we will request your explicit consent to use the data in accordance with this policy and/or in the ways described at the point where you were asked to disclose the data.

Other legal basis for our processing of special category data may include, as permitted by applicable law, for scientific research, for employment, social security or social protection law, for reasons of substantial public interest, or as necessary for the establishment, exercise or defence of legal claims. If you voluntarily share with us or post/upload any “special” or “sensitive” Personal Data to this website for any other reason, you consent that we may use such data in accordance with applicable law and this policy.

5. PURPOSE OF DATA COLLECTION

We collects and processes data only for legitimate educational and placement- related purposes including:

1. Delivering training programs and course modules
2. Conducting assessments, mock interviews, and placement activities
3. Providing academic support and career counselling
4. Processing refunds (where applicable under Gradus policies)
5. Communicating important updates and program information
6. Ensuring compliance with legal and contractual obligations

6. Data Sharing and Disclosure

We follows strict confidentiality norms:

6.1 No Unauthorized Disclosure

We shall not sell, rent, or disclose student data to any third party without prior written consent, except where required by law.

6.2 Sharing with Partner Colleges

Partner institutions may share student data with Gradus solely for:

• Training coordination
• Placement communication
• Academic and program delivery purposes

6.3 Legal Disclosure

We may disclose information if required under:

• Court orders
• Government authority requests
• Applicable laws and regulations

7. Data Security Measures

We maintain robust security practices including:

1. Secure storage systems and restricted access
2. Encryption of sensitive personal data
3. Confidentiality obligations for employees and agents
4. Regular monitoring against unauthorized access, misuse, or breaches

Any unauthorized sharing against constitutes a material breach and may invite civil/criminal liability.

8. Confidentiality & Intellectual Property

All training content, systems, teaching techniques, academic modules, and proprietary material remain the exclusive intellectual property of Gradus.

No institution, student, or third party shall:

1. Copy, reproduce, distribute, or transmit Gradus content
2. Create derivative works
3. Reverse engineer systems or processes
4. Use information to build competing services

Violation may attract penalties under the Copyright Act, 1957 and IT Act, 2000

9. Retention of Personal Data

We retain your personal data, not longer than necessary for the purposes for which it was collected. The length of time to retain Personal Data depends on the purposes for which we collect and use it and/or as may be required to comply with applicable laws, to establish, exercise, or defend our legal rights.

The users can exercise their rights enumerated herein. Also, if in case required to extend the period of retention of such data, we shall obtain your consent for the same. Further, we may also dispose the data prior to completion of the period of retention, if the purpose for which it was collected is exhausted.

10. Procedures

We have taken the following steps to protect the Personal Data of relevant users, which it holds or to which it has access:

1. it appoints or employs employees with specific responsibilities for the processing and controlling of data with comprehensive reviewing and auditing of its data protection systems and procedures and overviewing the effectiveness and integrity of all the data that must be protected.
2. there are clear lines of responsibility and accountability for these different roles.
3. it provides its employees with information and training to make them aware of the importance of protecting Personal Data, to teach them how to do this, and to understand how to treat information confidentially
4. it can account for all Personal Data it holds, where it comes from, who it is shared with and also who it might be shared with
5. it carries out risk assessments as part of its reviewing activities to identify any vulnerabilities in its Personal Data handling and processing, and to take measures to reduce the risks of mishandling and potential breaches of data security. The procedure includes an assessment of the impact of both use and potential misuse of Personal Data in and by the Company
6. it recognises the importance of seeking individuals’ consent for obtaining, recording, using, sharing, storing and retaining their Personal Data, and regularly reviews its procedures for doing so, including the audit trails that are needed and are followed for all consent decisions. The Company understands that consent must be freely given, specific, informed and unambiguous. The Company will seek consent on a specific and individual basis where appropriate. Full information will be given regarding the activities about which consent is sought. Relevant individuals have the absolute and unimpeded right to withdraw that consent at any time
7. it has the appropriate mechanisms for detecting, reporting and investigating suspected or actual Personal Data breaches, including security breaches. It is aware of its duty to report significant breaches that cause significant harm to the affected individuals to the relevant supervisory authority, and is aware of the possible consequences.

11. Breach and Penalty

Any intentional, wilful, or reckless misuse or disclosure of confidential information of student data may result in:

1. Immediate termination of services or MoU
2. Injunctive relief
3. Civil and criminal proceedings
4. Penalty up to Rs. 1,00,000/-
5. Compensation for proven damages, litigation costs and losses.

Where a data breach is likely to result in a risk to the rights and freedoms of individuals, it will be reported to the relevant supervisory authority within 72 hours of the Company becoming aware of it and may be reported in more than one instalment. Individuals will be informed directly in the event that the breach is likely to result in a high risk to the rights and freedoms of that individual. If the breach is sufficient to warrant notification to the public, the Company will do so without undue delay.

12. Cookies

Cookies are small files that a site or its services provider transfers to your computer’s hard drive through your Web browser (if you allow) that enables the site’s or service provider’s systems to recognise your browser and capture and remember certain information. They used to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved services. We also use cookies to help us compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future.

We use cookies to understand and save user’s preferences for future visits.

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. If you disable cookies off, some features will be disabled. It won’t affect the users experience that make your site experience more efficient and some of our services will not function properly.

13. Update to this Policy

We may revise this privacy policy periodically. Updated versions will be made available through official communication or Gradus platform.

14. Refund Policy

1. Learner/User may claim a refund for the amount paid towards the Program only if the refund request is raised within 48 hours of making the payment, by visiting gradus.live and submitting duly filled refund form via the gradus.live/contact section under profile. Processing fee of 20% will be levied while processing the refund. If a Learner/User has paid less than Rs. 1000 while registering for the program, the Learner/User shall not refund in such case.
2. Learner shall not be eligible for any refund under any circumstances if refund request is raised after the expiry of 48 hours from the date of payment. This is also applicable for those Learners/Users who could not complete the payment or discontinue the program midway.
3. All refund request must be submitted in the prescribed format and/or through email at contact@gradusindia.in. Upon successful verification and approval by Gradus, the refund shall be processed within 7 working days from the date of approval.