Privacy Policy

1. Introduction

Christian Institute of Management (CIM) is committed to protecting the privacy and personal data of all individuals who interact with our organisation — including students, participants, donors, beneficiaries, and website visitors. This Privacy Policy explains what data we collect, how we use it, and your rights under the Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable Indian laws.

2. Data We Collect

We may collect the following categories of personal data:

• Identity Data: Full name, date of birth, gender.
• Contact Data: Email address, postal address, phone number.
• Financial Data: Transaction reference numbers. (We do NOT store card or bank account details.)
• Programme Data: Course/programme registrations, academic records, correspondence.
• Technical Data: IP address, browser type, pages visited, and cookies (see Section 7).
• Donation Data: Donor name, amount, purpose of donation, and transaction confirmation.

3. How We Collect Data

We collect personal data through:

• Registration and application forms (online and offline).
• Payment transactions via Razorpay Payment Gateway.
• Email and other correspondence.
• Our website through cookies and analytics tools.

4. How We Use Your Data

CIM uses your personal data for the following purposes:

• Processing registrations, course enrolments, and donations.
• Sending payment confirmations, receipts, and acknowledgements.
• Delivering study materials, publications, and programme content.
• Communicating updates about events, programmes, and publications relevant to you.
• Improving our website, services, and user experience.
• Complying with legal and regulatory obligations.

We will not use your data for purposes beyond the above without your explicit consent.

5. Sharing of Personal Data

CIM does not sell or rent your personal data to third parties. However, we may share your data with:

• Razorpay Payment Gateway: To process your transactions securely. Razorpay's Privacy Policy governs their use of your data.
• Postal / Courier Services: For dispatching study materials, receipts, or publications.
• Legal Authorities: Where required by law, court order, or regulatory requirement.

All third parties with whom we share data are required to maintain the confidentiality and security of your information.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. Typically:

• Transaction and financial records: Retained for a minimum of 7 years as required by Indian financial regulations.
• Programme and academic records: Retained for the duration of the programme and up to 5 years thereafter.
• Marketing communication preferences: Until you withdraw consent.

7. Cookies

Our website uses cookies to improve your browsing experience. Cookies are small text files placed on your device. We use:

• Essential Cookies: Required for the website to function correctly.
• Analytics Cookies: To understand how visitors use our site (e.g., Google Analytics). These are anonymised.

You may adjust your browser settings to decline cookies, though this may affect certain features of the website.

8. Data Security

All payments on our website are protected with SSL/TLS encryption. We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. However, no internet transmission is entirely secure, and we encourage you to use a secure internet connection when transacting online.

9. Your Rights Under DPDPA 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the right to:

• Access: Request a summary of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your data where it is no longer required.
• Grievance Redressal: Raise a complaint with our Grievance Officer (see Section 11).
• Nominate: Nominate another individual to exercise your rights in the event of death or incapacity.

To exercise any of these rights, please contact us at operations@cimindia.in. We will respond within 30 days of receipt of your request.

10. Children's Privacy

Our services are primarily intended for adults. We do not knowingly collect personal data from individuals under the age of 18 without verifiable parental consent. If you believe we have inadvertently collected data from a minor, please contact us immediately.

11. Grievance Officer

In accordance with the Information Technology Act, 2000, and the DPDPA 2023, the details of our Grievance Officer are:

12. Changes to this Policy

CIM may update this Privacy Policy periodically to reflect changes in law or our practices. The updated policy will be posted on our website with a revised effective date. We encourage you to review this page periodically.