Introduction
This Privacy Policy describes how THEORLY EdTech Private Limited ("THEORLY", "we", "us", or "our") collects, uses, stores, and protects personal information obtained through our website, platform, and institutional partnership forms. It applies to students, parents, legal guardians, school administrators, and any other individuals interacting with THEORLY.
THEORLY is committed to protecting the privacy of all users, particularly children, and operates in compliance with the Information Technology Act, 2000 (as amended) and other applicable Indian data protection laws.
By using the THEORLY platform or submitting information to us, you acknowledge that you have read and understood this Privacy Policy.
Information We Collect
We collect information necessary to provide our educational services and communicate with users. This includes data provided directly, automatically collected data, and information submitted by partner schools.
2.1 Information Provided Directly
When users register, request information, or engage with THEORLY, we may collect:
- Name and contact details – full name, email address, phone number, and role (e.g., parent, school administrator).
- School information – institution name, location, board affiliation, and related details submitted through partnership forms.
- Student inquiries – information provided when a student or parent contacts us directly.
2.2 Automatically Collected Data
When you visit the THEORLY website, certain technical information may be collected automatically, including:
- IP address
- Browser type and version
- Device information
- Pages visited and time spent on the site
- Referring website addresses
2.3 School‑Submitted Data
When a partner school provides student enrolment information or other institutional data for programme coordination, that data is treated as confidential and used solely for the purposes outlined in the School Partnership Agreement.
How We Use Information
THEORLY uses the information we collect for the following purposes:
- Account creation and management – to register users, create profiles, and provide access to courses.
- Course access and certification – to deliver educational content, track progress, and issue completion certificates.
- Institutional coordination – to communicate with partner schools regarding programme implementation, student participation, and outcomes.
- Platform improvement – to analyse usage patterns, enhance user experience, and develop new features.
- Communication – to respond to enquiries, send administrative updates, and provide information about our services.
Legal Basis for Processing
THEORLY processes personal information in accordance with Indian law, including the Information Technology Act, 2000 (as amended). Our legal bases for processing include:
- Consent – where you have provided explicit consent (e.g., for direct communication).
- Contractual necessity – to fulfil our obligations under a School Partnership Agreement or terms of service.
- Legitimate interest – to operate, improve, and secure our platform, provided such interests do not override your fundamental rights.
- Compliance with law – to meet legal and regulatory obligations.
Data Sharing & Disclosure
THEORLY does not sell, rent, or trade personal or institutional data. We may share information only in the following limited circumstances:
- Service providers – with trusted third‑party vendors who assist in platform operations (e.g., hosting, analytics, email delivery) and are bound by confidentiality obligations.
- Partner schools – where necessary for programme coordination (e.g., confirming student enrolment or progress) and only to the extent permitted by the School Partnership Agreement.
- Legal requirements – if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of THEORLY, its users, or others.
Data Retention
We retain personal information only as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. When information is no longer needed, we securely delete or anonymise it.
School‑related data may be retained in accordance with the terms of the School Partnership Agreement. Users may request deletion of their data as described in Section 11 (Your Rights).
Data Security
THEORLY implements reasonable technical and organisational safeguards to protect information against unauthorised access, alteration, disclosure, or destruction. These measures include secure servers, access controls, and routine security reviews.
Children's Privacy
THEORLY does not knowingly collect personal information directly from children under the age of 18 without verifiable parental consent. Student data is typically submitted by schools or parents as part of institutional partnership enquiries.
If we become aware that personal information has been inadvertently collected directly from a child without proper consent, we will take steps to delete it promptly.
School Partnership Data
When schools provide data about their students or staff, that information is used exclusively for educational coordination, programme delivery, and certification. School administrators may have limited access to certain data within the scope of the partnership. THEORLY does not use such data for any purpose other than those specified in the School Partnership Agreement.
Cookies & Analytics
THEORLY may use cookies and similar technologies to enhance user experience and collect anonymous usage data. Cookies are small text files stored on your device. We use:
- Session cookies – to maintain your login state during a browsing session.
- Analytics cookies – to understand how visitors interact with our site (e.g., pages visited, time spent).
You may disable cookies through your browser settings; however, some features of the site may not function properly. THEORLY does not use cookies for targeted advertising.
Your Rights
Under applicable Indian law, individuals have certain rights regarding their personal information:
- Right to access – request a copy of the data we hold about you.
- Right to correction – request that inaccurate or incomplete information be corrected.
- Right to deletion – request deletion of your data, subject to legal or contractual retention requirements.
- Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.
To exercise these rights, please contact us at privacy@theorly.in. We will respond within a reasonable timeframe.
Data Transfers
THEORLY operates primarily in India. If personal information is transferred outside India (e.g., to service providers), we ensure that appropriate safeguards are in place to protect the data in accordance with applicable law. By using our platform, you consent to such transfers to the extent necessary for service provision.
Changes to this Policy
THEORLY may update this Privacy Policy from time to time. When material changes are made, we will notify users via email or by posting a prominent notice on our website. Your continued use of the platform after such updates constitutes acceptance of the revised policy.
Contact Information
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out through the channels below.