Privacy Policy

Paliwal Commerce Classes (“PCC,” “we,” “us,” or “our”) operates the website paliwalcommerce.in (the “Platform”), owned and operated by Vinay Paliwal, a sole proprietor (Udyam Registration Number UDYAM-MP-22-0043380).

This Privacy Policy explains what personal data we collect, why, how we use and protect it, and the rights you have over it, in accordance with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (“DPDP Law”), as well as applicable provisions of the Information Technology Act, 2000.

1. Protection of Students Under 18 (Minors)

A substantial number of our students are between 15 and 18 years of age. Under the DPDP Law, an individual under 18 is legally a “child,” and processing a child's personal data requires verifiable consent from a parent or lawful guardian.

2. Information We Collect

2.1 Information you provide directly:

• Name, email address, and authentication credentials upon registration;
• Parent/guardian full name and consent records (if under 18 years of age);
• Mobile / phone number (provided during account registration, enquiry, or demo class booking);
• Student doubts and questions submitted through the doubt-resolution feature (including voice or image attachments);
• Communications sent to customer support or enquiry forms.

2.2 Information collected automatically:

• Session tokens and timestamps (used to enforce single-device active session limits);
• Video lecture watch progress (to allow you to resume your study where you left off);
• Device type, browser information, and IP address for security, fraud prevention, and session auditing.

2.3 Payment details: Payments are processed directly through Razorpay, an RBI-authorised payment aggregator. PCC never stores or receives your full payment card numbers, CVV, or UPI PINs. We only receive transaction status confirmations and reference numbers.

3. How We Use Your Information

We process your personal data to:

• Authenticate your identity and manage your student account;
• Provide seamless access to purchased courses, videos, and study notes;
• Enforce our single-device security policy to prevent credential sharing;
• Process course enrollments, invoices, and accounting records;
• Track your lecture progress and academic test attempt scores;
• Resolve doubts submitted to faculty;
• Comply with Indian statutory tax and consumer protection regulations.

We do not sell, rent, or trade your personal data to third parties.

4. Legal Basis for Processing

Under the DPDP Law, we process personal data based on:

• Consent: Freely given, specific, and informed consent at account signup (or parental consent for minors);
• Contract Performance: Delivering the digital educational courses and materials you enrolled in;
• Legal Compliance: Maintaining statutory accounting, tax, and consumer records required by Indian law.

5. Data Sharing and Service Providers

We share personal data solely with trusted third-party service providers who assist us in operating our platform, each bound by strict confidentiality and data protection obligations:

6. Data Retention and Deletion

We retain account data for as long as your account remains active and for the duration necessary to satisfy statutory tax, accounting, and legal requirements.

Doubt attachments (images and audio recordings) are automatically purged within 10 days after a doubt is resolved, in accordance with data minimisation principles.

7. Your Data Rights

Under the DPDP Law, you (and parents/guardians of minor students) possess specific rights:

• Right to Access: Request a summary of personal data processed by us;
• Right to Correction: Request correction or updating of inaccurate data;
• Right to Erasure: Request deletion of your personal data, subject to legal record-keeping requirements;
• Right to Withdraw Consent: Withdraw consent for non-essential data processing at any time;
• Right of Grievance Redressal: Submit complaints directly to our Grievance Officer.

8. Cookies and Tracking

We use essential cookies and local storage items to maintain your signed-in session and enforce single-device security. For platform performance and aggregate traffic monitoring, we utilize Cloudflare Web Analytics — a privacy-first analytics solution. We do not use Google Analytics, advertising trackers, or invasive cross-site profiling cookies.

On your first visit, a cookie consent banner allows you to select “Accept All” or “Essential Only”. You can review or modify your cookie choices at any time by clicking the “Cookie Settings” button in our website footer.

9. Grievance Officer and Contact

For privacy inquiries, data subject rights requests, or grievances under the DPDP Law:

We acknowledge requests within 48 hours and strive to resolve inquiries within 30 days.