How we handle your data.

What we collect

• Enquiry & application data — name, parent name, phone, email, branch interest, JEECUP rank, address, category, academic transcripts.
• Admission & academic data — Aadhaar, transfer / character certificates, marksheets, attendance, semester grades.
• Hostel & campus data — emergency contact, medical disclosures (where voluntarily shared), gate-entry logs.
• Website analytics — page views, device type, referral source. Cookies are limited and disclosed via the cookie banner where applicable.
• Behavioural analytics — to improve the site we use heatmaps and anonymised session recordings (Microsoft Clarity). The information you type into forms — name, phone number, email, documents — is masked and is not captured; recordings show only anonymous interaction (clicks, scrolls, navigation) and page layout. This data is processed by Microsoft as our processor and is used solely to fix usability problems.

What we don’t collect

• We do not sell, rent or trade your personal data.
• We do not share your data with third-party marketers.
• We do not use your data to train AI models. AI tools used in teaching (see AI Policy) operate on anonymised, faculty-supervised inputs.

Why we collect, and our legal basis

Data is collected for: admission processing, academic delivery, statutory reporting (AICTE, BTEUP, AISHE), hostel and campus safety, and limited communication with applicants and enrolled students. Our legal basis is a combination of legitimate interest, contractual necessity (the offer of admission and the diploma programme), and statutory obligation. Sensitive data such as Aadhaar is handled under UIDAI norms and is not retained beyond regulatory requirements.

Your rights as a Data Principal

• Right to access the personal data we hold about you.
• Right to correction and erasure (subject to retention requirements under AICTE / BTEUP / income-tax / academic-record statutes).
• Right of grievance redressal — escalate first to our Grievance Officer (below), and onward to the Data Protection Board if applicable.
• Right to nominate, in case of incapacity or demise.
• Right to withdraw consent for processing not required by law (e.g., marketing communications).

Children & minors

BIPE markets to 10th-pass students (typically aged 15–16). Enquiry forms ask for a parent / guardian phone number and we treat all minor data with extra care: parental consent for marketing communications, no public exposure of minor identifying data, and prompt deletion on request beyond statutory retention. Our admission process is built on parental involvement.

Third-party processors

Where we use third parties (cloud hosting, email, analytics, AI assistants such as Claude in teaching contexts) we choose providers with adequate security and data-handling commitments, and we do not pass identifying student data into those tools as a default. The list of processors is reviewed annually by the Principal’s office.

Grievance Officer (DPDP / IT Rules 2021)

Office of the Principal · BIPE
Email: grievance@bipevns.org
Phone: +91-9415202879
Address: Gajokhar, Phoolpur, Varanasi, Uttar Pradesh 221206

Complaints are acknowledged within 7 working days. The Grievance Officer is responsible for handling privacy queries, data-correction requests and escalation under the DPDP Act and the IT Rules 2021. See also Grievance Redressal for non-privacy complaint channels.

Updates to this policy

This policy is reviewed annually by the Principal’s office. The current version is 2026.1 — last reviewed April 2026. Material changes are announced on the homepage and emailed to enrolled students and parents.