Privacy notice
This notice explains what personal data Mentora Edu Hub collects, why we collect it, how long we keep it, and the rights you have over it. It is written to meet the notice requirements of India's Digital Personal Data Protection Act, 2023.
Last updated 13 August 2026 · Version 1.0
Who we are
Mentora Edu Hub provides one-on-one online mentoring for IELTS preparation, OET preparation, school subjects and language coaching. This notice applies to mentoraeduhub.org and to the mentoring we deliver through it.
Under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) we are the Data Fiduciary for the personal data described below. That means we decide why and how it is processed, and we are accountable for it.
- Operated by: Mentora Edu Hub, an independent education service
- Operating address: Iritty, Kannur District, Kerala 670704, India
- Email: privacy@mentoraeduhub.org
- Phone: +91 12345 67890
Mentora Edu Hub is not a registered company. It is operated by an individual proprietor whose identity we do not publish, but which we will disclose to the Data Protection Board of India, to a court, or to any other authority entitled to it, on request and without delay. If you need to identify the proprietor in order to bring a legal claim, write to grievance@mentoraeduhub.org and we will provide the details.
What we collect and why
We collect only what we need to answer your enquiry and deliver mentoring. We do not buy personal data from third parties, and we do not sell yours.
| Data | Why we need it | Basis |
|---|---|---|
| Name | To address you correctly and match a mentor to the learner. | Consent |
| Email address | To reply to your enquiry, send session details and share study material. | Consent |
| Phone or WhatsApp number | To arrange the diagnostic call and send session reminders, where you provide it. | Consent |
| Learning goal, subject and current level | To recommend a suitable programme and mentor. | Consent |
| Session records and progress notes | To track progress across sessions and give you written reviews. | Performance of the service you asked for |
| Technical log data (IP address, browser type, pages visited) | To keep the site secure, diagnose faults and understand which pages are useful. | Legitimate use — security and service operation |
If we ever want to use your data for a purpose not listed here, we will ask you first.
Consent, and how to withdraw it
Where we rely on consent, that consent is specific to the purposes in the table above. You gave it by ticking the consent box on our contact form, or by asking us to begin mentoring.
You can withdraw consent at any time, and withdrawing must be as easy as giving it was. Email privacy@mentoraeduhub.org with the word “withdraw”. We will stop processing and erase your data unless a law requires us to keep it. Withdrawal does not undo processing that already, lawfully, happened.
Children and guardians
Our school mentoring programme is for learners under 18. Section 9 of the DPDP Act treats anyone under 18 as a child and requires verifiable parental consent before their personal data is processed.
- A parent or lawful guardian must submit the enquiry and give consent. Learners under 18 should not complete our forms themselves.
- Before mentoring begins we confirm that the person giving consent is an adult and is the parent or guardian of the learner.
- We do not track children's behaviour, build profiles on them, or serve them targeted advertising. The DPDP Act prohibits this and we have no business reason to do it.
- We do not process a child's data in any way likely to have a detrimental effect on their wellbeing.
- Sessions with learners under 18 are arranged so that a guardian can be present or informed. Guardians receive the session notes.
- Guardians may see, correct or erase their child's data at any time using the contacts in section 10.
Who else handles your data
We use a small number of service providers (Data Processors) to run the service. They act on our written instructions and may not use your data for their own purposes.
| Provider | What it does | Where it processes |
|---|---|---|
| BreaktroughF1 LLP | Builds and maintains this website and its systems on our instructions. | India |
| Vercel Inc. | Website hosting and delivery | Global edge network |
| Supabase Inc. | Database holding enquiries and session records | Configured region |
| Zoho / ZeptoMail | Sending transactional email such as replies and reminders | India |
| Google LLC | Meeting links and calendar invitations for sessions | Global |
| GoDaddy.com, LLC | Domain registration and name resolution | Global |
We disclose personal data to anyone else only where the law requires it, or to establish or defend a legal claim.
Transfers outside India
Some providers above process data on servers outside India. Section 16 of the DPDP Act permits this, except to countries the Central Government restricts by notification. We check our providers against any such notification and will move processing if a provider becomes restricted.
How long we keep it
We keep personal data only for as long as the purpose it was collected for is still being served, then erase it.
| Data | Retention |
|---|---|
| Enquiries that do not become students | 12 months from last contact, then erased. |
| Active student records and session notes | For the duration of mentoring, plus 24 months. |
| Records a law requires us to keep, such as tax records | For the period that law requires. |
| Website technical logs | Up to 90 days. |
Where we are about to erase data because a retention period has expired, we will give you reasonable advance notice at the email address we hold, so you can object or ask us to keep it.
How we protect it
We apply security safeguards proportionate to a small education service:
- Encryption in transit (HTTPS) across the whole site.
- Access to the enquiry database restricted to named administrator accounts.
- Two-factor authentication on every administrative account.
- Access logs retained so that any incident can be investigated.
- Data minimisation — we do not collect fields we do not use.
If a personal data breach occurs we will notify affected people and the Data Protection Board of India without delay, and provide the Board with a detailed report within 72 hours, as the DPDP Rules, 2025 require.
Your rights
As a Data Principal under the DPDP Act, you have the right to:
- Access — a summary of the personal data we hold about you and how we are processing it.
- Correction and completion — have inaccurate or incomplete data corrected, completed or updated.
- Erasure — have your data deleted where we no longer need it and no law requires us to keep it.
- Grievance redressal — complain to us and receive a response, before escalating anywhere else.
- Nomination — nominate someone to exercise these rights for you if you die or become incapacitated.
To exercise any of these, email privacy@mentoraeduhub.org. We will respond within 30 days. There is no charge.
Complaints
If you are unhappy with how we have handled your data, contact us first:
- Grievance contact: grievance@mentoraeduhub.org — monitored by our designated grievance officer
- Phone: +91 12345 67890
- Post: Mentora Edu Hub, Iritty, Kannur District, Kerala 670704, India
We will acknowledge your complaint promptly and resolve it within 90 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India, which is constituted and accepting complaints.
Changes to this notice
We update this notice when our practices change. The version number and date at the top always reflect the current text. If a change materially affects how we use data you have already given us, we will tell you by email rather than relying on you noticing.
Language
This notice is published in English. If you would prefer it in Malayalam, or another language listed in the Eighth Schedule to the Constitution of India, email privacy@mentoraeduhub.org and we will provide it.
See also our terms.