1. Who we are
andorp Learning Private Limited (“andorp”, “we”) operates the andorp learning platform. For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), andorp is the Data Fiduciary for the personal data described in this policy.
This policy explains what we collect, why, who we share it with and the choices you have. It applies to our website, dashboard, lesson player, mobile apps and communications.
2. Information we collect
Information you give us
- Account details: name, email address, password (stored as a secure hash) and, optionally, phone number, photo and headline.
- Purchase details: billing name, address, GSTIN if provided, and order history. Card, UPI and bank details are collected directly by our payment partners; we receive only a transaction reference and limited card metadata (such as the last four digits).
- Learning content: questions, discussion posts, reviews, quiz answers and project submissions.
- Career information: resume, skills and job preferences, only if you use career services.
- Support conversations: messages you send us by email, chat or the contact form.
Information collected automatically
- Learning activity: lessons started and completed, time watched, quiz scores and streaks, so we can save your progress.
- Device and usage data: browser type, operating system, IP address, approximate location (city level), pages viewed and referring pages.
- Cookies and similar technologies: see section 5.
3. How we use your information
- To create and secure your account and deliver the courses you enrol in.
- To process payments, issue GST invoices and handle refunds.
- To save your progress, issue certificates and let others verify them.
- To provide support and respond to your requests.
- To recommend courses and personalise your dashboard. You can turn personalised recommendations off in Settings.
- To send service messages and, with your consent, newsletters and offers. You can unsubscribe at any time.
- To prevent fraud, enforce our Terms of Use and comply with legal obligations.
- To improve the Platform using aggregated or de-identified analytics.
4. Consent and legal grounds
We process personal data on the basis of your consent, which you give when you sign up, purchase or opt in to specific features, and for certain legitimate uses permitted by the DPDP Act, such as complying with law, responding to legal requests and processing data you voluntarily provide for a specific purpose.
You may withdraw consent at any time from Dashboard → Settings or by emailing privacy@andorp.com. Withdrawing consent does not affect processing that took place before withdrawal, but it may mean we can no longer provide some services.
7. Storage and international transfers
Your data is stored primarily on servers located in India. Some service providers may process data in other countries. Where this happens, we transfer data only to countries not restricted by the Government of India and with safeguards that protect it to the standard described in this policy.
8. How long we keep data
We keep your account data while your account is active. If you delete your account, we erase or anonymise your personal data within 90 days, except where we must keep it longer by law (for example, invoices and tax records are kept for at least 8 years under Indian tax law).
Certificate verification records (name, course and certificate ID) are kept so that certificates you have shared remain verifiable, unless you ask us to remove them.
9. How we protect your data
We use encryption in transit (TLS) and at rest, hashed passwords, role-based access for staff, regular security reviews and audit logs. No system is perfectly secure; if a personal data breach occurs, we will notify affected users and the Data Protection Board of India as required by law.
10. Your rights
Subject to the DPDP Act and applicable law, you have the right to:
- Access a summary of the personal data we process about you and the processing activities.
- Correct, complete or update inaccurate data. Most details can be edited in Dashboard → Profile.
- Erase your data, by deleting your account or asking us to.
- Withdraw consent for optional processing such as marketing.
- Nominate another person to exercise your rights in the event of death or incapacity.
- Have your grievances addressed by our Grievance Officer, and then by the Data Protection Board of India.
To make a request, email privacy@andorp.com from the address on your account. We respond within 30 days.
11. Children
andorp is designed for adults. Where a learner is under 18, we process their data only with verifiable consent from a parent or legal guardian, and we do not track, behaviourally monitor or target advertising at children.
12. Grievance Officer and contact
Grievance Officer (placeholder name), andorp Learning Private Limited, Koramangala, Bengaluru, Karnataka 560034, India. Email: grievance@andorp.com. For general privacy questions, write to privacy@andorp.com.
13. Changes to this policy
We will post any changes on this page and update the “last updated” date. If changes materially affect how we use your data, we will notify you by email or in the dashboard and, where required, ask for your consent again.
