Privacy Policy

1. Introduction

ATLAS SkillTech University (“ATLAS”, “we”, “us” or “our”) operates the ATLAS CRM platform (the “Platform”) to manage admissions enquiries, applications, and related communications. We are committed to protecting the privacy and personal data of everyone whose information we handle — prospective students, applicants, guardians, and the staff who use the Platform.

This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the choices and rights you have. It is designed to be consistent with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and, where applicable, the EU/UK General Data Protection Regulation (GDPR).

2. Who This Policy Applies To

This policy applies to personal data processed through the ATLAS CRM Platform, including data relating to:

• Prospective students and applicants who submit enquiries through our websites, landing pages, admissions widgets, campaigns, or on-campus events.
• Parents, guardians, and referees whose details are provided in connection with an application.
• Staff and authorised users (counsellors, marketing, and administrators) who access the Platform.

Where ATLAS collects data directly to run its own admissions, ATLAS acts as the data fiduciary / controller. Where the Platform is operated on behalf of a partner institution, ATLAS acts as a data processor under that institution's instructions.

3. Information We Collect

We collect only the information needed to respond to enquiries and administer admissions. This may include:

• Identity & contact details — name, email address, phone/WhatsApp number, city, and country.
• Academic & programme interest — school, programme, degree or specialisation of interest, prior qualifications, and intended intake.
• Application data — information and documents you submit as part of an application.
• Communication records — enquiry messages, call notes, emails, WhatsApp/SMS interactions, and follow-up history created while assisting you.
• Source & campaign data — the campaign, channel, referrer, or landing page through which you reached us.
• Technical data — IP address, browser type, device information, and cookie identifiers when you use our web forms.

We do not intentionally collect sensitive personal data (such as religion, caste, or health information) through the CRM unless it is specifically required for an admissions process and provided with your consent.

4. How We Use Information

We use personal data for the following purposes:

• To respond to admissions enquiries and provide the information you request.
• To process, evaluate, and communicate about applications.
• To send relevant updates about programmes, events, deadlines, and admissions status through email, phone, SMS, or WhatsApp, where permitted.
• To allocate enquiries to the appropriate counsellor and coordinate follow-ups.
• To improve our services, measure campaign effectiveness, and generate aggregated, non-identifying analytics.
• To comply with legal, regulatory, and audit obligations.

5. Legal Basis & Consent

We process personal data on one or more of the following bases: your consent (for example, when you submit an enquiry form or opt in to receive communications); the performance of a request or contract (processing your application); our legitimate interests in operating and improving admissions; and compliance with legal obligations.

Where we rely on consent, you may withdraw it at any time (see Your Rights & Choices). Withdrawing consent does not affect processing carried out before the withdrawal.

6. How We Share Information

We do not sell your personal data. We share it only as necessary:

• Within ATLAS — with the schools and admissions teams responsible for your programme of interest.
• Service providers — trusted vendors who help us operate the Platform (for example, cloud hosting, email, telephony, and messaging providers) under contractual confidentiality and data-protection obligations, and only for the purposes we specify.
• Legal & regulatory — where required by law, court order, or to protect our rights, safety, and property.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, to maintain admissions and academic records, and to meet legal or regulatory requirements. When data is no longer required, we securely delete or anonymise it. Enquiry data for prospects who do not proceed is reviewed periodically and removed in line with our retention schedule.

8. Data Security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, role-based access controls, authentication safeguards, activity logging, and restricted administrative access. While no system can be guaranteed to be completely secure, we work continuously to protect information against unauthorised access, alteration, disclosure, or destruction.

9. Your Rights & Choices

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Erase your data where it is no longer required.
• Withdraw consent or opt out of marketing communications at any time.
• Restrict or object to certain processing.
• Nominate another person to exercise your rights in the event of death or incapacity (under the DPDP Act).
• Lodge a complaint with the relevant data-protection authority.

To exercise any of these rights, contact us using the details in Contact Us. You can unsubscribe from marketing messages using the opt-out link in the message or by replying STOP.

10. Cookies & Tracking

Our web forms and landing pages may use cookies and similar technologies to keep sessions secure, remember preferences, and measure the performance of admissions campaigns. You can control cookies through your browser settings; disabling some cookies may affect how our forms function.

11. Children's Privacy

Our admissions processes may involve applicants under the age of 18. Where required, we obtain verifiable consent from a parent or lawful guardian before processing a child's personal data, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.

12. International Transfers

Personal data is primarily stored and processed in India. Where data is transferred to or accessed from other countries (for example, through our service providers), we take steps to ensure it continues to receive an appropriate level of protection consistent with this policy and applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The “Last updated” date at the top indicates when the policy was last revised. We encourage you to review this page periodically.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data-protection rights, please contact: