Last updated 5 November 2026
1. Who we are
This policy covers designcourse.in (“we”, “us”). For India’s Digital Personal Data Protection Act 2023 we act as the Data Fiduciary; for the GDPR and UK GDPR we act as the Controller of the data we process.
2. What we collect
(a) Automatically: our hosting provider processes technical request data such as IP address, device and browser, pages requested and referrer in server logs. We run no analytics. (b) Browser storage: your colour theme and comparison shortlist stay in your browser; see Cookies. (c) If you contact us: your name, your email and your message. Today the contact form saves a copy on your device and sends nothing. (d) Tools: the finder and comparison tool run in your browser and we do not store what you enter.
3. Why we use it
Legitimate interests (running, securing and improving the site), consent (anything non-essential, where the law requires it) and legal obligation.
4. Third parties
Cloudflare provides hosting and security, and Turnstile spam protection on the contact form once delivery is enabled. Links to institution websites follow their own privacy policies. If we later add Google Analytics 4 or Google AdSense, we will update this policy and the cookie notice, and ask for consent where required before they run.
5. Transfers
Data may be processed outside your country, for example in the United States, under Standard Contractual Clauses or other applicable frameworks.
6. Retention
Server logs follow our hosting provider’s retention. Contact messages are kept for up to 3 years.
7. Your rights
Under the DPDP Act: information, correction, erasure, grievance redressal and nomination. Under the GDPR and UK GDPR: access, rectification, erasure, restriction, objection, portability and the right to complain to a supervisory authority. Under US state laws: notice and the right to opt out of sale or sharing. We do not sell or share personal data and run no cross-context advertising; we will honour Global Privacy Control signals if that changes.
8. How to exercise your rights or raise a grievance
Use the contact form and choose “Privacy / data request / grievance”. We acknowledge requests within 7 days and resolve them within 30 days, or sooner where the law requires.
9. Children
The site is not directed at children and we do not knowingly collect children’s data. The DPDP Act requires verifiable parental consent for anyone under 18. We do not request dates of birth, school records or other children’s information; students and parents can browse together without submitting details.
10. Security
We take reasonable measures to protect data, but no method is completely secure.
11. Changes
The “Last updated” date above shows when this policy last changed.
12. Governing law
The law of India governs this policy. See the Terms of use for dispute resolution.