Privacy Policy

Effective Date: July 21, 2025

This Privacy Policy describes how BioCore, operated from Rohtak, Haryana, India, collects, uses, stores, shares, and protects the personal information of our students and visitors when you visit our website at biocoreeducation.com and use our services, including purchasing classes and creating accounts.

We are committed to protecting your privacy and handling your personal data in a transparent and secure manner, in compliance with applicable data protection laws, including the Digital Personal Data Protection Act (DPDP Act) 2023 of India, the General Data Protection Regulation (GDPR) for users in the European Union and United Kingdom, and the California Consumer Privacy Act (CCPA)/California Privacy Rights Act (CPRA) for California residents, among others.

 

1. Data Fiduciary and Contact Information

Data Fiduciary/Controller: Tamanna

Address:  Rohtak, Haryana, India

Email: connect@biocoreeducation.com

For any privacy-related questions or concerns, please contact our Grievance Officer as detailed in Section 11.

 

2. Information We Collect

We collect various types of information from and about you, including personal data, as described below:

a. Personal Information You Provide Directly:
This information is collected when you register for an account, purchase classes, fill out forms, or communicate with us. It may include:

Contact Information: Name, email address, phone number, billing address, shipping address (if applicable for physical materials).

Account Information: Username, password (encrypted), and other registration details.

Payment Information: Details required to process payments, such as credit card numbers, debit card numbers, or other financial account information. (Note: We use secure third-party payment processors who handle your payment information directly. We do not store your full payment card details on our servers).

Student Information: Academic level, subjects of interest, learning goals, and any other information you choose to provide related to your tutoring needs.

Communications: Records of your correspondence with us, including emails, chat messages, or support tickets.

User Generated Content: Any content you upload or submit through our platform, such as assignment submissions, forum posts, or comments.

b. Sensitive Personal Data or Information (SPDI) (as per Indian IT Act & SPDI Rules):
Currently, we generally do not knowingly collect Sensitive Personal Data or Information (SPDI) such as passwords (except for encrypted user accounts), financial information (beyond what's necessary for transaction processing and handled by third-party processors), health conditions, biometric data, sexual orientation, or medical records. If we ever need to collect such data for a specific and legitimate purpose, we will explicitly seek your clear and informed consent and provide specific notice at the point of collection.

c. Information Collected Automatically:
When you visit our website, certain information is automatically collected, primarily to improve our services and understand user behavior. This may include:

Device Information: IP address, device type, operating system, browser type, and version.

Usage Data: Pages viewed, links clicked, time spent on pages, referral URLs, interaction with website features, and general Browse patterns.

Location Data: Approximate location derived from your IP address.

d. Information from Third Parties:
We may receive information about you from third-party services integrated with our website, such as:

Payment Processors: Confirmation of payment, transaction details (excluding full card numbers).

Analytics Providers: Aggregated and anonymized data about website usage from services like Google Analytics.

Social Media Platforms: If you interact with us through social media, we may receive information consistent with your privacy settings on those platforms.

 

3. How We Collect Information

We collect information through various methods:

Directly from You: When you register, purchase, subscribe, fill out forms, or communicate with us.

Automated Technologies: Through cookies, web beacons, and similar tracking technologies as you navigate our website (explained further in Section 8).

Third-Party Integrations: From third-party services and tools integrated into our website (e.g., payment gateways, analytics tools).

 

4. How We Use Your Information (Purposes of Processing)

We use your personal information for the following purposes:

To Provide Services: To create and manage your account, process class registrations and purchases, deliver tutoring services, and provide access to course materials.

To Process Transactions: To facilitate payments for classes and services you purchase.

To Communicate with You: To send transactional emails (e.g., order confirmations, password resets), service announcements, updates, and respond to your inquiries and support requests.

For Personalization: To tailor your experience on our website, recommend classes, and provide content relevant to your interests.

For Analytics and Improvement: To understand how our website and services are used, analyze trends, improve website functionality, and develop new features and services.

For Marketing and Promotions: To send you promotional materials, newsletters, and special offers related to our services, but only where you have provided your consent or if permitted by applicable law. You can opt-out of marketing communications at any time.

For Security and Fraud Prevention: To protect our website, users, and business from fraudulent activities, unauthorized access, and other security threats.

To Comply with Legal Obligations: To fulfill our legal and regulatory requirements, including tax, accounting, and anti-fraud regulations.

For Legitimate Interests: Where necessary for our legitimate interests, provided that these interests do not override your fundamental rights and freedoms. This includes, for example, maintaining the security of our services, improving user experience, and managing our business operations efficiently.

​

5. Sharing Your Information

We may share your personal information with the following categories of recipients:

Wix.com: Our website is hosted on the Wix.com platform. Wix provides us with the online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com's data storage, databases, and the general Wix.com applications on secure servers behind a firewall.

Third-Party Service Providers: We engage trusted third-party service providers to perform functions on our behalf, such as:

Payment Processors: (e.g., Stripe, PayPal) to securely handle payment transactions. We do not store your full payment card details.

Analytics Providers: (e.g., Google Analytics) to help us understand website usage.

Email Marketing Services: To send newsletters and promotional communications (with your consent).

Customer Support Platforms: To manage inquiries and provide support.

Cloud Hosting Services: For data storage and infrastructure.

Legal Requirements and Law Enforcement: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency request), or to establish, exercise, or defend our legal rights.

Business Transfers: In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity.

With Your Consent: We may share your information with other third parties when we have your explicit consent to do so.

We ensure that all third-party service providers who process personal data on our behalf are contractually obligated to protect your data with appropriate security measures and to use it only for the purposes for which we provide it to them.

 

6. International Data Transfers

As we serve students globally and use services like Wix that may have servers outside India, your personal data may be transferred to, stored, and processed in countries other than India. These countries may have different data protection laws than your country of residence.

When we transfer your data internationally, we take appropriate safeguards to ensure your personal data remains protected in accordance with this Privacy Policy and applicable data protection laws. This may include:

Wix's Data Security: Relying on the security measures and compliance of Wix, who adhere to international data protection standards.

Standard Contractual Clauses (SCCs): Implementing SCCs approved by regulatory bodies (like the European Commission) for transfers from the EU/UK.

Adequacy Decisions: Relying on countries deemed to provide an adequate level of data protection by relevant authorities.

By using our services, you understand that your information may be transferred to and processed in countries outside your country of residence.

 

7. Data Security

We implement reasonable and appropriate technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, use, alteration, and disclosure. These measures include:

Encryption: Using SSL/TLS encryption for data transmission (HTTPS).

Access Controls: Restricting access to personal data to authorized personnel only.

Firewalls: Employing firewalls to prevent unauthorized network access.

Regular Security Audits: Conducting periodic reviews of our security practices.

Wix's Security: Leveraging Wix.com's robust security infrastructure and practices.

While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

 

8. Cookies and Tracking Technologies

Our website uses "cookies" and similar tracking technologies (like web beacons, pixels) to enhance your Browse experience, analyze site usage, and support our services.

What are cookies? Cookies are small text files stored on your device when you visit a website.

How we use them:

Essential Cookies: Necessary for the website to function correctly (e.g., remembering login status, adding items to a cart).

Analytics/Performance Cookies: To collect information about how you use our website (e.g., which pages you visit most often) to improve its performance and design.

Functionality Cookies: To remember your choices and provide enhanced, more personal features (e.g., language preferences).

Advertising/Targeting Cookies: To deliver relevant advertisements to you based on your interests and Browse history.

Your Choices:

Cookie Banner: We use a cookie consent banner that allows you to accept or decline non-essential cookies.

Browser Settings: You can manage your cookie preferences through your web browser settings. Most browsers allow you to block or delete cookies. However, blocking essential cookies may affect the functionality of our website.

 

9. Your Data Protection Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal data:

Right to Access: To request access to your personal data that we hold.

Right to Rectification/Correction: To request correction of inaccurate or incomplete personal data.

Right to Erasure/Deletion ("Right to be Forgotten"): To request the deletion of your personal data under certain circumstances (e.g., when it's no longer necessary for the purposes for which it was collected).

Right to Restriction of Processing: To request the restriction of processing of your personal data under certain conditions.

Right to Object to Processing: To object to the processing of your personal data under certain circumstances (e.g., for direct marketing).

Right to Data Portability: To request to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint: To lodge a complaint with a data protection authority in your jurisdiction if you believe your rights have been violated. (e.g., the Data Protection Board of India under the DPDP Act, or a supervisory authority in the EU/UK).

To exercise any of these rights, please contact our Grievance Officer using the contact details provided in Section 11. We will respond to your request within the timeframes required by applicable law (e.g., generally within 30 days under DPDP Act and GDPR).

 

10. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

When we no longer need your personal data, we will securely delete or anonymize it.

 

11. Grievance Officer (India - DPDP Act 2023)

In accordance with the Digital Personal Data Protection Act (DPDP Act) 2023, we have appointed a Grievance Officer to address any concerns or complaints regarding your personal data.

Name: Tamanna

Email: learn@biocoreeducation.com

​

The Grievance Officer will acknowledge your complaint within seven days and endeavor to resolve it within thirty days from the date of receipt.

​

12. Children's Privacy

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18 without verified parental consent, we will take steps to delete that information as quickly as possible. If you believe we might have any information from or about a child under 18, please contact us at connect@biocoreeducation.com.

 

13. Links to Other Websites

Our website may contain links to other websites that are not operated by us. This Privacy Policy applies only to our website. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

 

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, and other factors. When we make changes, we will update the "Effective Date" at the top of this policy. We will notify you of any material changes by posting the new Privacy Policy on this page, and/or by email or a prominent notice on our website prior to the change becoming effective. We encourage you to review this Privacy Policy periodically for any updates.