Privacy Policy

Last updated: 13 October 2026

White Banger Tech Private Limited ("White Banger", "we", "us", "our") runs whitebanger.org — the public website and the student and staff portal. They are one service on one domain, and this Privacy Policy covers all of it: what we collect, why, how long we keep it, and what you can ask us to do about it.

How much of this applies to you depends on what you do. A visitor reading a course page is covered by sections 1, 5 and 7. An enrolled student or a member of staff is covered by all of it.

1. Information We Collect

If you only visit the website, we collect technical information automatically: IP address, browser type, pages visited and time spent on them, through Google Analytics and Microsoft Clarity. We also collect whatever you choose to type into an enquiry form — your name, phone number, email address, the course you are interested in, and anything you tell a counsellor.

If you enrol, work for us, or buy a course, we collect more, because we have to:

Identity and contact details: name, phone number, email address, date of birth, gender, nationality, category, marital status, address.
Admission and academic information: course of interest, prior qualification, school or college name, enrolment and course details, attendance, exam results, certificates.
Government ID and educational documents: Aadhaar number, and photos or scans of your Aadhaar card, 10th certificate, 12th certificate and graduation certificate, submitted voluntarily during admission or profile completion.
Parent or guardian information: father's and mother's name and contact number, where applicable.
Fee and payment information: fee amounts, payment status and transaction references for invoicing. We do not store full card or bank details — payment entry happens on the payment provider's own page.
Staff and teacher information: for onboarding applicants — employment history, qualifications, bank details for payroll, and identity documents submitted with the application.
Communication data: messages exchanged with us over WhatsApp, including login verification codes, admission updates, fee reminders and support.
Device identifier: a random identifier your browser generates and stores, so we can tell one of your devices from another. It is not linked to anything outside your account and tells us nothing about you or your device beyond "this is a different one".

2. How We Use Your Information

To contact you about a course enquiry or an admission.
To process admission applications and manage enrolment.
To verify your identity when you sign in, using a one-time code sent to your WhatsApp.
To communicate admission status, fee reminders, exam results, certificates and other academic or administrative updates.
To review and verify submitted documents as part of admission processing.
To process staff and teacher onboarding applications and, on approval, manage employment records.
To send information about upcoming batches, scholarships and events — only with your consent, and you can withdraw it at any time.
To improve the website and our courses using aggregated analytics.
To maintain institutional records and backups for continuity and regulatory purposes, and to comply with applicable law.

3. WhatsApp Business Communications

We use the WhatsApp Business Platform, provided by Meta, to send login verification codes, admission and fee notifications, document upload links, and to answer enquiries you send us. Messages through this channel are also subject to Meta's WhatsApp Business Policy and Meta's own Privacy Policy.

When you click our WhatsApp button or give us your number, you consent to being contacted this way about your enquiry. You can opt out of marketing messages at any time by replying STOP. Messages we are required to send you — a login code you asked for, a fee receipt, an exam result — are not marketing and will continue.

4. Legal Basis and Consent

We process your information where you have given consent (an enquiry form, a marketing opt-in, documents you upload), where it is necessary to provide a service you asked for (teaching you, invoicing you, signing you in), and where the law requires it (tax records, regulatory reporting). Where consent is the basis, you may withdraw it, and we will stop — except where we must keep a record under section 8.

5. Cookies, Analytics and Similar Technologies

The website uses cookies for analytics and for the site to work properly. The portal stores a sign-in token and a few preferences in your browser so you are not signed out between pages, and a random device identifier as described in section 1.

You can control cookies through your browser settings. Blocking them may stop parts of the site working, and will stop you staying signed in to the portal.

6. Sharing of Information

We do not sell, rent or trade your personal information. We share it only where it is needed to run the service:

Meta / WhatsApp Business Platform — solely to deliver the messages described in section 3.
Payment processors — solely to process a payment you initiate.
Analytics providers (Google Analytics, Microsoft Clarity) — website usage data, not your academic or financial records.
Placement partners and hiring companies — only with your explicit consent, during a placement process you have agreed to.
Internal backup systems — a private record used only for institutional continuity, reachable only by authorised staff.
Government or regulatory authorities, where the law requires it.

7. Third-Party Links

Our pages may link to other websites. We are not responsible for how those sites handle your data, and we would encourage you to read their policies before giving them anything.

8. Data Retention

Enquiries that never became an admission: 24 months, then deleted.
Financial records including invoices: 8 years, as tax law requires.
Student and staff records: as long as needed for academic, administrative and legal record-keeping.

You may ask us to delete or correct your data as described in section 11, except where we are legally required to keep it.

9. Data Security

We restrict access to personal data to authorised staff based on their role, and apply technical and organisational safeguards against unauthorised access, alteration or disclosure. In practice that means:

Access follows the role, not the person. A counsellor handling enquiries cannot open fee records; a teacher sees what a student owes today but not their payment history; staff accounts limited to leads and WhatsApp are blocked from every other part of the system by default, and each refused attempt is logged.
Sign-in is passwordless for students and learners — a one-time code to your WhatsApp. Privileged accounts additionally need a PIN, and a sign-in from an unrecognised device must be approved from a device already signed in.
Sessions are limited per device and expire. Signing in again elsewhere ends the earlier session.
Course videos are stored encrypted, and the key needed to play them is held separately from the video and released only to a signed-in account that owns the course.
Changes to records are audited — who did what, and when — including every refused attempt to reach something a role is not allowed to see.
Payment card details never reach us. Card and bank entry happens on the payment provider's own page.

No system is perfect, and no transmission over the internet is completely secure. We will not claim otherwise. If we become aware of a breach affecting your personal data, we will act to contain it and inform you and the relevant authority as the law requires.

10. Your Rights

You may ask us to:

tell you what personal information we hold about you;
correct anything that is wrong;
delete your data, subject to records we are legally required to keep (section 8);
stop sending you marketing, at any time, without giving a reason.

Write to us using the details in section 15 and we will respond. If you are not satisfied, section 14 tells you who to escalate to.

11. Children's Information

As an educational institute we process information about students who may be minors. That information is provided and consented to by a parent or guardian as part of the admission process.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page.

13. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the following Grievance Officer is designated to address complaints about this policy or the handling of your personal data:

Grievance Officer, White Banger Tech Private Limited
Email: team@whitebanger.org
Phone: +91 97283-20132

We will acknowledge your complaint within 24 hours of receipt and endeavour to resolve it within 15 days.

14. Contact Us

For any question about this Privacy Policy or how your information is handled:

Email: team@whitebanger.org
Phone: +91 97283-20132
Address: White Banger Tech Private Limited, 560/08, Pansarian Mohalla, near Suparshav Jain School, Kaithal, Haryana 136027