DishaDarshi is a career guidance initiative operated by FuturePath Labs. This Privacy Policy explains how we collect, use, store, share, and protect personal data of students, parents, guardians, and school or institute representatives who interact with DishaDarshi.

By using DishaDarshi, submitting any form, taking an assessment, booking a session, or engaging with our services, you agree to the practices described in this Privacy Policy.

DishaDarshi works with students, including minors under 18 years of age. We therefore apply additional care in the handling of student data and seek to comply with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDPA).

1. Who We Are: Legal Entity: FuturePath Labs Brand: DishaDarshi Location: Nanded, Maharashtra Contact for privacy-related queries: anant.kulkarni@dishadarshi.com

2. What Data We Collect: We collect only the data reasonably required to deliver our services.

a) Data provided directly by users:

• Student name, age, class, school or junior college name, city, and academic details

• Parent or guardian name, phone number, and email address

• Assessment responses, scores, and report data

• Session notes and guidance-related records, where applicable

• Form submissions, enquiry details, and booking information

• School or institute contact details for B2B programmes

• Payment-related transaction information, excluding card details stored by payment gateways
  

b) Data collected automatically: When users access our website or platform, we may collect limited technical information such as:

• Device type

• Browser and operating system

• IP address

• Approximate location

• Session activity, page visits, and basic interaction data

• Cookies and session-related information

c) Guidance and assessment data: Assessment responses and psychometric or guidance-related outputs may be sensitive in nature. We treat such data with heightened care and use it only for service delivery, interpretation, counselling, and necessary internal quality review. We do not use assessment data for advertising or unrelated commercial profiling.

3. Why We Collect Data: We collect personal data only for legitimate and specific purposes connected to our services. These purposes may include:

• Creating and managing bookings or student records

• Delivering assessments, reports, and counselling sessions

• Communicating with students, parents, schools, and institutions

• Processing payments through authorised payment providers

• Providing school-level reporting and programme support in B2B engagements

• Maintaining records for follow-up, service quality, and internal review

• Improving website stability, platform performance, and operational security

We do not collect personal data speculatively, and we do not build unrelated behavioural or advertising profiles.

4. Legal Basis for Processing: Where applicable under Indian law, we process data on one or more of the following bases:

• Consent — including parent or guardian consent where the student is a minor

• Service delivery or contractual necessity — where processing is required to deliver the requested service

• Legitimate operational need — for limited technical, security, fraud-prevention, and service-quality purposes

5. Data Related to Minors: DishaDarshi serves students, including minors under 18 years of age. We therefore apply additional safeguards.

Our approach to minor data:

• Parent or guardian involvement is required before a minor accesses paid assessment or counselling services

• For school-based programmes, the institution is expected to manage appropriate parent communication and consent as part of programme delivery

• Minor data is not used for advertising, marketing, or commercial profiling

• Access to minor data is restricted to authorised persons with a legitimate operational or counselling need

• All in-person sessions involving minors at our Nanded centre are conducted in the presence of a trained administrator

• Parents or guardians may request correction or deletion of a minor's data, subject to legal retention requirements

6. How We Share Data: We do not sell, rent, or trade personal data. We may share data only in the following limited situations:

a) Service delivery partners: We may use selected third-party providers such as cloud hosting providers, payment gateways, assessment or platform operators, and communication or form-processing tools. Such providers are engaged only to support delivery of our services and are not permitted to use personal data for their own unrelated purposes.

b) Counsellors or authorised experts: Relevant assessment reports and student information may be shared with the counsellor or expert involved in delivering the booked service, and only for that purpose.

c) Schools and institutes: For institutional programmes, relevant student reports or aggregate outputs may be shared with the school's authorised representatives in accordance with the agreed programme model.

d) Legal or regulatory requirements: We may disclose data where required by law, court order, or competent authority.

e) No advertising-based sharing: We do not share personal data with advertisers, ad networks, or data brokers.

7. Data Storage and Security: We take reasonable technical and organisational measures to protect personal data. These may include:

• Encryption in transit using secure protocols

• Restricted access to personal data on a need-to-know basis

• Use of password protection and access controls

• Periodic review of operational access

• Audit or activity logging where relevant

• Separation and heightened care for sensitive student and assessment-related information

While we take reasonable safeguards, no digital system can guarantee absolute security.

8. Retention and Deletion: We retain data only for as long as reasonably necessary for service delivery, legal compliance, record-keeping, or legitimate operational purposes.

Data TypeRetention PeriodAccount and identity dataDuration of account + 3 years after account closureAssessment reportsAccessible for duration of active account; archived after 2 years of inactivityPayment records7 years (statutory requirement)Session and counsellor notes3 years from session dateUsage and technical logs12 months rollingDeleted account dataErased within 30 days of deletion request, except where legally required to retain

Users may request deletion of their data by writing to anant.kulkarni@dishadarshi.com. We will review and process such requests within 30 days, subject to legal or contractual retention requirements.

9. Your Rights: Subject to applicable law, users may have the right to:

• Request access to the personal data we hold

• Request correction of inaccurate or incomplete data

• Request deletion of personal data

• Withdraw consent, where processing is consent-based

• Nominate another person to act on their behalf, where applicable

To exercise any of these rights, please contact: anant.kulkarni@dishadarshi.com

10. Cookies and Basic Website Technologies: DishaDarshi may use cookies or similar technologies for:

• Session management

• Basic website functionality

• Security and fraud prevention

• Performance and usage analytics in aggregated form

We do not use third-party advertising cookies. Users may control cookies through browser settings, although this may affect some parts of the site or platform.

11. Policy Updates: We may update this Privacy Policy from time to time to reflect changes in our practices, service model, or applicable law. Where changes are material, we will notify users through email, website notice, or another appropriate communication method at least 15 days before changes take effect. Continued use of DishaDarshi after such updates may be treated as acceptance of the revised policy, where permitted by law.

12. Grievance and Contact: For privacy-related concerns, correction requests, deletion requests, or grievance matters, please contact:

Grievance Officer: Anant Kulkarni Email: anant.kulkarni@dishadarshi.com Location: FuturePath Labs, Nanded, Maharashtra Response: Acknowledgement within 48 hours. Resolution within 30 days.

Privacy Policy