PRIVACY POLICY

Effective Date: 15 August 2026

Last Updated: 15 August 2026

This Privacy Policy ("Privacy Policy" or "Policy") describes how Krishnangan Enterprises ("Krishnangan", "we", "us" or "our") collects, receives, uses, processes, stores, shares, protects and otherwise handles personal data in connection with www.krishnangan.com and any associated websites, applications, forms, tools, communication channels, AI-assisted features and services operated by or on behalf of Krishnangan (collectively, the "Platform").

By accessing or using the Platform, submitting information through the Platform or otherwise interacting with Krishnangan, you acknowledge that your personal data may be processed in accordance with this Policy and applicable law.

This Policy should be read together with Krishnangan's Terms and Conditions, Disclaimer, Cookie Policy, Editorial Policy, Data Sources Policy, Corrections Policy and other applicable policies.

1. SCOPE

This Policy applies to personal data processed by Krishnangan in connection with services including:

• university discovery;

• college discovery;

• course discovery;

• career information and guidance;

• scholarships;

• education comparisons;

• career assessments;

• enquiries;

• consultation requests;

• admission-related enquiries;

• personalised recommendations;

• newsletters and communications;

• account functionality, where implemented;

• AI-assisted services;

• forms and feedback; and

• other education- and career-related Platform services.

This Policy does not govern independent third-party websites or services merely because they are linked from the Platform.

2. APPLICABLE DATA-PROTECTION FRAMEWORK

Krishnangan shall process personal data in accordance with applicable laws of India, including, to the extent applicable and in force from time to time:

• the Digital Personal Data Protection Act, 2023;

• the Digital Personal Data Protection Rules, 2025;

• the Information Technology Act, 2000;

• applicable rules made thereunder; and

• other applicable privacy, cybersecurity, consumer-protection and telecommunications requirements.

Where applicable data-protection legislation uses defined expressions such as "Data Principal", "Data Fiduciary", "Data Processor" or "personal data", those expressions shall have the meanings assigned under the relevant law.

Where Krishnangan determines the purpose and means of processing particular personal data, Krishnangan may act as the Data Fiduciary in relation to such processing.

3. PERSONAL DATA WE MAY COLLECT

Depending upon how you interact with the Platform, Krishnangan may collect or receive the following categories of personal data.

3.1 Identity Information

This may include:

• name;

• age or age range, where required;

• gender, where voluntarily provided and relevant;

• educational stage; and

• other identifiers supplied by you.

3.2 Contact Information

This may include:

• mobile number;

• email address;

• city;

• state;

• postal information, where required; and

• preferred communication details.

3.3 Education Information

This may include:

• current qualification;

• academic level;

• subjects studied;

• marks or academic performance voluntarily supplied;

• preferred course;

• preferred career;

• preferred institution;

• study location preference;

• entrance examination information; and

• other education-related preferences.

3.4 Enquiry and Consultation Information

When you submit an enquiry, consultation request or similar form, we may process information including:

• name;

• phone number;

• email address;

• selected course or area of interest;

• institution of interest;

• career interest;

• message or query;

• preferred location; and

• information voluntarily included in your communication.

3.5 Career Assessment Information

Where career-assessment or recommendation functionality is available, we may process responses relating to:

• interests;

• preferences;

• aptitudes;

• educational goals;

• subject preferences;

• career objectives; and

• responses to assessment questions.

3.6 Technical and Usage Information

When you access the Platform, certain technical information may be collected automatically, including:

• IP address;

• browser type;

• device type;

• operating system;

• referring URL;

• pages viewed;

• time and date of access;

• interactions with Platform features;

• approximate location derived from technical information;

• diagnostic information;

• cookies and similar identifiers; and

• security logs.

4. INFORMATION YOU VOLUNTARILY PROVIDE

You are responsible for ensuring that information voluntarily supplied to Krishnangan is accurate and that you have authority to provide such information.

You should not provide unnecessary sensitive, confidential or third-party information through free-text fields.

In particular, users should avoid submitting through general enquiry forms:

• passwords;

• financial account credentials;

• payment card details;

• government identity documents;

• medical records;

• highly sensitive personal information; or

• confidential documents

unless Krishnangan specifically requests such information through an appropriate secure mechanism for a legitimate purpose.

5. SOURCES OF PERSONAL DATA

Krishnangan may obtain personal data:

Directly From You

Including through:

• enquiry forms;

• contact forms;

• career assessments;

• registrations;

• consultation requests;

• newsletter subscriptions;

• communications;

• feedback; and

• other Platform interactions.

Automatically

Through:

• server logs;

• cookies;

• analytics technologies;

• security technologies; and

• similar technical mechanisms.

From Third Parties

Where lawfully permitted, information may also be received from:

• educational institutions;

• authorised education partners;

• consultants;

• referral partners;

• service providers; and

• other persons where you have requested or authorised an interaction.

6. PURPOSES FOR WHICH PERSONAL DATA MAY BE USED

Krishnangan may process personal data for lawful purposes including:

• responding to enquiries;

• providing requested information;

• delivering education and career guidance;

• recommending universities, colleges, courses, scholarships or careers;

• conducting or processing career assessments;

• facilitating communication with educational institutions;

• facilitating admission-related enquiries;

• personalising Platform experiences;

• providing consultation services;

• improving search and discovery;

• operating and maintaining the Platform;

• preventing misuse, fraud and security incidents;

• analysing Platform performance;

• improving content and functionality;

• responding to privacy or correction requests;

• maintaining records;

• complying with legal obligations;

• resolving disputes; and

• protecting Krishnangan's legal rights.

Personal data shall not knowingly be processed for a purpose prohibited by applicable law.

7. CONSENT

Where processing is based on consent, Krishnangan shall seek consent in a manner required by applicable law.

Consent should, where applicable, be:

• free;

• specific;

• informed;

• unconditional;

• unambiguous; and

• expressed through clear affirmative action.

Consent shall relate to the specified purposes for which the relevant personal data is requested.

Submission of an enquiry may constitute a request by you for Krishnangan to process the information necessary to respond to that enquiry and provide the requested service, subject to applicable law.

8. WITHDRAWAL OF CONSENT

Where processing is based upon your consent, you may request withdrawal of such consent through the mechanism provided by Krishnangan.

Withdrawal shall not affect the lawfulness of processing undertaken before the withdrawal.

Following a valid withdrawal request, Krishnangan shall cease consent-based processing within a reasonable period where required by applicable law, unless continued processing is authorised or required for another lawful reason.

Certain services may become unavailable where the personal data necessary to provide such services can no longer be processed.

9. ENQUIRY AND CONSULTATION FORMS

When you submit an enquiry or consultation form, the information supplied may be used to:

• understand your education or career interest;

• respond to your request;

• recommend relevant options;

• contact you;

• maintain an enquiry record;

• facilitate requested consultation;

• connect you with an appropriate institution or authorised education partner where applicable; and

• improve Krishnangan's services.

Submission of an enquiry does not guarantee admission, counselling availability, scholarship, placement or any other educational outcome.

10. COMMUNICATION BY PHONE, EMAIL, SMS OR MESSAGING SERVICES

Where you provide contact information and request information, Krishnangan may communicate with you through available channels, including:

• telephone;

• email;

• SMS;

• WhatsApp or comparable messaging services; and

• Platform notifications.

Such communications may include information concerning:

• your enquiry;

• requested guidance;

• courses;

• universities;

• colleges;

• scholarships;

• admission opportunities; and

• related services.

Promotional communications shall be subject to applicable consent, telecommunications and marketing requirements.

You may request to stop receiving promotional communications through an available opt-out mechanism.

Service, administrative, security or legally required communications may continue where appropriate.

11. SHARING ENQUIRIES WITH EDUCATIONAL INSTITUTIONS AND PARTNERS

Krishnangan may operate education enquiry, referral or lead-generation services.

Where you request information about, or express interest in, a particular university, college, course or educational opportunity, Krishnangan may share relevant enquiry information with:

• the relevant educational institution;

• an authorised representative of that institution;

• an authorised education consultant;

• a service or referral partner; or

• another appropriate provider necessary to respond to your request,

subject to applicable law and the purpose communicated at the time of collection.

Information shared should be limited to what is reasonably necessary for the applicable enquiry or service.

Krishnangan may receive commercial consideration from institutions or partners in connection with advertising, referral, lead-generation or other commercial arrangements.

The existence of a commercial relationship does not eliminate applicable privacy obligations concerning the personal data shared.

12. SERVICE PROVIDERS AND DATA PROCESSORS

Krishnangan may engage third-party technology and service providers to operate or support the Platform.

These may include providers of:

• website hosting;

• cloud infrastructure;

• databases;

• data storage;

• spreadsheet or operational record systems;

• analytics;

• email services;

• communication services;

• security;

• content delivery;

• customer support;

• form processing;

• automation; and

• development infrastructure.

Such providers may process personal data on behalf of Krishnangan only to the extent necessary for the applicable services and subject to contractual, technical or other safeguards as appropriate.

13. ARTIFICIAL INTELLIGENCE AND AUTOMATED PROCESSING

Krishnangan may use artificial intelligence, machine learning and automated technologies to support functionality including:

• career recommendations;

• course recommendations;

• educational pathway recommendations;

• search;

• matching;

• classification;

• personalisation;

• summarisation;

• information retrieval;

• content assistance;

• enquiry handling; and

• Platform improvement.

Such systems may process information supplied by users together with structured education-related information.

AI-generated recommendations are intended to support decision-making and do not constitute guaranteed or binding educational outcomes.

Krishnangan does not itself make binding admission decisions on behalf of educational institutions merely through automated recommendation functionality.

14. DATA MINIMISATION

Krishnangan shall endeavour to collect and process only such personal data as is reasonably necessary for the specified purpose.

Users should not be required to disclose information that is materially unrelated to the service requested, except where required by law, security requirements or legitimate operational needs.

15. ACCURACY OF PERSONAL DATA

Krishnangan may take reasonable measures to maintain accurate and consistent personal data where accuracy is material to the purpose for which the information is processed.

Users are encouraged to notify Krishnangan if information supplied by them becomes inaccurate or incomplete.

16. CHILDREN AND PERSONS UNDER 18 YEARS OF AGE

Krishnangan recognises that its education-related services may be of interest to school students and other persons below eighteen years of age.

For purposes of applicable Indian data-protection law, a child may be defined as an individual who has not completed eighteen years of age.

Where required by applicable law, Krishnangan shall obtain verifiable consent from a parent or lawful guardian before processing the personal data of a child.

Where such consent is required and has not been obtained, the child should not independently submit personal data through services requiring such consent.

Parents and lawful guardians are encouraged to supervise the use of the Platform by children.

To the extent required by applicable law, Krishnangan shall not knowingly:

• undertake processing likely to cause a detrimental effect on the well-being of a child;

• undertake prohibited behavioural monitoring or tracking of children; or

• direct prohibited targeted advertising at children.

Where Krishnangan becomes aware that personal data of a child has been processed without required consent, appropriate action may be taken, including deletion or suspension of relevant processing.

17. PARENT AND GUARDIAN REQUESTS

A parent or lawful guardian may contact Krishnangan regarding personal data processed in relation to a child.

Krishnangan may require reasonable evidence:

• of identity;

• of the child's identity; and

• of parental or lawful guardianship authority

before acting upon such a request.

18. COOKIES AND SIMILAR TECHNOLOGIES

The Platform may use cookies and comparable technologies for purposes including:

• essential Platform operation;

• security;

• session management;

• remembering preferences;

• analytics;

• performance measurement; and

• where lawfully implemented, marketing or advertising.

Where required, non-essential cookies shall be subject to the applicable consent mechanism.

Additional information may be provided through Krishnangan's Cookie Policy.

19. ANALYTICS

Krishnangan may use analytics technologies to understand how users interact with the Platform.

Analytics may include information such as:

• page views;

• traffic sources;

• device categories;

• approximate geographic information;

• navigation behaviour; and

• interaction events.

Such information may be used to improve usability, content, performance and services.

20. PERSONALISATION

Where functionality permits, Krishnangan may personalise content or recommendations based upon information including:

• selected careers;

• courses viewed;

• institutions viewed;

• assessment responses;

• location preference;

• education level; and

• stated interests.

Personalisation is intended to improve discovery and does not guarantee that a recommended option is appropriate for every individual.

21. THIRD-PARTY WEBSITES

The Platform may provide links to:

• universities;

• colleges;

• scholarship providers;

• government portals;

• application websites;

• examination authorities; and

• other third parties.

When you leave Krishnangan and access an external website, the processing of your information by that third party is governed by the third party's own privacy practices.

Krishnangan is not responsible for independent third-party privacy practices.

22. PUBLICLY AVAILABLE INFORMATION

Krishnangan may process certain information that is lawfully available from public sources for purposes such as:

• education content;

• institution profiles;

• source verification;

• institutional contact information; and

• public-interest educational research.

Availability of information publicly does not, by itself, permit Krishnangan to disregard applicable privacy, confidentiality, copyright or other legal requirements.

23. WHEN PERSONAL DATA MAY BE DISCLOSED

Krishnangan may disclose personal data where reasonably necessary:

• to fulfil a service requested by you;

• to educational institutions or authorised partners as described in this Policy;

• to technology/service providers;

• to comply with applicable law;

• pursuant to a valid legal process;

• to respond to competent government or regulatory authorities;

• to prevent or investigate fraud, cybersecurity incidents or unlawful activity;

• to establish, exercise or defend legal claims;

• to protect the rights or safety of Krishnangan or others; or

• in connection with a lawful business restructuring, merger, acquisition, investment or transfer, subject to applicable safeguards.

24. BUSINESS TRANSFERS

If Krishnangan undergoes a merger, acquisition, restructuring, financing, transfer of business, sale of assets or similar transaction, relevant personal data may be transferred as part of such transaction where lawfully permitted.

Any successor handling such personal data shall remain subject to applicable data-protection requirements.

25. INTERNATIONAL OR CROSS-BORDER PROCESSING

Certain technology providers used by Krishnangan may operate infrastructure located outside India or process data across multiple jurisdictions.

Accordingly, personal data may, where lawfully permitted, be processed or stored outside India.

Any such transfer or processing shall remain subject to restrictions and requirements imposed under applicable Indian law from time to time.

Where the Central Government imposes restrictions concerning transfers to particular jurisdictions, Krishnangan shall endeavour to comply with such restrictions.

26. DATA RETENTION

Krishnangan shall retain personal data only for such period as is reasonably necessary for:

• the specified purpose;

• providing requested services;

• maintaining appropriate business records;

• responding to enquiries;

• compliance with applicable law;

• fraud prevention;

• cybersecurity;

• dispute resolution; and

• establishment, exercise or defence of legal claims.

Different categories of personal data may be retained for different periods.

Where retention is no longer necessary and no legal basis exists for continued retention, personal data may be deleted, anonymised or otherwise securely disposed of in accordance with applicable procedures.

Backups may continue to contain information for a limited period until overwritten or securely deleted through routine systems.

27. ANONYMISED AND AGGREGATED INFORMATION

Krishnangan may create statistical, aggregated or appropriately anonymised information from Platform activity.

Where information can no longer reasonably identify an individual, Krishnangan may use such information for:

• analytics;

• research;

• service improvement;

• reporting;

• trend analysis; and

• business planning,

subject to applicable law.

28. SECURITY

Krishnangan shall endeavour to maintain reasonable technical and organisational safeguards appropriate to the nature of personal data processed.

Measures may include, where appropriate:

• access controls;

• authentication;

• encrypted communications;

• restricted administrative access;

• secure hosting;

• system monitoring;

• backups;

• logging;

• software updates;

• vulnerability management; and

• security procedures.

However, no internet transmission, database, cloud service or electronic storage method can be guaranteed to be completely secure.

Accordingly, Krishnangan cannot guarantee absolute security.

29. PERSONAL DATA BREACHES

Where Krishnangan becomes aware of a personal-data breach, Krishnangan may:

• investigate the incident;

• take steps to contain or mitigate it;

• preserve appropriate records;

• notify affected persons where required;

• notify a competent authority or the Data Protection Board where applicable; and

• implement corrective measures,

in accordance with legal requirements applicable at the relevant time.

30. YOUR PRIVACY RIGHTS

Subject to applicable law and the commencement and applicability of relevant statutory provisions, you may have rights concerning your personal data.

These may include rights to:

• obtain information concerning personal data being processed;

• seek correction of inaccurate or misleading information;

• complete incomplete personal data;

• update personal data;

• request erasure where legally available;

• withdraw consent where processing is based on consent;

• seek grievance redressal; and

• nominate another individual to exercise applicable rights in circumstances permitted by law.

These rights may be subject to statutory exceptions and procedural requirements.

31. HOW TO EXERCISE YOUR RIGHTS

A privacy request should include information reasonably sufficient for Krishnangan to:

• identify the requester;

• locate the relevant personal data;

• understand the requested action; and

• prevent fraudulent or unauthorised access.

Krishnangan may request reasonable identity verification before providing information, correcting data or deleting data.

Requests may be submitted through the privacy contact mechanism identified below.

32. ERASURE REQUESTS

Where a valid request for erasure is received and applicable law requires deletion, Krishnangan shall endeavour to erase relevant personal data unless continued retention is necessary or authorised for purposes including:

• compliance with law;

• establishment or defence of legal claims;

• fraud prevention;

• security;

• ongoing transactions; or

• another lawful purpose.

An erasure request may result in the inability to continue providing services dependent upon the affected information.

33. GRIEVANCE REDRESSAL

Users may submit privacy-related complaints or grievances to Krishnangan through the contact mechanism specified in this Policy.

Krishnangan shall endeavour to maintain an effective grievance-redressal process and respond within the period required by applicable law.

Users may have the right to approach a competent statutory authority or the Data Protection Board of India where such remedy is available under applicable law.

Nothing in this Policy is intended to require a user to waive any statutory privacy remedy that cannot lawfully be waived.

34. MARKETING PREFERENCES

Where Krishnangan sends optional marketing communications, users may request to unsubscribe or opt out through:

• an unsubscribe mechanism;

• a communication preference control;

• a written request; or

• another mechanism made available by Krishnangan.

Opting out of marketing communications does not necessarily prevent Krishnangan from sending:

• enquiry responses;

• administrative messages;

• security notifications;

• transaction-related messages; or

• communications otherwise authorised or required by law.

35. DO-NOT-CONTACT REQUESTS

Where reasonably applicable, Krishnangan shall endeavour to honour valid requests not to receive further promotional calls or messages.

A minimal record may be retained where necessary solely to ensure that the opt-out instruction continues to be respected.

36. DATA RELATING TO INSTITUTION REPRESENTATIVES

Krishnangan may maintain professional or business contact information concerning authorised representatives of universities, colleges, partners or service providers.

Such information may be processed for:

• verification;

• partnership management;

• content correction;

• business communications;

• enquiries; and

• other legitimate professional purposes.

37. CHANGES TO THIS PRIVACY POLICY

Krishnangan may amend this Privacy Policy from time to time due to:

• changes in law;

• regulatory developments;

• changes in Platform functionality;

• new AI features;

• changes in data practices;

• new services;

• changes in service providers; or

• security requirements.

The revised Policy shall become effective from the date specified at the beginning of the updated version unless applicable law requires another procedure.

Material changes may be communicated through appropriate Platform mechanisms where required.

38. GOVERNING LAW

This Privacy Policy and the processing of personal data by Krishnangan shall be governed by the laws of India, including applicable privacy and data-protection legislation.

Nothing in this Policy shall restrict a statutory right or remedy that cannot lawfully be excluded.

1. EXCLUSIVE JURISDICTION — NAGPUR, MAHARASHTRA

To the maximum extent permitted by applicable law, and subject to the relevant court otherwise possessing lawful territorial, pecuniary and subject-matter jurisdiction, any civil or contractual dispute arising out of this Privacy Policy, the Platform or Krishnangan's processing of personal data shall be subject to the exclusive jurisdiction of the competent courts situated at Nagpur, Maharashtra, India.

This provision does not:

• create jurisdiction where none otherwise exists;

• override the jurisdiction of the Data Protection Board of India or another competent statutory authority;

• restrict mandatory consumer, constitutional, criminal, regulatory or other statutory forums;

• waive privacy rights that cannot legally be waived; or

• override another mandatory jurisdiction provision under applicable law.

Any applicable dispute-resolution provisions contained in Krishnangan's Terms and Conditions shall be read together with this Policy.

40. RELATIONSHIP WITH OTHER KRISHNANGAN POLICIES

This Privacy Policy should be read together with, as applicable:

• Terms and Conditions;

• Disclaimer;

• Cookie Policy;

• Editorial Policy;

• Data Sources Policy;

• Corrections Policy; and

• other policies published by Krishnangan.

Where there is a conflict between this Privacy Policy and a mandatory requirement of applicable data-protection law, the applicable mandatory requirement shall prevail.

41. PRIVACY CONTACT

Questions, requests, complaints or concerns concerning personal-data processing may be submitted through Krishnangan's designated privacy contact mechanism.

Privacy Contact: Randhir.thunukle@gmail.com

Grievance Contact: Randhir.thunukle@gmail.com

Business Address: Flat No. ¼, Vishram Apartment, Rajabaxa, Nagpur - 440003

For requests concerning access, correction, updating, erasure or withdrawal of consent, please identify the nature of the request and provide sufficient information for Krishnangan to reasonably verify and process it.

42. FINAL PRIVACY PRINCIPLE

Krishnangan's privacy approach is based upon the principle that:

Personal data should be collected for legitimate and identifiable purposes, limited to what is reasonably necessary, appropriately protected, and not knowingly used in a manner materially inconsistent with the purpose communicated to the user.

Krishnangan seeks to build an education and career discovery ecosystem in which responsible use of data supports informed decisions while respecting applicable privacy rights.