Privacy Policy
Last updated: June 2026 · Applies to ganexa.academy and its sub-domains.
1. Who we are
Ganexa Academy ("Ganexa", "we") operates an online learning platform. We are the data controller for personal data processed through our services. Payments settle in India.
2. Data we collect
Account details (name, email), authentication identifiers, learning activity (enrolments, progress, certificates), purchases and invoices, reviews, community posts, and technical data (device, IP) for security.
3. How we use it
To provide and improve the service, process payments and issue invoices, deliver certificates, send transactional notifications, ensure safety/security, and meet legal obligations.
4. Legal bases
Contract performance, your consent (e.g. marketing, child accounts), legitimate interests (security, fraud prevention), and legal compliance (GDPR, India DPDP Act 2023, COPPA for children).
5. Children (Kidzoo)
Accounts for children under 13 require verifiable parental consent. We practise data minimisation and never serve targeted advertising to children. See our COPPA & Child Safety notice.
6. Your rights
You can access, correct, export, or erase your personal data. Use My Account → Privacy & data to download a copy of your data or delete your account. Indian users have rights under the DPDP Act; EU/UK users under GDPR.
7. Sharing & storage
We use processors (cloud hosting on Google Cloud, payment gateways, email) under contract. Data is stored in India (primary region) with appropriate safeguards for any cross-border transfer.
8. Contact
Privacy questions: privacy@ganexa.academy.
This template is provided for transparency and must be reviewed by qualified legal counsel before production launch in each jurisdiction.