Privacy Policy
How we handle your documents, your data and your complaints — written to the DPDP Act, 2023 and the DPDP Rules, 2025.
Who we are (the Data Fiduciary)
Edunifly LLP, trading as Edunifly International, is the Data Fiduciary for the personal data described here. Registered address: Edunifly LLP, 2nd Floor, MG Road, Kochi, Kerala 682035, India. General contact: contact@edunifly.com.
What we collect and why
| Category | Examples | Purpose | Legal basis |
|---|---|---|---|
| Identity & contact data | Name, date of birth, passport and ID details, address, phone, email | Identifying you to universities, lenders and consulates; communicating with you | Your consent, given when you submit an enquiry or sign a service agreement |
| Academic records | Mark sheets, transcripts, degree certificates, backlog and gap details | Eligibility assessment, shortlisting and university applications | Consent |
| English & language test scores | IELTS, PTE, TOEFL, OET, Duolingo, Goethe/Telc results; MOI letters | Course eligibility and coaching placement | Consent |
| Financial documents | Bank statements, ITRs, salary slips, sponsor affidavits, loan documents | Visa financial evidence and lender introductions | Consent |
| Immigration data | Previous visas, refusals, travel history, biometrics appointment data | Preparing and filing your visa application | Consent |
| Website & usage data | Device type, pages viewed, form submissions | Keeping the site secure and improving it | Legitimate use and consent for non-essential analytics |
We collect only what a university, lender or consulate actually requires. We never sell student data and we never use it for unrelated advertising.
Consent and withdrawing consent
Consent is taken through a clear, itemised notice before we process anything, and it can be withdrawn at any time by writing to grievance@edunifly.com. Withdrawal is as easy as giving consent. Once withdrawn, we stop processing within 7 working days and delete or anonymise the data unless a law requires us to retain it. Withdrawing consent mid-application may make it impossible to continue that application.
Who we share data with (processors and recipients)
Universities and their admission portals you approve; RBI-regulated banks and NBFCs you ask us to approach; consulates, embassies and visa application centres handling your file; and service providers acting on our instructions — cloud hosting and encrypted document storage, email and messaging services, credential evaluation bodies, courier and translation partners. Every processor is bound by written confidentiality and security obligations and may use the data only for the task we give them.
International transfers
Because you are applying overseas, your data is necessarily transferred to universities, lenders, insurers and immigration authorities outside India. Transfers are limited to what the recipient needs, made only to countries not restricted by the Central Government under the DPDP Act, and covered by contractual safeguards with our processors.
How long we keep it (retention)
Active application files: for the duration of the process and 3 years after your intake, so we can support deferrals, re-applications and university queries. Financial and invoicing records: 8 years, as required by tax law. Enquiries that do not convert: 12 months. Marketing consent records: until withdrawn, plus 12 months. After these periods data is securely deleted or irreversibly anonymised.
How to have your data deleted
Email grievance@edunifly.com with the subject "Erasure request" from your registered email address. We verify your identity, confirm which records must legally be retained, delete the rest within 30 days and send you written confirmation of what was deleted.
Security measures
Documents are encrypted in transit (TLS) and at rest, stored in access-controlled cloud storage, and reachable only by the counsellor assigned to your file on a need-to-know basis. We enforce unique staff logins with multi-factor authentication, maintain access logs, run periodic access reviews, and prohibit document storage on personal devices or personal messaging accounts.
Children's data
Applicants under 18 may be registered only by a parent or lawful guardian, whose verifiable consent we obtain before any processing. We do not carry out tracking, behavioural monitoring or targeted advertising directed at children, and we minimise the data we hold about a minor to what the institution strictly requires.
Your rights as a Data Principal
You may ask for a summary of the personal data we hold and how it is processed; ask for correction, completion or updating of inaccurate data; ask for erasure; withdraw consent; nominate another person to exercise your rights in the event of death or incapacity; and raise a grievance. Requests are actioned within 30 days at no charge.
Personal data breach handling
We operate a documented incident response process. On becoming aware of a breach we contain it immediately, assess the impact, notify the Data Protection Board of India and every affected Data Principal without delay in the form required by the DPDP Rules, and publish the remedial steps taken. Breach records are retained for audit.
Grievance Redressal Officer
Ms. Anitha Rajan
Grievance Redressal Officer & Data Protection Contact, Edunifly LLP
Edunifly LLP, 2nd Floor, MG Road, Kochi, Kerala 682035, India
Email: grievance@edunifly.com
Phone: +91 90000 00000 · Monday to Saturday, 9:30 AM – 6:30 PM IST
Under the Consumer Protection (E-Commerce) Rules, 2020, complaints are acknowledged within 48 hours and resolved within 30 days. If you remain unsatisfied, you may escalate to the Data Protection Board of India or the National Consumer Helpline (1915).
Consumer advisory
No visa, admission, scholarship, loan or employment outcome is guaranteed — those decisions rest solely with the university, lender or immigration authority. Edunifly operates a 100% zero-cash policy; all payments are collected only into the Edunifly LLP digital current account, with e-FIRC tracking on inward international remittances. See our Refund & Cancellation Policy for fee and refund terms.
