6. Data Retention

6.1. The duration for which we retain your personal data varies depending on the type of personal data and the purposes for which we are processing it. We will retain your personal data only for as long as necessary to fulfill the purposes we collected it for or as otherwise permitted by applicable laws. Additionally, we may keep your information for the duration required to complete our legitimate business operations, including meeting legal, accounting, or reporting obligations. Certain information, such as cached or archived copies, may be retained as necessary for legitimate business purposes.

6.1.1. For instance, when you complete the “How can we help you?” web form, we will use the provided information to contact you and address your request. This data processing is essential to deliver or meet a service requested by or for you, aligning with our legitimate business interests.

6.2. In determining the appropriate retention period for personal data, we consider various factors including the volume, nature, and sensitivity of the data, the potential risks associated with unauthorized use or disclosure, the purposes for which we process the data, alternative means to achieve those purposes, and relevant legal requirements. For further details on our retention periods, please contact us at cs@Maventra.com.

7.1. In instances where we are depending on your consent for the processing of your personal data, you have the right to withdraw your consent without facing any adverse consequences. You can do so at any time by clearly indicating your intention to withdraw consent through a statement or by taking a clear affirmative action. Should you have any inquiries regarding the withdrawal of your consent, please reach out to Maventra’s data protection manager using the contact information provided below.

7.2. It is important to note that withdrawing your consent will not affect the lawfulness of processing based on consent that occurred before the withdrawal.

8. Security of your Personal Data.

8.1. We implement appropriate security measures to safeguard against unlawful or unauthorized processing of personal data, as well as to prevent accidental loss or damage to such data.

8.2. Procedures and technologies are in place to ensure the security of all personal data from the point of collection to the point of destruction. Personal data is only transferred to a data processor if they agree to adhere to our established procedures and policies, or if they implement sufficient measures themselves. Additionally, we maintain written agreements with all data processors to ensure compliance.

8.3. Data security is maintained by upholding the confidentiality, integrity, and availability of personal data, defined as follows:

• Confidentiality ensures that only authorized individuals & personnel can access the data.
• Data Integrity ensures that personal data remains accurate and suitable for its intended purpose.
• Availability ensures that authorized users can access the data when needed for legitimate purposes.

8.4. Stringent security procedures are followed in the storage and disclosure of personal data to prevent accidental loss, destruction, or damage. Maventra utilizes third-party vendors and hosting partners to provide the necessary hardware, software, networking, storage, and related technology infrastructure. Your data is protected through modern encryption techniques, intrusion prevention measures, and access controls.

9. International Transfers.

9.1. When transferring your personal data to other global regions, we ensure an adequate level of protection by implementing at least one of the following safeguards.

9.2. Personal data may be transferred to countries that have been deemed to provide an adequate level of protection as required by regulations and stipulated by European Commission.

9.3. In cases where we engage specific service providers, we may utilize contracts approved by the European Commission, ensuring that personal data receives equivalent protection as it does within Europe.

9.4. For further details on the specific mechanisms employed when transferring your personal data globally, please reach out to us.

9.5 Personal data can only be processed for the purposes we have identified or for compatible purposes that we have outlined.

9.6. The personal data collected and processed must be adequate, relevant, and limited to what is necessary for the specified purposes.

9.7. Personal data collected and processed must be accurate and, where necessary, kept up to date.

9.8. Personal data must not be retained for longer than necessary, considering the purposes for which it was collected. This includes ensuring that personal data permitting identification of the data subject is retained for no longer than required.

9.1.7. Personal data must be safeguarded from unauthorized access, deletion, disclosure, or any other unauthorized uses. This obligation extends not only to external parties outside our organization but also to individuals within our organization who do not require access to the data. Additionally, valid legal grounds must be established for data transfers, which may include utilizing cloud servers located outside the region where the application is hosted or providing access to individuals outside the EEA.

9.1.8. We are committed to complying with data subjects’ rights concerning information about and access to their personal data, as well as other data protection rights. This includes rights to rectify or erase personal data, rights to be forgotten, rights to object to processing (including profiling), rights regarding automated decision-making, and, under the GDPR, rights to data portability.

10. Data Sharing clarifications:

10.1. We may disclose your information to trusted third parties for the purposes outlined in Section 3. We ensure that all third parties have appropriate technical and operational security measures in place to safeguard your personal data. These parties will have access to personal information solely for the performance of specified functions and are prohibited from using it for any other purpose.

10.2. Specifically, we establish written agreements with all our data processors and conduct thorough vetting to ensure their data security measures meet our standards. These agreements include clauses addressing data protection.

10.3. Your details may be shared if we are legally obligated to disclose or share a data subject’s personal data, to fulfil and comply with any legal obligation, enforce contracts or agreements, or to safeguard our rights, property, or the safety of our employees, customers, or others. This may involve reporting incidents to law enforcement authorities and responding to their requests or requirements for information or personal data related to the detection, investigation, and prosecution of offenses.

10.4. In the event of a business asset sale or purchase, we may share your personal data with prospective sellers or buyers, subject to the terms of this privacy policy.

10.5. We maintain accountability for our data protection obligations by demonstrating compliance with data protection rules through written policies and procedures, integrating data protection compliance into our systems and business practices, internally monitoring compliance, and maintaining records of our data processing activities and taking appropriate action if our employees or contractors fail to follow the rules. 

11. Privacy of Minors

11.1 COPPA Compliance: Our Service adheres to the U.S. Children’s Online Privacy Protection Act (COPPA) and is not intended for children under the age of 13. We do not knowingly collect Personal Information from children under 13 years old. If you suspect that a child under 13 has provided Personal Information to us, please contact Maventra using the details provided in the “Contact Us” section below. We will investigate such reports and, if appropriate, remove the Personal Information from our systems. If you are between 13 and 18 years old, you must obtain consent from your parent or guardian to use our Services.

11.2 Children’s Privacy: Our Services and Site are designed for individuals aged 18 and above, and we do not knowingly target or solicit users under 18 years old, nor do we knowingly collect Personal Information from anyone under 18 without parental consent. If we discover that we have collected Personal Information from a child under 16 without verified parental consent, we will promptly delete such information. If you believe we may have collected information from or about a child under 16, please contact us as outlined in the “How to Contact Us” section below.

12. Marketing & Promotional activities

12.1. Our aim is to offer you choices concerning certain uses of your personal data, particularly related to marketing and advertising. When you provide us with your personal data, you will have the opportunity to indicate whether you wish to receive marketing communications from us.

12.2. We may utilize your personal data to understand your preferences and interests, enabling us to tailor our marketing efforts accordingly. This process assists us in determining which products, services, and offers may be relevant to you (referred to as marketing).

12.3. You may rest assured that we do not share your personal data with any third party for marketing purposes.

12.4. You have the right to object to further marketing activities at any time. You can do so by selecting the “unsubscribe” link provided at the end of all our marketing and promotional communications, or by contacting us via email at privacy@Maventra.com.

13. Sale of Business

13.1. Circumstances may arise where it becomes necessary to transfer information, including your personal data, to a third party due to events such as a sale, merger, liquidation, receivership, or transfer of all or a significant portion of our company’s assets. However, such transfers will only occur if the third party agrees to abide by the terms outlined in our Privacy Policy and commits to using your personal data solely for the purposes for which you provided it to us. Any personal data transferred will be limited to what is strictly necessary. In the event of such a transfer, you will be informed, and you will have the opportunity to opt-out if you choose.

14. Rights about your personal information

14.1. You possess options regarding the utilization and sharing of your personal data. Alongside the rights outlined in this section, you may hold additional or more specific rights under applicable law, which we will honor. These rights include the ability to:
(a) Know and access the personal information we retain about you (via a data access request).

(b) Receive personal data you provided to us and request direct transmission of this data to another controller (via a data portability request).

(c) Request access to your personal information (commonly referred to as a “data subject access request”). This allows you to obtain a copy of the personal information we hold about you and verify its lawful processing.

(d) Request correction of any incomplete or inaccurate personal information we hold about you so that the data can be accurate.

(e) Request erasure of your personal information. This empowers you to seek deletion or removal of personal information where continued processing lacks justification. You also retain the right to request deletion or removal where you have exercised your right to object to processing (as detailed below).

(f) Object to the processing of your personal information when we rely on a legitimate interest (or that of a third party) and there is some situation that may cause an objection from your end for processing the data on grounds shared or where processing is conducted for direct marketing purposes.

(g) Not be subjected to automated decision-making or profiling. Your personal information shall not be utilized for any automated decision-making processes or profiling by us.

(h) Request the restriction of processing of your personal information. This permits you to request the suspension of processing personal information about you, for example, if you wish to establish its accuracy or the purpose of its processing.

(i) Request the transfer of your personal information in an electronic and structured format to you or another party (commonly known as the right to “data portability”). This enables you to obtain your data from us in a format usable electronically and transfer it to another party in a similarly usable format.

15. Privacy rights for California residents

15.1 Shine the Light – Under California’s “Shine the Light” law, residents of California who furnish personal information to acquire products or services for personal, family, or household purposes have the right to ask and receive from us, once per year, details about any customer information we shared with other companies for their direct marketing purposes. This includes the types of customer information and the identities and addresses of those companies with whom we shared customer information during the previous calendar year. To request this information, please refer to the “Contact Us” section below and reach out to us with “Request for California Privacy Information” in both the subject line and the body of your message. We will furnish the requested details to you via email in response. Please note that not all information sharing falls under the “Shine the Light” regulations, and our response will only cover information sharing that is subject to these regulations.

15.2 California Consumer Privacy Act.

15.2.1 Right to Know. Under the California Consumer Privacy Act (CCPA) and its accompanying regulations, as modified effective January 1, 2023, by the California Privacy Rights Act (CPRA) and its corresponding regulations (referred to collectively as the “CCPA/CPRA”), California Residents retain the entitlement to request certain details from Maventra. Upon confirmation of your identity, Maventra will furnish the following information, as outlined in the “Contact Us” section below:

• The categories of Personal Information collected by Maventra about you.
• The origins of your Personal Information.
• The intended business purposes for gathering your Personal Information.
• The categories of third parties with whom Maventra shares your Personal Information.
• The specific data points of Personal Information Maventra has gathered concerning you.

Please refer to Annexure-1 for a more comprehensive breakdown of the types of Personal Information we collect, which may be provided through our website. Additionally, please consult the “Types Of Information We Collect” and “Purposes and Legal Basis for Use of Personal Information” sections of our Privacy Policy for further details.

15.3 Right to Deletion. You possess the authority to ask us to delete any personal information we have obtained or retain concerning you. We adhere to such requests, unless certain exemptions apply, such as when the information is essential for fulfilling the transaction or agreement for which it was gathered, or when it is utilized for detecting, preventing, or investigating security breaches, complying with legal obligations, identifying and rectifying errors, or safeguarding another consumer’s ability to exercise their freedom of speech or other rights as mandated by law.

15.4 Opt Out. You may opt out of any marketing by us and from the disclosure of your Personal Information to third parties.

15.5 Right to Correct Inaccurate Personal Information. You have the right to request that we correct inaccurate personal information. We will use commercially reasonable efforts to correct your personal information as directed by you. 

15.6 Non-Discrimination. If you choose to exercise any of your rights under CCPA/CPRA, Maventra will refrain from discriminating against you based on the exercise of those rights. Unless explicitly allowed by CCPA/CPRA, we will not: refuse you goods or services, impose different prices or rates for our goods or services, or offer you a different standard or quality of goods or services because you exercised said rights. As per the present interpretation of CCPA/CPRA, Maventra does not engage in the sale of your Personal Information.

16. California Minors.

If you are a California resident who is under the age of 16 and you are unable to remove publicly available content that you have submitted to us, you may request removal by contacting us at the Contact Us information below. When requesting removal, you must be specific about the information you want removed and provide us with specific information, such as the URL for each page where the information was entered, so that we can find it. We are not required to remove any content or information that:
(1) federal or state law requires us or  a third party to maintain;
(2) was not posted by you;
(3) is anonymized so that you cannot be identified;
(4) you  don’t follow our instructions for removing or requesting removal; or
(5) you received compensation or other consideration for providing the content or information.

Removal of your content or information from the Service does not ensure complete or comprehensive removal of that content or information from our systems or the systems of our service providers. We are not required to delete the content or information posted by you; our obligations under California law are satisfied so long as we anonymize the content or information or render it invisible to other users and the public.

17. Privacy Notice to Residents of Colorado, Connecticut, Virginia, and Utah.

17.1 This section pertains exclusively to individual residents of Colorado, Connecticut, Virginia, and Utah. Privacy laws in these states grant residents specific rights regarding their personal data, which will become effective during 2023. These rights include:

• Right to request Access: You have the right to access and obtain a copy of your personal data held by us.
• Right to Deletion: You can request the deletion of personal data we hold about you.
• Right to Correction: You have the right to rectify any inaccuracies in your personal data.
• Right to Opt Out of Sales and Targeted Advertising: You may opt out of the “sale” of your personal data and our processing of your personal data for targeted advertising purposes, as defined by applicable privacy laws.
• Right to Data Portability: You can request a copy of personal data you previously provided to us in a portable and, where technically feasible, readily usable format, allowing you to transmit the data to another business, if our processing is automated.

17.2 To exercise your rights regarding access, deletion, or correction of your personal data, please submit a request using the contact information provided in the “Contact Us” section below, from the email address associated with your account if applicable. In your request, specify the right you wish to exercise and the personal data affected.

17.3 Please be aware that these rights are subject to certain exceptions. If you are a resident of Colorado, Connecticut, or Virginia and we deny your request to exercise any of these rights, you may appeal our decision by contacting us through the methods outlined at the end of this Policy.

18. Privacy Notice for Residents of Nevada.

For individuals residing in the State of Nevada, Chapter 603A of the Nevada Revised Statutes grants them the right to opt out of the sale of specific covered information collected or to be collected by a website operator about them. Currently, we do not engage in the sale of covered information.

19. Requests by Data Subjects to exercise their rights.

To ensure compliance with our data protection obligations and this policy, as well as our related policies, we have designated a data protection manager. Should you have any inquiries regarding this policy or our adherence to data protection regulations, please feel free to reach out to the data protection manager.ii) Data subjects can initiate a request to access the personal data we hold about them or to exercise their data protection rights by contacting our data protection manager. Upon receipt of such a request, the data protection manager will respond within 30 days.

20. Contact Us.

Our data protection manager can be contacted as follows:

Telephone: 00919892500437
Email: privacy@Maventra.com
Mail: Maventra Learning Solutions Private Limited, 223, Reena complex, Vidyavihar West, Mumbai – 400086.

It is important to note that data subjects retain the right to lodge a complaint with a data protection supervisory authority at any time regarding any concerns pertaining to our handling of their personal data.

21. Changes to the Privacy Policy.

Any revisions to this Privacy Policy will be published on this website to ensure that you remain informed about the information we gather, how we utilize it, and under what circumstances, if any, we disclose it. In the event that we intend to utilize personal data in a manner significantly distinct from what is outlined in this Privacy Policy or disclosed to you at the time of collection, we will notify you via email. You will then have the option to decide whether or not we may employ your information in the new manner.