Privacy Policy

• Under the DPDP Act, 2023, Jagadguru Kripalu University operates as a "Data Fiduciary" that determines the purpose and means of processing your personal data.
• By interacting with the Website, registering for an account, or submitting an admission application, you provide your explicit, unambiguous, and freely given consent for the processing of your data for specified educational and administrative purposes.
• You maintain the right to withdraw your consent at any time by contacting our Data Protection & Grievance Officer (contact details in Section 10 below), though withdrawal may restrict access to specific student services or portals.

We collect data required to facilitate institutional admissions, online testing, payment validation, campus networking, and digital classroom operations:

• Identity & Registration Data: Full name, date of birth, gender, nationality, photograph, and educational qualifications.
• Once enrolled, we maintain your academic records, attendance, fee payments, and campus-related information such as hostel and transport details.
• Contact Data: Permanent and communication addresses, mobile numbers, and personal email addresses.

Your data is shared with, but not restricted to the following entities;

• Technology partners who run our infrastructure services and authorised payment gateways.
• Certification bodies (e.g. AWS, AAFM) when you enrol in programmes with professional certifications
• Regulators and government bodies (UGC, AICTE, AYUSH, State Government of Odisha) as required by law
• Employers and internship partners, for placement purposes, with your knowledge
• Financial Transaction Data: Bank account details, UPI handles, or card networks used during fee remittance. (Note: Complete payment card details are processed exclusively by PCI-DSS compliant payment gateways and are never saved directly on our servers).
• Technical & Network Logs: IP addresses, login parameters, browser versions, hardware metrics, bandwidth usage logs, device names, and session activity records on our learning platforms.
• CCTV cameras operate across campus for safety. Students & visitor entry records are also maintained.

Communication and Contact Preferences (DND Consent)

By submitting your mobile number or email address to us, whether through the Contact Us form, admissions portal, or any other channel, you consent to us contacting you by call, SMS, email, or WhatsApp about your enquiry or application, even if your number is registered under DND (Do Not Disturb).

You can an opt-out of marketing communications at any time by emailing us at info@jku.edu.in, submitting an “opt-out” request to it-admin@jku.edu.in or clicking unsubscribe in our institutional emails.

How Long We Keep It

We keep your information only as long as needed for the purpose it was collected, or as required by law, after which it is securely deleted or anonymised.

For further information, please refer to Section 8, 'Data Retention & Storage of Data'.

Your Rights

Under the Digital Personal Data Protection Act, 2023, you can:

• Ask us what information we hold about you
• Ask us to correct or delete your information
• Withdraw consent for optional uses such as marketing at any time
• Complain to us, or escalate to the Data Protection Board of India

For a full statement of your rights as a Data Principal, see Section 7, 'Your Statutory Rights under the DPDP Act, 2023'.

External Links

• Our website links to external sites such as antiragging.in, social media platforms, and partner websites. These sites have their own privacy policies and Jagadguru Kripalu University is not responsible for how they handle your data. We recommend reviewing their policies before submitting any information on those sites.

Your personal data is collected and processed strictly for legitimate institutional uses, including:

• Reviewing academic eligibility and managing the formal university admission workflow.
• Provisioning unique student portal credentials, learning management access, and digital library logs.
• Processing academic tuition fees, managing online payment settlements, and evaluating structured refund requests.
• Administering online examinations, validating digital identity during test proctoring, and compiling academic marksheets.
• Distributing mandatory institutional alerts, fee schedules, or placement notifications via email or SMS.

• Infrastructure Architecture: In line with top national academic standards, our production web servers are configured behind enterprise Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), and robust firewalls. Development and updates are carried out in isolated staging environments prior to secure deployment.
• Security Audits: In accordance with Section 43A of the Information Technology Act, 2000, our systems undergo periodic digital vulnerability testing and application-level audits to ensure the integrity of all collected data assets.
• Data Breach Protocols: In the event of an accidental personal data breach, the University will immediately activate its Incident Response Plan, mitigate the vulnerability, and formally notify the Data Protection Board of India (DPBI) and the affected users as mandated by the DPDP Act, 2023.

The University does not sell, swap, or rent user data to third parties for commercial marketing. We share personal data only with the following categories of recipients:

• Regulatory Compliance: statutory educational regulators such as the UGC, AICTE, AYUSH, or government audit bodies, when legally required.
• Integrated Processors: designated data processors, including cloud hosting providers, integrated payment gateways, and third-party libraries necessary to resolve application errors.
• Certification and Placement Partners: certification bodies (e.g. AWS, AAFM) for programs involving professional certification, and employers or internship partners for placement purposes, with the student's knowledge.
• Law Enforcement and Legal Process: Indian law enforcement agencies or cybercrime cells, upon receiving verified legal notices or warrants under applicable statutes.

• Session Cookies: The Website uses cookies and transient tracking pixels to manage active user sessions, simplify the log-in process, and secure student portal instances. Users can configure their browsers to refuse cookies, though certain interactive features may experience performance drops.
• Network Monitoring: The University reserves the right to monitor institutional network data and bandwidth distribution to maintain network safety, verify site availability, and investigate improper or illegal activities.

As a "Data Principal" under Indian law, you possess enforceable rights regarding your personal data:

• Right to Access: Request a summary of the personal data currently being processed by the University and the identities of data processors with whom it has been shared.
• Right to Correction and Erasure: Request the rectification of inaccurate details or the absolute deletion of personal records when the purpose of collection has been fulfilled.
• Right to Grievance Redressal: Access a fast-track internal dispute framework to report data mismanagement before escalating concerns to regulatory authorities.
• Right to Withdraw Consent: Withdraw previously given consent for optional or non-essential processing activities, such as marketing communications, at any time, without affecting the lawfulness of processing carried out before such withdrawal.

• Personal data collected for temporary processes (such as dynamic session tracking or unsubmitted applications) is routinely purged.
• Retention: Information is retained only as long as necessary for institutional/legal purposes, after which it is securely deleted or anonymised.
• Enrolled student records, financial invoices, and formal academic sheets are securely archived for statutory periods to satisfy institutional archiving requirements under Indian educational frameworks.

Where a User is below 18 years of age, as contemplated in the Terms and Conditions, the University processes such User's personal data only with the verifiable consent of a parent or lawful guardian, obtained in accordance with Section 9 of the DPDP Act, 2023. The University does not undertake tracking, behavioural monitoring, or targeted advertising directed at any User it has actual knowledge is a child, except where such processing is for legitimate educational, safety, or child-protection purposes as permitted under the Act.

Your Statutory Rights (DPDP Act, 2023): You hold the right to access, correct, erase, or withdraw consent for your personal data, or escalate unresolved complaints to the Data Protection Board of India (DPBI).

For reporting any data privacy concerns, contact our designated Data Protection & Grievance Officer: