Privacy Policy
Last updated: 2 September 2026
This notice describes how Sharda IT Services (Unchehara, Madhya Pradesh) processes personal data on shardaitservices.com. It is written for the features that exist on this platform today. It is not a copy of another company’s policy. It is not legal advice and does not claim that the platform is fully compliant with every Indian law without independent professional review.
Who we are
- Data is processed by Sharda IT Services, In front of Unchehra Guest House, Unchehara, Madhya Pradesh. Contact: info@shardaitservices.com, +91 93997 65557.
- We operate websites and software services, Meri Dukaan (local business discovery), professional and company cards, a learning platform (courses, coding lab, assignments, exams), CSC-style browser tools, job/yojana information pages, and insurance information assistance. We are a private business. We are not a government department, insurer, or bank.
What we collect and why
- Account: name, email, optional mobile, password hash (never the plain password), role (customer, student, teacher, vendor, or admin), optional Google account id if you use Google Sign-In, and timestamps for Terms and Privacy confirmation.
- Age band only: you tell us whether you are 18+ or under 18. We do not collect date of birth. Under-18 student accounts also store a parent/guardian name and email as a platform safety contact. That is not presented as verified parental consent under the Digital Personal Data Protection Act, 2023 — LEGAL REVIEW REQUIRED for how children’s data must be handled for this coaching/LMS model.
- Dukaan / vendor: business name, owner name, contact, address, city, optional GSTIN, optional shop latitude/longitude that you choose to publish, photos you upload, product and service listings, WhatsApp/call click counts on the shop page.
- Professional / company / property profiles: identity and listing fields you enter for a public card or listing, including contact numbers you choose to show.
- LMS / student records (private by default): enrollments, lesson progress, coding practice attempts (including source you submit), assignment submissions, exam attempts and scores, certificates. Exam answers and evaluator notes are not published on public profiles.
- Orders: records of paid visiting cards or paid courses when those products are enabled, including Razorpay payment identifiers. We do not store card PAN, CVV, or ATM PIN.
- Enquiries: contact-form leads (name, mobile, optional email, service, message) for sales/support follow-up.
- Privacy tickets: access, correction, erasure, consent-withdrawal, grievance, and content-report requests, including a reference number.
- Technical: session cookies needed to keep you signed in; optional Google Analytics 4 on public pages if you accept analytics (IP anonymisation configured; advertising storage denied). Login and dashboard URLs are treated as private paths in analytics.
- Location: a business pin you save on a dukaan is public shop location. “Near Me” / current-location on the map uses the browser location API in your device to sort nearby shops and is not saved as your personal public profile. You can skip GPS and still use the site.
Where data is stored and who can access it
- Application data is stored in the platform database operated for Sharda IT. Hosting and backups depend on the production environment (LEGAL REVIEW REQUIRED for cross-border processing if any infrastructure is outside India).
- You can view and update much of your own profile from your dashboard. Students see their own learning record. Teachers see submissions for courses they teach. Admins see operational records required to run the platform (users, listings, leads, privacy tickets).
- Other users see only information you publish: dukaan listings, professional cards, optional adult learning-portfolio snippets (course titles / certificate titles / coding solve counts — never exam answers or source code).
- Under-18 accounts cannot publish a public learning portfolio.
Sharing with third parties
- Google: Sign-In (if you choose it) and, if you accept analytics, Google Analytics 4. Advertising / remarketing storage is denied in our analytics configuration.
- Razorpay: payment processing for paid visiting cards or paid courses when those checkouts are used. Card details are entered on the gateway, not stored by Sharda IT.
- Maps: shop coordinates you publish may be shown with map tiles / direction links. Your live GPS is not uploaded as a public user profile.
- WhatsApp / phone: tapping Call or WhatsApp opens those apps with the number the listing owner published. That is a direct contact between you and the listing owner.
- We do not sell personal data. We do not run a separate advertising network on this site as of this notice.
Consent, notice and lawful use
- Account registration requires you to confirm that you have read these Terms and this Privacy Policy. Optional analytics uses a separate Accept / Decline control.
- Some processing is needed to provide the service you asked for (login, dukaan listing, course enrollment, payment confirmation). Indian data-protection law also describes “certain legitimate uses” — whether any of those apply to Sharda IT is LEGAL REVIEW REQUIRED.
- You may withdraw optional analytics from Privacy & data or the cookie banner. Withdrawing consent for an account does not instantly erase backups, invoices, or tickets; file an erasure request instead.
Your rights and how to use them
- Signed-in users can open Privacy & data (/dashboard/privacy) to see account fields, download a JSON copy of their own records, change analytics preference, and file tickets.
- Anyone can file a request at /legal/grievance. You receive a reference number (SIT-PRIV-…). Staff review tickets. We aim to respond in a reasonable time. The Digital Personal Data Protection framework refers to time-bound responses (PIB summary of the Rules mentions a maximum of 90 days for specified requests) — LEGAL REVIEW REQUIRED for the exact duty that applies to this organisation and when it is in force.
- Erasure is a reviewed workflow. We do not automatically delete users, shops, course progress, exam history, assignments, coding submissions or certificates from the website. Some records may need to be kept for disputes, accounting or other lawful reasons — LEGAL REVIEW REQUIRED.
- Correction: update your profile in the dashboard, or file a CORRECTION ticket if a field cannot be edited.
Children
- The Digital Personal Data Protection Act, 2023 treats a child as a person under 18. Teacher, vendor and customer self-registration is limited to 18+. Student accounts may be created with a declared under-18 band plus guardian contact.
- We do not claim verifiable parental consent. We do not run targeted advertising. Public learning portfolios stay off for under-18 accounts. LMS records stay private. LEGAL REVIEW REQUIRED before offering children’s accounts at scale.
Security
- Passwords are hashed. Sessions use an HTTP-only cookie. Administrative functions require an admin role on the server, not only a hidden menu. File uploads are checked on the server (type sniffing, size limits, image processing). Coding lab snippets run in classroom interpreters / a timed JavaScript sandbox — not as unrestricted programs on the application server.
- No online service can guarantee absolute security. See /legal/security-incident for how we handle suspected incidents. Whether and when Indian law requires notice to individuals or the Data Protection Board is LEGAL REVIEW REQUIRED and depends on the commencement of applicable Rules.
Retention
- Account and listing data is kept while the account is active and the listing is needed to provide the service.
- Learning records are kept so that a student can resume a course and so that certificates remain verifiable — until a reviewed erasure or a documented retention schedule says otherwise. LEGAL REVIEW REQUIRED for a formal schedule.
- Privacy tickets and audit rows are kept to show what was requested and what staff did.
Contact
- Privacy and grievance contact: info@shardaitservices.com or +91 93997 65557. Office: In front of Unchehra Guest House, Unchehara, Madhya Pradesh.
- We have not appointed a Data Protection Officer on this website. Whether Sharda IT is a Significant Data Fiduciary, and whether a DPO or consent manager is required, is LEGAL REVIEW REQUIRED. Do not treat any staff title on this site as a statutory designation unless independently confirmed.
