Privacy Policy

This Privacy Policy applies to all services offered by NCLI, including:

• Our official website at https://ncli.in.
• In-person computer training, courses, and educational certifications.
• The Student Dashboard, Learning Management System (LMS), online tests, and typing software.
• Digital service bookings, document printing orders, and e-commerce shop purchases.
• Direct communications via phone, email, WhatsApp, and our interactive website AI chatbot.

We only collect personal information that is strictly necessary for providing educational services, processing orders, or addressing enquiries:

• Personal Contact Information: Full name, email address, mobile number, father's/guardian's name, and delivery address (for shop orders or physical certificates).
• Student Academic Information: Roll number, batch assignment, course enrollment, attendance records, homework assignments, typing practice metrics (WPM, accuracy), and weekly assessment scores.
• Order & Transaction Details: Order ID, product details, billing address, payment status, and Razorpay payment reference IDs. (Note: We never store your credit/debit card numbers, CVVs, or UPI PINs on our servers.)
• Enquiry & Chatbot Logs: Messages sent via contact forms, service booking enquiries, feedback ratings, and AI chatbot conversation histories.
• Technical & Log Data: Internet Protocol (IP) address, browser type, device information, operating system, and access timestamps to ensure system security and prevent automated abuse.

Your data is used strictly for the following legitimate purposes:

• Educational Delivery: Managing course admissions, batch schedules, syllabus progression, and issuing verifiable completion certificates.
• Customer Support & Communication: Sending critical updates regarding batch timings, holiday notices, fee receipts, and responding to your enquiries.
• Order Fulfillment: Printing requested documents, packing and shipping computer hardware/stationery, and providing real-time order tracking.
• Platform Security & Abuse Prevention: Rate limiting API endpoints, blocking malicious login attempts, verifying CSRF tokens, and maintaining audit logs.

Online fee payments and store purchases are processed through Razorpay, India's leading secure payment gateway:

• PCI-DSS Compliance: All payment transactions are handled in a 100% PCI-DSS Level 1 compliant environment with 256-bit SSL encryption.
• No Sensitive Financial Storage: NCLI does not collect, process, or store sensitive card numbers, CVVs, bank passwords, or UPI PINs. All financial credential processing occurs directly on Razorpay's encrypted checkout modal.
• Refund Transparency: When a refund is initiated, it is processed directly back to the original payment source via Razorpay within 5–7 business days, accompanied by an authentic Razorpay Refund Reference ID.

• Authentication & Passwords: Student logins are secured using Roll Number credentials and encrypted password hashes. Passwords are never stored in plaintext.
• Parental Transparency: Parents can view attendance, fees, and test scores using verified student credentials to monitor academic progress.
• Public Certificate Verification: Anyone verifying a certificate on our public verification tool can only check the student's name, course, completion date, and grade using the exact unique Roll Number. No private phone numbers or addresses are exposed.

When you interact with the NCLI website virtual assistant:

• Data Stored: Chat messages, bot responses, timestamps, session tokens, and any contact details you voluntarily submit for admissions or callback requests.
• Retention Periods:
  • Anonymous chat session transcripts: Automatically purged after 90 days.
  • Submitted enquiry leads (Name, Phone, Course): Retained for up to 1 year for academic follow-up or until deletion is requested.
  • Feedback and FAQ training telemetry: Aggregated and anonymized for service quality improvements.
• Security: Chat endpoints are protected by IP rate limiting, SQL prepared statements, and anti-spam verification.

We may share limited data with essential infrastructure providers only to execute requested services:

• Payment Processing: Razorpay Software Private Limited.
• Mapping & Location: Google Maps API (to help students find our institute in Wazirabad, Delhi).
• Font & Asset Delivery: Google Fonts and Cloudflare CDNs for rapid, encrypted web asset delivery.
• Legal Obligations: We may disclose information if mandated by Indian law, a court subpoena, or a lawful government authority request.

We implement multi-layered administrative, technical, and physical security measures:

• HTTPS / TLS 1.3 encryption across all website pages and API endpoints.
• Role-based access controls for institute staff and system administrators.
• Regular database backups and automated vulnerability patching.
• Immediate session invalidation on logout and strict CSRF anti-tampering tokens.

Under the Digital Personal Data Protection Act, 2023, you hold the following rights regarding your personal information:

• Right to Access: You can request a summary of the personal data we hold about you.
• Right to Correction: You can request updates or corrections to inaccurate contact details or academic records.
• Right to Erasure: You can request the deletion of non-essential personal information, chat logs, or enquiry leads.
• Right to Withdraw Consent: You may opt out of non-essential communications at any time.

To exercise any of these rights, email us at info@ncli.in or call 8447075507. Requests are verified and processed within 15 business days.

We use essential cookies and browser local storage to deliver core functionality:

• Authentication Cookies: To maintain secure student and customer login sessions.
• Cart & Preferences: To remember items in your shopping cart and user interface preferences (such as Dark Mode).
• Security Cookies: CSRF protection tokens to prevent cross-site request forgery attacks.

You can manage or disable cookies through your web browser settings at any time.

Advertising on selected public pages

We use Google AdSense on selected public pages. Where ads are served, Google and other third-party advertising vendors may place or read cookies and use web beacons, IP addresses or other identifiers to deliver ads, measure their performance and detect invalid traffic. These advertising technologies are separate from the essential cookies listed above.

Google advertising cookies can enable Google and its partners to personalise ads based on visits to this and other websites. You can manage personalised advertising through Google My Ad Center and learn how Google processes information on partner sites in Google's partner-site privacy explanation. Other participating vendors' personalised advertising choices are available at YourAdChoices. Disabling personalisation does not necessarily disable cookies used for measurement, security or fraud prevention.

If you have any questions, concerns, or grievances regarding this Privacy Policy or our data handling practices, please contact our Grievance Officer: