ILMAcademy takes the privacy of its customers seriously. This policy explains precisely what personal data we collect, why we collect it, how we use it, and what rights you hold over it under Indian law.
1. Data Controller Identity
The data controller responsible for your personal information is Pritam, trading as ILMAcademy, operating at ilmacademy.shop. Registered address: B-96, Sky Gold Apartments, Gandhi Path West, Vaishali Nagar, Jaipur — 302038, Rajasthan, India.
For all privacy-related matters, contact: support@ilmacademy.shop
2. Data We Collect
We collect the following categories of personal data when you make a purchase:
- Identity Data: Full name as provided at checkout
- Contact Data: Email address (used for order and download delivery)
- Phone Data: Mobile number (used for order support and payment gateway compliance)
- Transaction Data: Order reference number, product purchased, amount paid, payment timestamp, and payment method type (e.g., UPI, card) — as recorded by our payment gateway
- Technical Data: IP address, browser type, and device type (collected automatically by server logs for security and fraud prevention)
We do not collect sensitive personal data as defined under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 — including passwords, financial account details, or biometric data.
3. Purpose of Processing
Your personal data is used exclusively for the following purposes:
- Delivering your purchased digital product(s) to your email address
- Processing and recording your transaction for accounting and legal compliance
- Providing customer support for order, delivery, or access issues
- Sending transactional communications (order confirmation, download link, support replies)
- Fraud detection and platform security
- Complying with applicable Indian tax and financial regulations
We do not use your data for behavioural advertising, profiling, or sale to third parties.
4. Legal Basis for Processing
Processing of your personal data is carried out on the following legal bases under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (India):
- Contract Performance: Processing necessary to fulfil your purchase and deliver the digital product
- Legal Obligation: Processing required for GST compliance, financial record-keeping, and regulatory reporting
- Legitimate Interests: Processing for fraud prevention and platform security
5. Data Sharing
ILMAcademy does not sell, rent, or trade your personal data. Data is shared only in the following limited circumstances:
- Cashfree Payments: Your name, email, and phone number are transmitted to our payment processor solely to initiate and complete your transaction. Cashfree's data handling is governed by their own privacy policy and RBI regulations.
- Legal Authorities: If required by applicable law, court order, or governmental directive, we may disclose personal data to competent Indian authorities.
- Successors: In the event of a business transfer or acquisition, personal data may be transferred to a successor entity under equivalent privacy protections.
6. Payment Data
ILMAcademy does not store, process, or have access to your card numbers, UPI credentials, or net banking passwords. All payment data is handled exclusively by Cashfree Payments India Pvt. Ltd., which is PCI-DSS Level 1 certified and RBI-regulated. We receive only a transaction reference ID and payment status confirmation.
7. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described in this policy:
- Transaction records (name, email, order details, amount): Retained for a minimum of 7 years as required by Indian financial and tax regulations
- Support correspondence: Retained for 2 years from the date of the last interaction
- Server logs: Automatically purged after 90 days
8. Your Rights
Under the Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you
- Right of Correction: Request correction of inaccurate or incomplete data
- Right of Erasure: Request deletion of your data, subject to our legal retention obligations
- Right to Grievance: Lodge a complaint with us or with the Data Protection Board of India
To exercise any of these rights, write to: support@ilmacademy.shop. We will respond within 30 days.
9. Cookies
ilmacademy.shop uses session cookies only — small, temporary files stored in your browser to maintain the state of your shopping session (e.g., preserving checkout form data). These cookies are deleted automatically when you close your browser.
We do not use tracking cookies, advertising cookies, analytics pixels, or any third-party tracking scripts on this platform. We do not operate Google Analytics, Meta Pixel, or any equivalent service.
10. Security
We implement the following measures to protect your personal data:
- SSL/TLS encryption for all data transmitted between your browser and our server
- Access controls restricting order data to authorised personnel only
- Server-side input validation to prevent injection and forgery attacks
- HMAC-SHA256 webhook signature verification for all payment gateway communications
While we implement industry-standard safeguards, no system is entirely immune from breach. In the event of a data breach affecting your rights, we will notify you as required under applicable law.
11. Children
ILMAcademy's products and platform are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our platform, please contact us immediately and we will delete it promptly.
12. Contact & Grievances
For privacy queries, data requests, or grievances, contact our Data Protection Officer:
Pritam (ILMAcademy)
B-96, Sky Gold Apartments, Gandhi Path West
Vaishali Nagar, Jaipur — 302038, Rajasthan, India
Email: support@ilmacademy.shop