Privacy Policy

1. Introduction

World Passport ("we", "us", "our", "Data Fiduciary") is committed to protecting the privacy of visitors to our website and participants in our Work-Based Learning programs. This Privacy Policy is issued in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules made thereunder, along with other applicable Indian laws including the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to the extent they remain applicable. It explains what personal data we collect from you ("Data Principal"), why and how we process it, and the rights available to you under the DPDP Act.

2. Definitions

• "Personal Data" means any data about an individual who is identifiable by or in relation to such data.
• "Processing" means any wholly or partly automated operation performed on digital personal data, including collection, storage, use, sharing, and erasure.
• "Data Fiduciary" means World Passport, which determines the purpose and means of processing your personal data.
• "Data Principal" means the individual to whom the personal data relates — i.e., you, our website visitor, applicant, or program participant.
• "Consent Manager" means a person registered with the Data Protection Board of India who enables a Data Principal to give, manage, review, or withdraw consent through an accessible, transparent platform, where applicable.

3. Personal Data We Collect

We collect personal data that you voluntarily and knowingly provide to us for a specified, lawful purpose, including:

• Identity and contact information: name, email address, phone number, and postal address.
• Enrollment and academic information: educational qualifications, program preferences, and application details submitted through enrollment forms, consultation bookings, or WhatsApp/contact requests.
• Communication data: messages, feedback, and correspondence you send us.
• Technical data: IP address, browser type, device identifiers, and pages visited, collected automatically through cookies and similar technologies for legitimate uses such as security and website functioning.

4. Lawful Basis and Consent

We process your personal data only on the basis of your free, specific, informed, unconditional, and unambiguous consent, given through a clear affirmative action (such as submitting a form on this website), or where processing is permitted without consent under the DPDP Act for "certain legitimate uses" — for example, when you voluntarily provide your data for a specified purpose such as requesting a consultation or enrolling in a program. Before requesting consent, we provide you with a notice describing the personal data to be collected and the purpose of processing, in clear and plain language, either in English or any language specified in the Eighth Schedule to the Constitution of India, as applicable. You have the right to withdraw your consent at any time, with the same ease as it was given, without affecting the lawfulness of processing carried out before such withdrawal.

5. Purpose of Processing

We use your personal data strictly for the purposes for which it was collected and consented to, including to:

• Respond to your inquiries and consultation requests
• Process program enrollment and applications
• Provide placement support and career guidance
• Communicate updates regarding our programs and services
• Improve our website, content, and service delivery
• Comply with applicable legal and regulatory obligations

6. Sharing and Disclosure of Personal Data

We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Partner institutions and placement partners involved in delivering your program or placement
• Service providers who process data on our behalf (such as hosting and communication service providers), acting under our instructions
• The Data Protection Board of India, courts, law enforcement, or other government or regulatory authorities, where required by law

7. Cross-Border Transfer of Personal Data

We may transfer your personal data outside India for processing (for example, to cloud service providers), in accordance with Section 16 of the DPDP Act. Any such transfer will only be made to jurisdictions not restricted by the Central Government, and we will ensure appropriate safeguards are in place to protect your personal data during such transfer.

8. Data Retention and Erasure

We retain your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required to comply with any applicable legal obligation. Where you withdraw consent or your personal data is no longer necessary for the specified purpose, and retention is not otherwise required by law, we will erase such personal data and direct our data processors to do the same, unless retention is necessary for a legal proceeding or compliance requirement.

9. Data Security Safeguards

In accordance with our obligations under Section 8(5) of the DPDP Act, we implement reasonable security safeguards — including access controls, encryption in transit, and restricted data access — to prevent personal data breaches. In the unlikely event of a personal data breach, we will notify the Data Protection Board of India and the affected Data Principals in the manner prescribed under the DPDP Act and its rules.

10. Your Rights as a Data Principal

Under the DPDP Act, you have the following rights in relation to your personal data:

• Right to Access Information — to obtain a summary of the personal data we hold about you and the processing activities undertaken.
• Right to Correction and Erasure — to request correction of inaccurate or incomplete personal data, and erasure of personal data that is no longer necessary for the purpose it was collected.
• Right to Grievance Redressal — to have any grievance regarding processing of your personal data addressed by us in a timely manner.
• Right to Nominate — to nominate another individual to exercise your rights under the DPDP Act in the event of your death or incapacity.
• Right to Withdraw Consent — to withdraw previously given consent at any time, as easily as it was granted.

11. Children's Personal Data

We do not knowingly process the personal data of individuals below the age of 18 years without verifiable consent from their parent or lawful guardian, as required under Section 9 of the DPDP Act. We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.

12. Cookies

Our website uses cookies to enhance your browsing experience, analyze site traffic, and understand visitor behaviour. You may control or disable cookies through your browser settings, though this may affect certain website functionality.

13. Grievance Redressal

If you have any grievance regarding the processing of your personal data, you may contact our Grievance Officer using the details below. We will endeavour to respond to and resolve your grievance within the timelines prescribed under the DPDP Act. If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India.

14. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those external sites, and we encourage you to review their privacy policies separately.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, including any rules notified under the DPDP Act, or in our data practices. Any changes will be posted on this page with a revised "last updated" date.

16. Contact Us / Grievance Officer

For any questions, requests, or grievances relating to this Privacy Policy or the processing of your personal data, please contact: Grievance Officer, World Passport Ernakulam, Near St. Georges Syro-Malabar Church, Edapally, Kerala Email: salesheadworldpassportskills@gmail.com Phone: +91 9292173857