Data Use Policy

What Data We Collect

Kolzeh collects data across two broad categories:

A. Data You Provide Directly

• Registration Data: Full name, mobile number, email address, city, and state
• Academic Data: Class 10/12 marks, stream, percentage, year of passing, college preferences
• Profile Data: Career interests, preferred course, intended intake year
• Communication Data: Messages, queries, feedback, and support requests
• Financial Data (Optional): Income bracket and loan preference (only if you apply for education loan assistance)

B. Data Collected Automatically

• Device Data: Device type, operating system, screen resolution
• Browser Data: Browser name, version, language settings
• Log Data: IP address, date/time of access, referring URL
• Behavioural Data: Pages visited, time spent, click patterns, and scroll depth
• Cookie Data: Session data and preference cookies (see our Cookies Policy)

How Data is Collected

We collect data through the following channels:

Legal Basis for Processing

We process your personal data under the following legal bases as applicable:

• Consent: You have given explicit consent for a specific purpose (e.g., subscribing to marketing emails)
• Contract: Processing is necessary to provide the consultancy services you have requested
• Legitimate Interests: We have a legitimate interest in improving our services and platform (using anonymised analytics)
• Legal Obligation: Processing may be required to comply with applicable laws and regulations

You can withdraw consent at any time without affecting the lawfulness of processing done before withdrawal.

How We Use Your Data

Your data is used exclusively for the following purposes:

Service Delivery

• Matching you with suitable colleges based on your profile and preferences
• Scheduling and conducting counselling sessions
• Coordinating college visits and document submissions
• Facilitating education loan applications with partner banks

Communication

• Sending admission updates, deadlines, and follow-up reminders
• Responding to your enquiries and support requests
• Sending newsletters or promotional content (with your opt-in consent)

Improvement & Analytics

• Analysing aggregated, anonymised usage data to improve our website and services
• Conducting internal research to understand student needs and market trends
• Identifying and resolving technical issues on our platform

Data Sharing & Transfers

Your data may be shared with:

• Partner Colleges: Academic profile shared to facilitate admission, with your knowledge
• Partner Banks: Financial data shared only for loan assistance, with explicit consent
• Technology Service Providers: Hosting, CRM, SMS, and email platforms — bound by data processing agreements
• Analytics Providers: Anonymised behavioural data only
• Government Authorities: Only when required by applicable law or valid legal process

All third-party processors are contractually obligated to handle your data in accordance with applicable data protection laws and may not use it for any purpose other than the agreed service.

We do not transfer personal data outside India unless adequate safeguards are in place and required for service delivery.

Data Storage & Security

All personal data is stored on secure servers. We apply the following security measures:

• AES-256 encryption for stored sensitive data
• SSL/TLS encryption for all data in transit
• Role-based access controls — only authorised personnel can access personal data
• Regular security patching and vulnerability scanning
• Access logs and audit trails for sensitive data operations
• Staff training on data security and responsible handling

Retention: Data is retained for a maximum of 5 years from last interaction, after which it is securely deleted or anonymised. Data held for legal compliance obligations may be retained for a longer period as required by law.

Automated Decision-Making

Kolzeh does not use fully automated decision-making processes that produce legal or similarly significant effects on users. While we may use algorithms to suggest colleges based on your profile, all final recommendations are reviewed by human counsellors before being presented to you.

You always have the right to request human review of any recommendation made to you and to provide additional context that may influence the outcome.

Your Data Rights

You have the right to:

• Access: Request a copy of all personal data we hold about you
• Rectification: Request correction of any inaccurate data
• Erasure: Request deletion of your data where no legal retention requirement applies
• Restriction: Request that we limit how we use your data while a dispute is being resolved
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to data processing carried out on legitimate interest grounds
• Withdraw Consent: Withdraw consent for marketing or non-essential processing at any time

To exercise any of these rights, email us at compliance@kolzeh.com with subject line "Data Rights Request". We will respond within 30 working days.

Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, Kolzeh will:

• Notify affected users without undue delay — and where feasible within 72 hours of becoming aware
• Describe the nature of the breach and likely consequences
• Detail the measures taken to address and mitigate the breach
• Provide contact details for further information

We maintain an internal breach register and will report to relevant authorities as required under applicable Indian data protection law.

Contact & Grievance

For any queries, concerns, or data rights requests related to this Data Use Policy, please contact our Data Protection Officer:

If you are not satisfied with our response, you have the right to lodge a complaint with the appropriate data protection authority in India.