This website and the Examrat services are operated by Examrat Learning Private Limited (“Examrat”, “we”, “us”, “our”), a company incorporated under the Companies Act, 2013, with its registered office and office at No. 677, 1st Floor, Suite No. 392, 27th Main, 13th Cross Road, HSR Layout, Sector 1, Bengaluru, Karnataka 560102.
Under the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we act as a Data Fiduciary in respect of the personal data we collect from you. You are the Data Principal.
Corporate Identity Number (CIN): U80301KA2021PTC152082
This policy applies to personal data we collect through examrat.com, our forms, WhatsApp and phone conversations, our mentorship and admissions consulting services, our events and campus activities, and any other channel where we interact with you. By using our services, you acknowledge that you have read this policy.
It does not apply to websites or services operated by others, including colleges, examination authorities and our consultant partners, each of which has its own privacy practices.
We collect only what we actually need to help you. The table below is the complete list of the personal data we collect, the purpose we collect each category for, and where it comes from. We do not collect personal data outside these categories, and we do not use any category for a purpose not listed against it without first telling you and, where required, asking for your consent.
Before publishing: confirm every row below against Examrat’s internal data inventory map (every form field, CRM field, WhatsApp/call workflow, analytics tool and spreadsheet). Delete any field you do not actually collect and add any you do. This table must describe what is collected on the ground, not illustrations.
| Category | Personal data we collect | Purpose | Source |
|---|---|---|---|
| Identity & contact | Full name; mobile/WhatsApp number; email address; city; state | Responding to your enquiry; providing our services; service communications | You, via our forms, calls or WhatsApp |
| Age & age declaration | Your declaration of whether you are 18 or over; date of birth (if collected); the date, time and channel of that declaration | Determining whether parental/guardian consent is required (section 6) | You, at the consent notice or when creating an account or submitting a form |
| Academic | Class or year of study; board; stream; target courses; entrance exams taken or planned; scores, ranks and percentiles; preferred colleges and locations | Giving you personalised guidance; preparing applications; matching you with a partner or mentor | You, during counselling or in forms |
| Parent / guardian | Guardian’s name, relationship to you, mobile number and email address; the guardian’s confirmation that they are an adult; the record of their consent and how it was verified | Obtaining and recording verifiable parental/guardian consent where you are under 18; communicating with your guardian about the service | You or your parent/guardian |
| Budget preference | Indicative budget range for course fees | Recommending options you can realistically afford | You, voluntarily, during counselling |
| Service records | Counselling notes; your queries; applications we assist with; your admission status; partner or mentor assigned; session history | Delivering and following up on our services; resolving disputes | Generated by us as we serve you |
| Transaction | Invoices; amount and payment status; payment reference ID; GSTIN and billing name where applicable. We do not receive or store your card or bank credentials. | Billing; accounting and tax compliance; refunds | You and our payment gateway |
| Consent records | What you consented to, when, through which notice and channel, and any withdrawal | Demonstrating lawful consent as required under the DPDP Act | Generated by our consent notice and systems |
| Technical | IP address; device and browser type; pages visited; referring source; approximate location derived from IP address; cookie identifiers | Operating and securing the website; and, only with your consent, analytics (section 13) | Automatically, via cookies and similar tools |
| Communications | Emails; WhatsApp messages; call recordings, only where we tell you at the start of the call that it is being recorded | Responding to you; quality and training; resolving disputes | When you contact us or we contact you |
| Careers | Name; contact details; college; year of study; CV; portfolio or work links; answers to application questions | Assessing applications for jobs and internships at Examrat | You, when applying |
We do not collect your Aadhaar number or a copy of your Aadhaar card, including for age or guardian verification. We also do not collect your PAN, bank account credentials, passwords, caste certificates, biometric data or health data as part of our services. Please do not send us such documents. If a college or authority requires any of them for an application, you should submit them directly to that college or authority.
We do not sell your personal data. Ever.
We process your personal data only for lawful purposes for which you have given consent, or for legitimate uses permitted under the DPDP Act. Specifically, to:
Where we rely on your consent, we ask for it clearly, for a specific purpose, before or at the time of collection, and you may refuse. Our notices are available in English and, on request, in any language listed in the Eighth Schedule to the Constitution of India.
You can withdraw your consent at any time, and it should be as easy to withdraw as it was to give. Use the “Manage consent” link in the footer of every page of our website, write to us at yu@examrat.com, or message us on WhatsApp. Withdrawal applies going forward: it does not affect processing already carried out lawfully, and we may still keep data we are required by law to retain. If you withdraw consent, we may no longer be able to provide some or all of our services to you.
Many of the students we help are under 18. We take this seriously.
If you are under 18 years of age, you may use our services only with the involvement of your parent or legal guardian. Before we process your personal data, we obtain verifiable consent from your parent or guardian, as required by Section 9 of the DPDP Act and the rules made under it.
If you tell us you are under 18, or you do not answer, we treat you as under 18. Until your guardian’s consent is verified, we collect only what we need to contact your guardian, and we do not provide personalised services or share your data with anyone.
If we later learn that a user is under 18 and verifiable guardian consent was not obtained, we stop processing and delete their data, except any minimal record we must keep by law.
In relation to children, we do not undertake tracking or behavioural monitoring, and we do not direct targeted advertising at children. We also do not process children’s data in a way likely to cause any detrimental effect on their well-being.
If you are a parent or guardian and believe your child has given us personal data without your consent, contact us at yu@examrat.com and we will delete it promptly.
Please read this section carefully. A core part of how Examrat works is connecting students with vetted local admissions consultants who become official Examrat partners in their region and course.
If you ask us for admissions help, we may share your name, contact number, course and college preferences, city, and relevant academic details with one such partner so they can assist you. We will tell you when we do this and seek your consent first. You may decline, and you may ask us not to share your details with any partner.
Our partners are contractually required to use your data only to assist with your admission, to keep it confidential, to comply with applicable law including the DPDP Act, and not to sell or misuse it. However, once a partner receives your data, they act as an independent Data Fiduciary in respect of their own dealings with you, and their own privacy practices apply. We are not responsible for their independent acts, though we will act on complaints and can remove partners from our network.
We keep personal data only as long as necessary for the purpose it was collected for, or as required by law, whichever is longer. As a general guide:
After these periods, we delete or irreversibly anonymise the data, unless the law requires otherwise.
We take reasonable security safeguards to prevent personal data breaches, as required under Section 8(5) of the DPDP Act and the rules made under it, and reasonable security practices and procedures under Section 43A of the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, which recognise the international standard ISO/IEC 27001.
Our information security programme is being aligned with ISO/IEC 27001 and includes:
No system is perfectly secure. We cannot guarantee absolute security, and you share information with us at your own risk. Please never send us passwords, OTPs or bank credentials.
As a Data Principal under the DPDP Act, you have the right to:
To exercise any of these, write to yu@examrat.com from your registered email or message us from your registered number. We will respond within 30 days. We may ask you to verify your identity first, so that we do not disclose your data to someone else.
The DPDP Act also places duties on you. You agree to give us accurate information, not to impersonate anyone else, not to suppress material information where required, and not to file false or frivolous complaints. Providing false information can affect our ability to help you.
Our website uses two kinds of cookies and similar technologies:
If you declare that you are under 18, optional analytics and advertising cookies stay switched off, and we do not track, behaviourally monitor or target advertising at you. You can change your choices at any time through the “Manage consent” link in the footer, or delete cookies through your browser settings.
With your consent, we may send you helpful content, guidance, reminders and offers by WhatsApp, SMS, email or phone. Every marketing email carries an unsubscribe link, and you can reply STOP on WhatsApp or tell us on a call to opt out at any time. We will still send you essential service messages relating to a service you are using.
Our calls and messages are also subject to TRAI regulations on commercial communications. If you are on the DND registry and still receive promotional messages from us in error, please tell us and we will fix it.
Our website and content link to third-party websites such as college websites, examination authorities (for example NTA, KEA and COMEDK) and news sources. We do not control those sites and are not responsible for their content or privacy practices. Read their policies before sharing data with them.
We primarily store and process data in India. Some of our service providers (for example cloud hosting, email and analytics) may process data on servers outside India. Where that happens, we transfer data only to countries not restricted by the Central Government under the DPDP Act, and we require appropriate contractual protections. If you use our future services relating to admissions abroad, we will tell you separately about the transfers that involves.
If a personal data breach occurs, we will notify the Data Protection Board of India and each affected Data Principal in the manner and within the timelines required under the DPDP Act and the rules made under it, and we will tell you what happened and what you can do about it.
If you have any concern about how we handle your personal data, please contact our Grievance Officer. We take complaints seriously and would much rather fix a problem than have you escalate it.
Grievance Officer (as required under the Information Technology Act, 2000 and the DPDP Act, 2023)
Name: Shashwat Mishra
Email: sm@examrat.com
Phone: +91 63630 49581
Address: No. 677, 1st Floor, Suite No. 392, 27th Main, 13th Cross Road, HSR Layout, Sector 1, Bengaluru, Karnataka 560102
We will acknowledge your complaint within 48 hours and resolve it within 30 days.
If you are not satisfied with our response, you may approach the Data Protection Board of India in accordance with the DPDP Act.
We may update this policy as our services, or the law, change. We will post the revised version here with a new “last updated” date, and where the change is significant, we will tell you directly. Please check back from time to time.
Questions about this policy, or about your data:
Examrat Learning Private Limited
Email: yu@examrat.com
Phone / WhatsApp: +91 63630 49581
Office: No. 677, 1st Floor, Suite No. 392, 27th Main, 13th Cross Road, HSR Layout, Sector 1, Bengaluru, Karnataka 560102
Student-first guidance, beyond the rat race. Helping students reach great futures with a lot less stress.