Privacy Policy

1. Introduction

Welcome to Beads to Brilliance ("B2B", "we", "us", or "our"). We act as the 'Data Fiduciary' and are committed to protecting your personal data and the data of your children. This Privacy Policy outlines how we collect, use, and safeguard personal information when you visit our website, use our student portals, or enroll in our online abacus programs.

This policy is designed to comply with the Digital Personal Data Protection Act (DPDP Act), 2023 and other applicable Information Technology laws in India.

2. Processing of Children's Data

Since our services are designed for children (typically ages 4-13), we take extra precautions. In accordance with Indian law:

• Verifiable Consent: We only process children's data after obtaining verifiable consent from their parent or lawful guardian.
• Safe Processing: We do not engage in tracking, behavioral monitoring of children, or targeted advertising directed at children.
• Purpose Limitation: Data collected through the child's portal is strictly limited to educational and performance-related metrics required for the course.

3. Data We Collect (Grounds for Processing)

We collect personal data based on your explicit consent for the performance of our educational contract. Categories include:

• Identifiers: Parent's name, email address, phone number, and state of residence. Child's first name, age, and grade level.
• Financial Data: Billing information and transaction history (processed securely via PCI-DSS compliant Indian payment gateways). We do not store your raw card details.
• Technical Data: IP addresses, device identifiers, and platform interaction logs for security and performance optimization.
• Educational Data: Assessment results, progress reports, and course attendance records.

4. Your Rights as a Data Principal

Under the DPDP Act 2023, you have the following rights regarding your personal data:

• Right to Access: Summary of personal data being processed and the activities carried out.
• Right to Correction & Erasure: Correct inaccurate data or request deletion of data that is no longer necessary for the purpose.
• Right to Withdraw Consent: You may withdraw consent at any time, subject to legal or contractual obligations.
• Right of Grievance Redressal: Access to a mechanism to resolve complaints regarding data processing.

5. Data Sharing & Security

We do not sell your personal data. We may share data with 'Data Processors' (e.g., cloud service providers, payment gateways) who act on our behalf under strict data protection agreements.

We implement industry-standard security measures, including 256-bit encryption and secure server architectures, to protect your data within the territory of India and in compliance with cross-border transfer regulations.

6. Grievance Redressal

In accordance with the DPDP Act, we have appointed a Grievance Officer. If you have any complaints or wish to exercise your rights, please contact us: