Privacy Policy

[registered entity name and address to be published before enrolment opens] is the data fiduciary (under India’s Digital Personal Data Protection Act, 2023) and the controller (under the GDPR, where it applies) for the personal data described in this policy. For any privacy question or request, write to privacy@medhavio.com or hello@medhavio.com.

This website is a brochure site. It has no accounts, no login, no comment fields and no forms that submit personal data to us. Specifically:

• We set no cookies and store nothing in your browser’s local or session storage.
• We run no analytics, advertising, session-recording or fingerprinting services.
• We embed no third-party widgets, videos, maps or chat tools in the pages.
• Fonts are served from this website itself, so loading a page sends no request to a font provider or other third party.

The only personal data we receive from an ordinary visit is what your browser must send to any web server in order to deliver the page.

The site is served by our hosting provider, which records technical request data such as your IP address, the page requested, the time of the request, referring page and browser user-agent. These logs exist to deliver the site, keep it available and defend it against abuse and attacks. That is our legitimate interest in operating a secure website, and under the DPDP Act it is a legitimate use connected with providing the service you asked for.

We do not use these logs to build a profile of you or to identify you, and we do not combine them with other data. Our host retains them for a short period under its own retention schedule, after which they are deleted.

When you write to an address listed on this site, we receive your email address, your message and anything you choose to include in it. We use it only to answer you and to keep a record of the exchange. We keep correspondence for as long as needed to deal with your enquiry and any follow-up, and then delete it. We never sell it, rent it or use it for unrelated marketing.

We use personal data only for the purpose it was given for. Today that means: delivering and securing this website, and replying to messages you send us. We do not bundle several purposes into a single tick-box, and we do not treat a visit as consent to marketing.

Where we ever rely on your consent, you can withdraw it at any time by emailing privacy@medhavio.com. Withdrawing is as easy as giving it, and it takes effect for everything after the moment you withdraw.

The site links out to our profiles on YouTube, Instagram and X. Those are ordinary links: nothing loads from those platforms until you click, and no data is shared with them while you are simply reading this site.

Once you follow a link, you are on that platform and its own privacy policy and cookies apply. Anything you post, like or send us there is handled by that platform under its terms, and we can only see what the platform shows us. We are not responsible for how those companies process your data.

We do not use cookies of any kind — no strictly necessary cookies, no preference cookies and no tracking cookies. That is why you will not see a cookie banner here. If we ever introduce cookies that are not strictly necessary, we will ask for your consent first and update this policy before doing so. Our Cookie Policy sets this out in more detail.

This site is aimed at adults and at students old enough to enrol in professional training. It is not directed at children, and we do not knowingly collect personal data from a child.

Where a learner is under 18, the DPDP Act requires verifiable consent from a parent or legal guardian before we process their personal data, and prohibits tracking, behavioural monitoring and targeted advertising directed at them. We do none of those things to any visitor. Enrolment for under-18s will not open until a verifiable parental-consent step is in place. If you believe a child has sent us personal data, contact privacy@medhavio.com and we will delete it.

We do not sell or trade personal data. The only parties that process data on our behalf are our hosting and email providers, which act on our instructions under a contract. Those providers operate global infrastructure, so request data may be processed outside your country under the safeguards their contracts require.

We may disclose data where the law obliges us to, or where it is necessary to establish or defend a legal claim.

Depending on where you live, you have the right to access the personal data we hold about you, to have it corrected, completed, updated or erased, to restrict or object to how we use it, to receive a copy in a portable format, to withdraw consent where we relied on it, and to nominate another person to exercise these rights on your behalf if you die or become incapacitated. You may also complain to the Data Protection Board of India, or to your national data protection authority.

To exercise any of these, email privacy@medhavio.com. We will respond within the period the applicable law allows, and we will not charge you or treat you differently for asking.

If you are unhappy with how we have handled your data or your request, you can escalate to our Grievance Officer, at grievance@medhavio.com, or write to us at the registered address above. We acknowledge grievances promptly and aim to resolve them within the timeframe the law prescribes.

The named grievance officer is published here before enrolment opens; until then, grievance@medhavio.com and hello@medhavio.com both reach the team directly.

The site is served over HTTPS and sends security headers that restrict framing, block content-type sniffing, enforce a same-origin content security policy and disable access to your camera, microphone and location. No system is perfectly secure, but because we collect so little, there is very little to expose. If a breach ever affects your personal data, we will notify you and the relevant regulator as the law requires.

If we add a feature that changes what we collect — an account system, a newsletter, an enrolment form, payments or analytics — we will update this policy and change the effective date at the top before that feature goes live. Material changes will be announced on the site.