Draft notice: This policy is a working draft prepared in good faith and is pending final legal review. The final version applicable to you may differ once reviewed by counsel in the applicable jurisdiction.
1. Who we are
Diplomexa is operated for INR billing by Factskoot Eduwellness Private Limited (India) and for foreign-currency billing by Destineze Educational Voyages FZCO (UAE). Each entity is the controller of personal data processed for transactions it bills.
2. Applicable laws
This Policy is drafted with reference to (a) the Digital Personal Data Protection Act, 2023 (India) ("DPDPA") and applicable rules; and (b) the UAE Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data ("UAE PDPL"). Where you transact with Factskoot, India laws apply; where you transact with Destineze, UAE laws apply.
3. Data we collect
- User profile data (name, email, phone, role)
- Student / delegate data and education affiliation
- Parent / guardian data (where minor consent applies)
- Institution / organiser data
- Event registration, allocation and schedule data
- LMS progress, video watch progress, assignments, quiz attempts, position papers
- Certificates and badges
- Safe payment metadata (never card numbers or CVV)
- Support conversation data and CSAT
- Device, browser and log data
- Cookies (see Cookie Policy)
4. How we use data
We use data to deliver the platform, run conferences and learning, issue certificates, process payments, prevent fraud, comply with law and improve our services.
5. Legal basis / consent
Processing relies on (i) your consent for marketing, optional features and minor processing; (ii) performance of a contract for event delivery and billing; and (iii) legitimate business interests and legal obligations under DPDPA / UAE PDPL.
6. Data sharing
We share data with organisers and institutions you join, payment gateways (Razorpay, Stripe), email/WhatsApp delivery providers, and tax/legal authorities where required. We never sell your personal data.
7. International data transfer
Data billed by Factskoot is processed primarily in India; data billed by Destineze may be processed in the UAE or its sub-processors' regions, subject to appropriate safeguards.
8. Minor data and parental consent
Where a participant is below the applicable age of digital consent, registration requires verifiable parent or guardian consent. Schools and organisers are responsible for obtaining institutional permissions.
9. Data retention
We retain data for the duration of the conference engagement plus any period required by law. Retention windows for logs and messages are configurable per organisation under "Compliance Settings".
10. Your rights
You may request a copy of your data, request correction, request deletion of your account, or withdraw consent at any time via the Privacy & Data Center in your dashboard. Indian users have rights under DPDPA Sections 11–14; UAE users have rights under UAE PDPL Articles 13–22.
11. Security
We use access controls, encryption-in-transit, audit logging and tenant isolation. We never store full card numbers, CVV or sensitive payment credentials.
12. Contact / Grievance Officer / DPO
For India queries: info@factskoot.com. For UAE queries: please reach Destineze via the contact details on the Grievance page. Final grievance-officer and DPO appointments will be published after onboarding is complete.
13. Updates
We may update this Policy. Material changes will be notified through the dashboard or by email.