Privacy Policy

Updated October 8, 2026

Template: replace every [PLACEHOLDER] and have this reviewed by a lawyer before launch.

This Privacy Policy explains how [OWNER / ENTITY NAME] ("UP Paramedical", "we", "us") collects and uses your personal data when you use upparamedical.in. We follow the Digital Personal Data Protection Act, 2023 (DPDP Act) and the rules made under it.

Who we are

UP Paramedical is an independent exam-preparation guide. We are not affiliated with Atal Bihari Vajpayee Medical University (ABVMU), the Government of Uttar Pradesh or any official body.

Data Fiduciary: [OWNER / ENTITY NAME], [REGISTERED ADDRESS]. Contact: [CONTACT EMAIL].

What we collect

Account data: mobile number and/or email address, and your name if you give it.
Enquiry / lead forms: name, mobile number, email (optional), district, qualification and course interest.
Purchases: order details and payment status. Card, UPI and bank details are handled by our payment partner Razorpay; we never see or store them.
Mock tests: your answers, scores and time taken.
Technical data: a hashed (not readable) form of your IP address, browser type and pages visited, used for security and to keep a record of consent.

Why we use it

To give you the service you asked for: your account, downloads, mock test results and purchases.
To send receipts, OTPs and important service messages.
Only if you separately agree: to share your enquiry with the colleges you showed interest in, and for us or those colleges to contact you about admissions by call, SMS or WhatsApp.
To prevent fraud and abuse and to meet legal obligations.

Agreeing to our Terms and this Policy is separate from agreeing to be contacted by colleges. The second consent is always optional, never pre-ticked, and you still get your free result without it. We keep a record of what you agreed to, when, and the exact text you saw.

You can withdraw consent at any time from [PRIVACY CENTRE LINK] or by writing to [GRIEVANCE EMAIL]. After you withdraw, we stop sharing your data with colleges and ask colleges that already received it to stop contacting you.

Colleges you chose, only if you gave the separate consent above.
Service providers who process data for us: hosting, email/SMS delivery, payments (Razorpay), error monitoring. They may use it only to provide their service to us.
Authorities, when the law requires it.

We do not sell your personal data.

How long we keep it

Lead and enquiry data: [RETENTION PERIOD, e.g. 12 months] after your last activity. Order and invoice records: as long as tax law requires. Consent records: as long as needed to prove consent. You can ask us to delete your data earlier, subject to these legal limits.

Your rights

You can ask to see, correct, update or delete your personal data, withdraw consent, and nominate someone to exercise these rights for you. Use [PRIVACY CENTRE LINK] or email [GRIEVANCE EMAIL]. We reply within [RESPONSE TIME, e.g. 30 days].

Security

We use encryption in transit (HTTPS), encrypt sensitive fields at rest, hash IP addresses and limit staff access. No system is perfectly secure; if a breach affects you, we will inform you and the Data Protection Board as the law requires.

Children

Many students are under 18. If you are under 18, please use the site with a parent or guardian's knowledge. [ADD VERIFIABLE PARENTAL CONSENT PROCESS AFTER LEGAL REVIEW.]

Grievance officer

[GRIEVANCE OFFICER NAME], [GRIEVANCE EMAIL], [ADDRESS]. If you are not satisfied with our reply, you may approach the Data Protection Board of India.

Changes

We will post any change here with a new date, and tell you directly about important changes.