Privacy Policy.

1. About this Policy

This Privacy Policy explains how Freedom Gurukul ("we", "us", "our") collects, uses, discloses, and safeguards your personal data when you visit event.freedomgurukul.com ("the Website"), register for our masterclass events, or otherwise interact with us.

This policy applies to all individuals who provide personal information to us, whether as visitors, registrants, prospective participants, or partners. By using the Website or registering for our events, you consent to the practices described in this policy.

This policy is designed to comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Information We Collect

2.1 Information you provide directly

When you register for our free masterclass through the Website, we collect:

• Full name — to personalise your event communication and your CRM record
• Mobile number — to send event reminders, joining links, and post-event follow-up
• Email address — to send the registration confirmation, joining link, and event materials
• City — for analytics, content localisation, and matching you to relevant cohorts
• Current occupation (if provided) — to tailor recommendations after the masterclass

2.2 Information collected automatically

When you visit the Website, we automatically collect certain technical information through your browser and device:

• IP address and approximate location (country, region) — for security, fraud prevention, and analytics
• Device and browser information — user agent, screen resolution, operating system
• Usage data — pages viewed, session duration, referring URLs, click patterns
• Cookies and similar identifiers — see Section 4 for details

2.3 Information from third parties

We may receive information about you from:

• Advertising platforms (Meta, Google) — when you arrive via an ad, we receive the ad attribution data including UTM parameters (utm_source, utm_medium, utm_campaign, utm_content, utm_term)
• Referral sources — including any referrer URL when you click through from another website

3. How We Use Your Information

We use your personal data only for specific, legitimate purposes:

• Event registration and delivery — confirming your seat, sending the joining link, reminders, and post-event resources
• Communication — responding to your questions, sending educational content related to personal finance entrepreneurship, and notifying you about future masterclasses you may have opted in for
• Customer relationship management — maintaining a CRM record so our coaches can support you appropriately if you become a partner
• Analytics and improvement — understanding how registrants find and use our Website, which helps us improve the masterclass content and the user experience
• Marketing optimisation — measuring the effectiveness of our advertising campaigns through pixels and conversion APIs (in hashed form for new conversion attribution; see Section 4)
• Legal compliance and security — meeting regulatory obligations, preventing fraud, and protecting the rights and safety of our users

4. Cookies & Tracking Technologies

We use cookies and similar technologies to enable site functionality, measure performance, and support our advertising. The categories we use:

• Essential cookies — necessary for the Website to function (e.g., session cookies, security cookies). Cannot be disabled.
• Analytics cookies — help us understand site usage. We may add Google Analytics 4 in the future; this will be disclosed and you will have the option to opt out.
• Marketing/advertising cookies — set by Meta Platforms (specifically _fbp and _fbc) to measure ad effectiveness, and to retarget visitors with our future campaigns. These cookies persist for up to 90 days unless cleared.

You can disable non-essential cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Disabling cookies may impact certain Website features.

4.1 Pixel and Conversions API

We use the Meta Pixel (browser-side) and Meta Conversions API (server-side) to measure ad performance. When you successfully register for a masterclass, a CompleteRegistration event is sent to Meta containing:

• The event timestamp and a unique event ID
• Your name, email, phone, and city — all hashed using SHA-256 before transmission (Meta cannot reverse the hash to identify you, but can match it against existing hashed records they hold)
• Your IP address and browser user agent
• Meta-issued cookies (_fbp, _fbc) if present

This allows Meta to attribute ad-driven conversions accurately. You can opt out of off-Facebook activity tracking in your Meta account settings at facebook.com/off_facebook_activity.

5. How We Share Your Information

We share your personal data only with carefully selected third parties acting as Data Processors on our behalf, each bound by appropriate data protection obligations. The processors we use:

Processor	Purpose	Data Shared
Meta Platforms, Inc. (Facebook, Instagram)	Advertising, conversion tracking, audience matching	Hashed name, email, phone, city, country; IP address; user agent; Meta cookies (_fbp, _fbc); event metadata
Zoho Corporation Pvt Ltd (India)	Customer relationship management (Zoho CRM)	Name, phone, email, city, registration source, lead status
Google LLC	Spreadsheet sync (Google Sheets via Apps Script) — operational backup	Registration ID, name, phone, email, city, registration time
Hostinger International Ltd	Website and database hosting	All technical data necessary for the site to function (IP, request logs, database storage)
WhatsApp / Meta Business	Optional community joining and event communication	Only the data you explicitly provide when you click "Join WhatsApp" — your phone number on WhatsApp, profile name visible to community admins

We may also disclose your information when required by law, court order, or government request, or to protect the rights, property, or safety of Freedom Gurukul, our users, or others.

6. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy:

• Registration data (name, phone, email, city) — retained for as long as you remain in our community, or until you request deletion. We typically review and clean inactive records (no engagement for 24+ months) periodically.
• Marketing/analytics data (IP, cookies, UTMs) — retained in aggregate form for up to 24 months, after which it is anonymised or deleted.
• Compliance records — retained as long as required by applicable Indian law (typically 3-8 years for tax and financial regulatory purposes).

Once retention purposes are exhausted, your data is securely deleted or irreversibly anonymised.

7. Data Security

We implement reasonable technical and organisational measures to protect your personal data, including:

• Encryption in transit — all data is transmitted over HTTPS/TLS
• Hashing of personal identifiers when sharing with advertising partners (SHA-256)
• Access controls — only authorised personnel can access registrant records
• Secure infrastructure — provided by ISO 27001-certified hosting partners
• Regular monitoring for unauthorised access or unusual activity

However, no transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your personal data, we will notify you and the Data Protection Board of India in accordance with the DPDP Act.

8. Your Rights Under the DPDP Act, 2023

As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the following rights regarding your personal data:

• Right to Access — Request a summary of the personal data we hold about you and how we process it.
• Right to Correction — Request correction of inaccurate or incomplete personal data.
• Right to Erasure — Request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
• Right to Withdraw Consent — Withdraw your consent for processing at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.
• Right of Grievance Redressal — Submit a grievance to our Grievance Officer (see Section 12). If unresolved, you may approach the Data Protection Board of India.
• Right to Nominate — Nominate any other individual who shall, in the event of your death or incapacity, exercise these rights on your behalf.

To exercise any of these rights, contact our Grievance Officer using the details in Section 12. We will respond within 30 days of receiving a verifiable request.

9. Children's Privacy

Our Website and masterclasses are intended for individuals aged 18 years and above. We do not knowingly collect personal data from children under 18 without verifiable parental consent.

If you are a parent or guardian and you believe your child has provided us with personal data without your consent, please contact us immediately at hello@freedomlifex.com and we will take steps to delete such information.

10. International Data Transfers

Some of our processors (notably Meta Platforms, Google LLC) operate servers and infrastructure outside India. When your personal data is transferred internationally, we ensure that:

• The receiving country provides an adequate level of data protection, OR
• Appropriate safeguards (such as Standard Contractual Clauses, certifications) are in place, AND
• The transfer complies with the requirements of the DPDP Act, 2023 and any rules notified by the Central Government.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Notify registered users via email if the change materially affects their rights
• For significant changes, request fresh consent before continuing to process data under the new terms

We encourage you to review this policy periodically.

12. Grievance Officer & Contact

If you have questions, concerns, or wish to exercise any of your rights under this Privacy Policy, please contact our Grievance Officer:

If you are not satisfied with our response, you may approach the Data Protection Board of India as established under the DPDP Act, 2023. The Board's contact details will be made available on its official portal once notified by the Central Government.