Privacy Policy

Last updated 26 July 2026

This policy explains what KULOTHUNGAN KAMALAVENI, a proprietorship trading as CN Academy does with your personal data. It is written to be read, not to be survived.

1. 1. Who is the data fiduciary

   Under the Digital Personal Data Protection Act 2023 the data fiduciary is KULOTHUNGAN KAMALAVENI, a proprietorship trading as CN Academy, at Plot No. 22, Raja Serfoji Govt College, Pudukkottai Road, Lakshmi Nagar, Thanjavur, Tamil Nadu 613005, India.

   That means we decide why and how your personal data is processed, and we are accountable for it.

2. 2. What we collect, and why

   We collect only what a stated purpose needs. Under the DPDP Act that is purpose limitation, and we apply it literally.

   • Enquiry and contact forms: your name, organisation, work email, phone and what you wrote — so we can reply.
   • Enrolment: the details required to enrol you, give you access, and issue a GST invoice.
   • Website use: with your consent, analytics about pages viewed and links used. No analytics event we send contains your name, email or message.

3. 3. The legal basis, and your consent

   We process enquiry and enrolment data because you asked us to provide something — under the DPDP Act, consent given for a specified purpose.

   Analytics and marketing cookies load only if you accept them. If you decline, the site works exactly the same; you simply are not measured. You can change your choice at any time from the link in the footer, and withdrawing consent is as easy as giving it.

4. 4. Who processes your data

   We use third parties to deliver the service: a hosting provider, an email delivery provider, a payment gateway, and — with your consent — analytics providers. They act as data processors on our instructions only.

   We do not sell your data. We do not rent it. We do not share it for anyone else’s marketing.

5. 5. How long we keep it

   Enquiries are kept while they are live and for a reasonable period afterwards, so we can pick up a conversation you resume. Enrolment and invoice records are kept for as long as Indian tax and accounting law requires.

   If you ask us to delete something and we are not required to keep it, we will.

6. 6. Your rights as a Data Principal

   Under the DPDP Act 2023 you have the right to:

   • ask what personal data we hold about you, and how it is processed
   • have inaccurate or incomplete data corrected or completed
   • have data erased where we are not required by law to keep it
   • withdraw consent you previously gave, at any time
   • nominate someone to exercise these rights on your behalf if you die or become incapacitated
   • a readily available means of raising a complaint, set out below

7. 7. Support and dispute resolution

   Data protection queries and complaints go to our support team at support@cybernanban.com. You can contact us at support@cybernanban.com for any enquiry, complaint, refund request or payment-related issue. We aim to acknowledge support requests within 2 business days and to resolve them as quickly as is reasonably possible. Where the DPDP Act sets a shorter period for a particular request, that period applies.

   If you are not satisfied with our response, you may complain to the Data Protection Board of India.

8. 8. Security

   The site is served over HTTPS. Access to personal data is limited to people who need it to do their job. We do not receive or store payment card details at any point — those go directly to the payment gateway.

9. 9. Children

   Our programmes are not directed at children. We do not knowingly process the data of anyone under 18 without verifiable consent from a parent or guardian, as the DPDP Act requires.