If you are visiting our website – Classes of information (personal) we collect.

We collect, use, and retain various classes of information (personal) about you, classified as follows:

How do we use your information collected?

Cookies

Our website,www.myoneapply.com, uses cookies, and to learn more about how we use cookies, please refer to our cookies statement on the website.

In general

The following table provides an overview of how we use your information (personal) and the reasons behind it. If we rely on legitimate interests, we’ll clarify those interests.

We collect your information (personal) from Different Sources.

We may obtain personal information about you from the following sources:

From you Directly

We collect information through cookies (refer to our cookie statement on our website) and utilise analytics providers like Google Analytics.

With whom we share your information.

We may disclose your personal information to the following external parties:

We may share your information with our marketing agents and related support service providers and event organisers if we are hosting an external event you attend.

The police and or law enforcement agencies and regulatory authorities like the Information Commissioner’s Office in case of data breaches.

We may share your information with other companies affiliated with Inatuni Limited.

With potential buyers or third parties in the event of business transfers or restructuring.

The duration for which we retain your personal information.

Regarding the use of your personal information for marketing purposes, we will keep it for as long as we have your consent to do so (if we use your personal information with your consent for marketing messages), or for as long as we have a legitimate business or commercial reason to do so, unless you request us to stop.

Where you withdraw your consent to receiving marketing materials or otherwise ask us to stop marketing, we will add your details to a suppression list which; ensures that we remember not to contact you again.

For more details on how to withdraw your consent or request us to stop other marketing activities, please refer to the sections “Withdrawing Consent” and “Objecting to the Use of Your Information.”

If you prefer to withdraw your consent for receiving marketing materials or ask us to stop our marketing activities concerning you (as an individual). We may continue to communicate with you for other purposes as required in our ongoing relationship with you.

Transfers of information internationally.

Being an international organisation, we retain personal information about our suppliers and their activities within the United Kingdom. Some of our agents and service providers may process your personal information outside the United Kingdom on our behalf.

In cases where your information (personal) is processed outside the United Kingdom, we will ensure that it receives the same level of protection as if it were processed within the United Kingdom. We achieve this by implementing contracts with our agents and service providers, incorporating appropriate safeguards such as Standard Contractual Clauses or equivalent measures.

For additional information or if you have any questions, feel free to reach out to our Data Protection Officer at: info@myoneapply.com.

Privacy Notice for Applicants and Students

Purpose of this Notice

Inatuni Limited (“we,” “our,” “us”) is committed to protecting and respecting your privacy.

This privacy policy explains how we collect, use, and safeguard any personal information you provide to us, or that we receive from third parties. We may update or modify this notice from time to time, and any changes will be communicated to you.

As a data controller, we are responsible for deciding how your personal information is processed and used.

What is Personal Information?

Personal information refers to any data relating to a living individual who can be identified from that data. This includes special categories of information such as race, ethnicity, religion, beliefs, physical or mental health, which are subject to additional protections. Information about criminal convictions or offenses is also handled with strict controls.

What is Processing?

Processing means any action we take with your personal information — including collecting, storing, sharing, or deleting it.

The Personal Information We Collect

We collect and hold various personal information about you, some provided directly by you and some obtained from third parties or partners where applicable. This information may include your contact details, educational history, immigration information, health details, and equality monitoring data. Additionally, if you use our services, we may process data related to your academic progress, attendance, course completion, and any policy violations. We also retain contact and educational information even after you complete your course or end your relationship with us.

Why We Process Your Personal Information and the Legal Basis

When you apply for a course or program, we use your personal information to assess your eligibility. Once registered with Inatuni Limited (www.myoneapply.com), we process your data to deliver educational and related services. If your application is unsuccessful or you decline an offer, we retain your information according to our retention policy for statistical, audit, or complaint and appeal purposes. All processing complies with applicable data protection laws. The table below details specific purposes and legal bases, including contractual necessity for application and course monitoring. Without this data, we may be unable to offer you a place or support your enrollment. Additionally, certain information is required for immigration compliance, and failure to provide it may affect visa procedures, for which we are not responsible.

In addition to the purposes outlined above, we may process your personal data in other situations, such as when you visit our website using cookies or when we take photographs at events for publication. These activities are conducted in accordance with our policies, and we will inform you about such processing either at the time of data collection or as soon as reasonably possible afterward.

If the processing of your personal information is required to fulfill a contract and you do not provide the necessary data, Inatuni Limited may be unable to proceed with your application or offer you the course or program you applied for. Similarly, failure to provide immigration-related information may prevent the issuance of a visa for students who require one.

Personal information obtained from third parties or other sources

Recipients who receive information (personal).

From time to time, it may be necessary for us to share your information with third parties. The table below outlines the types of data we may disclose and the respective recipients.

This information will only be shared upon request and where there is a valid legal basis for doing so.

International Transfer of Personal Information

Whenever possible, we aim to keep your personal information within India. If it becomes necessary to transfer your personal data outside India, such transfer will be governed by appropriate safeguards as prescribed under applicable Indian data protection laws, including execution of legally binding data transfer agreements. Such safeguards ensure the protection of your data, in compliance with the requirements laid down under the Information Technology Rules, 2011, and any other relevant regulations issued by Indian authorities.

Retention of data

The duration for which we retain your information (maybe personal) is in the Records Retention System. For further details, please reach out to info@myoneapply.com

Your Rights Regarding the Processing of Your Personal Information

As an individual whose personal information we process, you have the following rights:

• You may request access to your personal data at any time by contacting us at info@myoneapply.com.

• You have the right to correct any inaccuracies or request completion of incomplete information relevant to our processing activities by reaching out to info@myoneapply.com.

• You can ask for the deletion of your personal data under certain conditions, such as when the data is no longer necessary, you withdraw consent, or there is no legal basis for processing. However, deletion may not apply if we are legally required to retain the data or if it serves a public interest. Requests can be sent to info@myoneapply.com.

• You have the right to object to the processing of your data for marketing purposes, and you may also object to processing based on public or legitimate interests unless there are overriding legitimate reasons to continue.

• You may request to restrict or limit how we process your personal data in specific situations and for a limited period.

• If your data is processed automatically based on your consent or contractual necessity, you can request a copy of your information in a commonly used electronic format.

• You have the right to not be subject to decisions that have legal or similar significant effects based solely on automated processing, except in limited circumstances.

• If processing is based on your consent, you can withdraw your consent at any time. We will respond to your requests within one month.

Exercising Your Rights, Questions, and Complaints

For more information about your rights, to exercise any of them, to ask questions, or to file a complaint, please contact our Data Protection Officer at info@myoneapply.com.

Using Your Rights, Raising Questions, and Making Complaints

For more information about your rights, to exercise any of them, for any questions, or to submit a complaint, please contact our Data Protection Officer at info@myoneapply.com.

If you have concerns about how we manage your personal data, you also have the right to lodge a complaint with the Information Central Information Commission, the India’s supervisory authority for data protection. Visit their website at ww.cic.gov.in

Types of Personal Information We Gather:

We collect, utilize, and retain various categories of your personal information, which we have categorized as follows:

Categories of Personal Information

How We Use Your Information

The following table illustrates how we utilise your personal information and the justifications behind it. When these justifications involve legitimate interests, we clarify the nature of these legitimate interests.

Sources of Personal Information

We may collect your personal information from a variety of sources to provide and improve our services. This includes information obtained directly from you or your employer/organization, as well as from individuals or companies who refer or recommend our services. We may also gather data from publicly accessible sources such as Companies House, social networking platforms like LinkedIn, and other internet resources. Additionally, we may receive information from third parties involved in our business operations, including market researchers, intermediaries with whom you have an existing relationship, credit reference agencies, and fraud prevention agencies.

Disclosure of Personal Information

We may share your personal information with a range of external parties when necessary for operational, legal, or regulatory purposes. These parties include agents and service providers who assist in delivering our services, as well as our legal and professional advisors. We may also disclose your information to suppliers working with Stalwart Bridge (OPC) Private Limited (My One Apply), and to law enforcement agencies when required by law or in connection with legal proceedings. In the event of a data breach, we may report the incident to appropriate regulatory authorities, such as the Information Commissioner’s Office. Additionally, we may share your information with other entities owned by or affiliated with Stalwart Bridge (OPC) Private Limited (My One Apply), as well as with potential or actual buyers involved in any business transfer, sale, or corporate restructuring.

If You Choose Not to Provide Your Personal Information

Providing your personal information is necessary for us to effectively deliver our services and meet legal and regulatory requirements. Choosing not to share specific details may delay or obstruct our service delivery, hinder our ability to meet contractual or legal obligations, or prevent us from forming or continuing a business relationship with you or your organisation.

Automated Decision-Making

We do not rely on solely automated processing (i.e., without human intervention) to make decisions that would have a legal or similarly significant effect on you. All key decisions involve meaningful human review.

Retention of Your Personal Information

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including complying with legal, regulatory, accounting, or reporting obligations. When determining how long to keep your data, we consider factors such as the volume, nature, and sensitivity of the information, the risk of potential harm from unauthorized use or disclosure, the reasons for processing the data, whether those reasons can be achieved through alternative means, and any relevant legal or regulatory requirements.

In general, we retain your personal data for the duration of your relationship with us and for up to six (6) years thereafter, unless a longer retention period is required by law.

International Transfers

As an India-based company, we may hold certain personal information related to our suppliers and their activities outside India. We also work with agents and service providers who may process your personal data on our behalf in locations outside India. Whenever your information is transferred internationally, we ensure it is protected to the same standards as if it were processed within India. This is done by entering into agreements with those agents and service providers that include appropriate safeguards, such as standard contractual clauses or other legally approved protections.

Types of Personal Information We Collect

We collect, use, and retain various categories of personal information about students and prospective students, grouped as follows:

We only collect and use sensitive (special category) data when required and in compliance with applicable Indian laws and data protection standards.

How We Use Your Personal Information

We process your personal information for the following purposes, with lawful justification including contractual necessity, legal obligation, or legitimate interests:

The sources of your personal information that we gather.

We may collect your personal information directly from you or through the organization you are associated with, such as during your inquiry, registration, application, or while availing of our services. This includes details you provide voluntarily through forms, emails, phone calls, or other means of communication. We may also collect data when you interact with our website, mobile app, or customer service.

In addition, we may receive information about you from third-party referrals or recommendations made by individuals, educational consultants, or other institutions that believe our services may be of interest to you. Furthermore, personal data may be gathered from publicly accessible sources in India, including official government records, educational portals, professional directories, or other entities that lawfully share such data.

We may also gather data from online sources, such as social media platforms (e.g., LinkedIn), educational forums, or other digital platforms where your profile or activity is visible. In some cases, market research firms, intermediaries, or business associates we work with may also share your personal information with us, especially if they are involved in delivering services or coordinating applications on your behalf. All such data is collected in compliance with applicable Indian laws, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.

Parties with whom we may share your personal information

We may share your personal information with third parties as necessary for operational, legal, or regulatory purposes. These may include agents, partners, and service providers who assist us in delivering our services, such as technology providers, application processors, or marketing platforms, and who are bound by confidentiality obligations.

We may also share your data with our legal advisors, financial consultants, and other professional service providers to ensure compliance with legal requirements and effective business management. Information may also be shared with our suppliers and vendors who help facilitate the provision of our services, subject to appropriate data protection safeguards.

Where required by Indian law or upon request from government authorities, we may disclose your personal information to law enforcement agencies, courts, or statutory authorities. In the event of a data breach, we may inform regulatory bodies such as the Data Protection Board of India under the Digital Personal Data Protection Act, 2023. Additionally, if our company undergoes any form of restructuring, merger, acquisition, or asset transfer, we may need to share your personal data with prospective or actual buyers, provided they also comply with relevant data protection obligations.

If You Choose Not to Provide Your Personal Information

Providing certain personal information is essential for us to deliver our services and meet legal and regulatory obligations. If you choose not to share requested details, it may delay or prevent us from providing services, fulfilling contractual or legal responsibilities, or entering into or continuing a business relationship with you or your organisation.

Automated Decision-Making

We do not make decisions based solely on automated processing (without human involvement) that would have a significant legal or similar effect on you.

Retention of Your Personal Information

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, including to comply with legal, regulatory, accounting, or reporting requirements.

The specific retention period is determined based on several factors, such as the nature and sensitivity of the data, the potential risk from unauthorized use or disclosure, the purpose for which we process the data, and applicable legal obligations. Typically, we retain your data while you are an active user of our services and for up to six (6) years afterward, unless a longer retention period is required by law.

International Data Transfers

As a global company, we may hold certain personal information related to our suppliers and their activities within India. We work with agents and service providers who might process your personal data on our behalf outside of India. When your information is transferred and processed internationally, we ensure it is protected with the same level of security and privacy as required under Indian laws.

To safeguard your data during such transfers, we enter into contracts with these agents and service providers that include appropriate data protection measures, such as standard contractual clauses or other legally recognized safeguards, ensuring compliance with applicable Indian data protection regulations.