Privacy policy

Draft for legal review. This document is published so you can see how ZORK Academy intends to handle these matters. It is not yet in force and may change after review by qualified counsel.

Who we are

ZORK Academy ("we") operates this website. The legal entity name and registered address will be stated here once they are confirmed.

What we collect today

Student accounts are not open yet. The website collects personal data only when you send us one of its forms:

Form	What we ask for	Why
Free consultation, call back	Name, email address, phone number, a convenient time to call, and optionally a course and a message	So an advisor can call you back
Free career advice	Name, phone number	So an advisor can call you back
Course enquiry	Name, email address, the course, your question, and optionally a phone number	To answer your question about the course
Contact	Name, email address, topic, message	To reply to you

With every form we also keep a one-way, keyed hash of your IP address, to stop automated abuse (we never store the raw address), and the version of this notice that was shown to you.

How we use it and who sees it

Our admissions and sales staff use your details only to answer your request and to tell you about the course you asked about. Each new request is emailed to them as soon as it arrives, with a brief SMS summary sent to the configured staff phone. We do not sell personal data, and we do not use it for advertising.

How long we keep it

Up to 2 years after your request is closed, unless you ask us to erase it sooner.

Analytics cookies, only if you agree

If you choose Accept analytics in the cookie banner, Google Analytics through Firebase counts visits and the pages viewed. Nothing is loaded if you decline. See the cookie policy for details and how to change your choice.

Who processes data for us

Provider	What it does for us	What it receives
Google (Firebase App Hosting, Google Cloud)	Runs the website	Your requests to the website, including your IP address
Supabase	Hosts our database	The details you send through a form
EmailJS	Delivers an email notification for each submitted request	The details you send through a form and the configured recipient address
Twilio	Delivers a brief SMS alert for each submitted request	The lead type, name, phone number, optional course, and configured recipient number
Google Analytics (Firebase)	Counts visits, only with your consent	Usage data described in the cookie policy

EmailJS receives the details in a submitted lead so it can deliver a notification to our team. Twilio receives only a brief summary to alert the configured staff phone; the full message and email address are not included in the SMS. The countries where each provider stores data will be listed here before student accounts launch. The providers we will use for video (Bunny Stream) and payments (Razorpay) will be added, with what each receives, before those features go live.

When accounts open

Before student accounts launch, this policy will be updated to cover account, learning, payment and support data, with a clear notice at registration. Accounts will be for people aged 18 and over.

Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask to access a summary of your personal data, correct or update it, have it erased, withdraw consent and nominate someone to exercise your rights. To make a request, use the contact form and choose Privacy or data request.

Grievances

To raise a complaint about how we handle your personal data, or about any other part of our service, use the contact form and choose Privacy or data request or Something else, or call the grievance officer named below. Include enough detail for us to understand the issue; never share passwords or payment details.

We aim to acknowledge grievances within 48 hours and to resolve them within the time allowed by law. If you are not satisfied with our response to a personal-data grievance, you may approach the Data Protection Board of India.