1. Who we are
[Placeholder: the legal name of the organisation behind The Big Brains, its registered address and who is responsible for personal data.]
2. What we collect through our forms
[Placeholder: the details each form on this site asks for and why. Big Brains to confirm the list below.]
[Contact form: name, email, optional phone, school or organisation, message.]
[School enquiry: school name, city, contact name and role, email, phone, number of students, classes interested.]
[Mentor application: name, role, organisation, expertise, contact details.]
[Partner enquiry: organisation, contact name, email, how they want to support.]
[Ideathon registration: team details, school and a teacher or guardian contact.]
3. How we use it
[Placeholder: replying to enquiries, organising ideathons, matching mentors through the Big Brains team, and the legal basis for each use. Whether data is ever shared, and with whom.]
4. How long we keep it
[Placeholder: how long enquiries, registrations and student records are kept, and how they are deleted or anonymised afterwards.]
5. Children's data and parental consent
Most students on Big Brains are under 18. Under the Digital Personal Data Protection Act, 2023 (DPDP Act) we treat their data with extra care:
Verifiable parental consent: a student account is set up with a parent or guardian, and it only starts working once the parent or guardian confirms it from their own email. That confirmation is their consent.
The parent or guardian's email gets every email about the account, including password resets and updates on the student's ideas.
No public contact details: student usernames, emails, schools and addresses are never shown on the public site. Published ideas show team display names (first name and last initial) only.
No tracking or targeted advertising: we never use advertising cookies, and analytics never run for signed-in students.
[Placeholder: when photos of students are published, and the consent needed.]
7. Your rights under the DPDP Act
You (or, for a student, their parent or guardian) can:
Access: ask for a summary of the personal data we hold and how we use it. Students can also download their data from their dashboard settings.
Correction and erasure: ask us to correct, complete, update or delete personal data. Students can delete their own account from their dashboard settings.
Withdraw consent: at any time, as easily as it was given. Withdrawing doesn't affect what we did before. We then stop processing the data and delete it within [Placeholder: period], unless a law requires us to keep it.
Grievance redressal: raise a complaint with our grievance officer (below).
Nomination: name someone to exercise these rights for you if you die or become unable to.
To make a request, email [hello@thebigbrains.in]. We will check it is really you (or the student's parent or guardian), and reply within [Placeholder: 30] days.
8. Grievance officer
Our grievance officer handles questions and complaints about personal data: [Placeholder: name and role], The Big Brains, [hello@thebigbrains.in]. [Placeholder: postal address.]
9. Complaints to the Data Protection Board of India
If you're not happy with how we handled your request or complaint, you can complain to the Data Protection Board of India once you have used our grievance process.
10. Changes to this policy
[Placeholder: how and when this policy is updated, and how changes are announced.]