Website: https://staging.hiteshpandey.in/
Business: HITESHPANDEY.IN
Proprietor: Hitesh Pandey
Udyam Registration Number: UDYAM-UK-07-0052144
Last Updated: 2 September 2026

1. Who We Are

HITESHPANDEY.IN is an online education and examination-preparation business operated as a sole proprietorship by Hitesh Pandey.

In this Privacy Policy:

“HITESHPANDEY.IN,” “we,” “us,” and “our” means Hitesh Pandey, Proprietor of the sole proprietorship business operated under the trade name HITESHPANDEY.IN.

“Website,” “Site,” or “Platform” means https://staging.hiteshpandey.in/ and associated webpages, portals, subdomains, applications, and digital interfaces operated or controlled by us.

“User,” “you,” and “your” means an individual accessing or using the Website or Services.

“Customer” means an individual who purchases or otherwise lawfully acquires a Product or Service.

“Student” means an individual using an educational or examination-preparation Service, whether or not that individual is the purchaser.

“Services” means our educational, examination-preparation, testing, digital-content, mentorship, guidance, communication, support, and related services.

“Product” means any physical or digital educational product, course, test, test series, study material, subscription, or other product offered by us.

“Personal Data” means digital personal data or personal information relating to an identifiable individual, to the extent such information is regulated by Applicable Law.

“Applicable Law” means laws, rules, regulations, notifications, directions, and legally applicable requirements governing privacy, data protection, information technology, electronic communications, consumer protection, taxation, or other relevant matters applicable to us or to the relevant processing activity.

2. Scope of This Policy

This Privacy Policy explains how we may collect, receive, use, disclose, store, protect, retain, delete, or otherwise process Personal Data in connection with:

(a) the Website;

(b) User Accounts and registration;

(d) mock tests and test series;

(e) study materials and digital products;

(f) purchases and transactions;

(g) examinations, assessments, and learning activity;

(h) mentorship, guidance, and customer support;

(i) emails, notifications, and other communications;

(j) Website security, administration, analytics, and technical operation; and

(k) other Services provided or made available by us.

This Privacy Policy should be read together with our Terms & Conditions, Refund & Cancellation Policy, Course/Test/Content Access Policy, Copyright & Intellectual Property Policy, and other applicable Website policies.

3. Applicable Privacy and Data-Protection Law

We intend to process Personal Data in accordance with Applicable Law.

This may include applicable Indian data-protection and information-technology requirements, including the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and other applicable laws, rules, regulations, notifications, directions, or amendments, to the extent and from the date they apply to the relevant processing.

The commencement and applicability of provisions of the DPDP Act and the DPDP Rules may occur in phases. Accordingly, references in this Policy to rights, obligations, consent, notices, security, retention, grievance mechanisms, or other requirements shall apply to the extent the relevant legal provisions are in force and applicable to us and the relevant processing activity.

Nothing in this Policy is intended to represent that a provision is presently enforceable against us if that provision has not yet commenced or otherwise does not apply.

We may update this Policy when applicable legal requirements or our processing practices change.

4. Personal Data We May Collect

We seek to collect and process Personal Data that is reasonably necessary for the purposes described in this Policy and the Services that you use.

The information actually collected depends on your interaction with the Website and the Services you use.

4.1 Account and Registration Information

When you create or maintain an Account, we may collect:

first name;
last name;
full name;
username;
email address;
mobile or telephone number where requested or provided;
password or authentication information;
account identifiers;
profile information;
account preferences;
registration information;
information necessary to authenticate, verify, secure, or administer the Account.

Passwords and authentication secrets are intended to be handled using appropriate security mechanisms. We do not intend to store passwords in plain, readable form.

You should not provide unnecessary sensitive personal information in your account profile or registration forms.

4.2 Purchase and Transaction Information

When you purchase, enrol in, subscribe to, or otherwise obtain a Product or Service, we may process:

Product or Service purchased;
order number or order ID;
transaction reference;
payment status;
transaction amount;
currency;
coupon or discount information;
invoice or receipt information;
refund information;
cancellation information;
chargeback or payment-dispute information;
information necessary for accounting, taxation, fraud prevention, dispute resolution, and legal compliance.

Payment information may be processed directly by the applicable payment service provider.

We do not intend to store complete card numbers, CVV values, banking passwords, UPI PINs, OTPs, or similar payment authentication credentials on our own systems unless a particular lawful and technically supported service specifically requires such processing.

4.3 Learning and Examination Activity

When you use our educational or examination Services, we may process information such as:

Products or courses enrolled in;
lessons or modules accessed;
learning progress;
completion status;
mock-test attempts;
answers submitted;
scores and marks;
rankings or comparative results where applicable;
time taken or time spent;
attempt history;
certificates or completion records;
educational preferences;
feedback;
support information associated with your learning activity.

This information may be necessary to provide, administer, secure, evaluate, and improve educational Services.

4.4 Communications and Support

When you contact us or communicate with us, we may process:

your name;
email address;
mobile number where provided;
message or query;
attachments or documents you voluntarily provide;
order or transaction information;
Account information;
information necessary to investigate and respond to the communication.

We may retain relevant communications where reasonably necessary for customer support, quality assurance, dispute resolution, security, legal compliance, or record keeping.

4.5 Technical, Usage, and Security Information

When you access or use the Website, information may be processed automatically through the Website, hosting infrastructure, security systems, analytics tools, and other technical services.

Depending on the technology and services actually in use, this may include:

IP address;
browser type and version;
operating system;
device type and technical characteristics;
approximate network information;
date and time of access;
referring page or source;
pages or content requested;
session information;
login activity;
error information;
diagnostic information;
security logs;
information relating to suspected unauthorized access, abuse, fraud, or other misuse.

An approximate location may sometimes be inferred from technical information such as an IP address for security, analytics, fraud-prevention, or technical purposes.

4.6 Cookies and Similar Technologies

We may use cookies and similar technologies, including local storage, pixels, tags, or equivalent technologies, where necessary or appropriate for the operation of the Website and Services.

These technologies may be used for purposes including:

authentication and login;
session management;
security;
remembering necessary preferences;
core Website functionality;
analytics and measurement;
performance monitoring;
fraud prevention and abuse detection;
communication or other features; and
other purposes associated with a service or feature that is actually enabled on the Website.

The specific technologies and cookies used on the Website may change when we add, remove, update, or reconfigure Website features, plugins, or third-party services.

5. Google Services Used Through Site Kit

We use Site Kit by Google, Google’s official WordPress plugin, to connect the Website with certain Google services.

At the time this Privacy Policy was last updated, the following Site Kit services are connected:

Google Analytics
Google Search Console
PageSpeed Insights

Site Kit supports multiple Google services, but the fact that a service is supported by Site Kit does not mean that every such service is active on our Website.

5.1 Google Analytics

We use Google Analytics to understand Website traffic, usage, interactions, and performance.

Google states that its default Analytics implementation may collect information including:

number of users;
session statistics;
approximate geolocation; and
browser and device information.

Google Analytics may also use first-party cookies, including the _ga cookie, to distinguish users and sessions.

Google also explains that Analytics uses cookies and similar identifiers to measure interactions and that Website operators should provide appropriate information and consent controls where required by applicable privacy law.

We use Analytics for statistical and analytical purposes, such as understanding which pages and content receive traffic, how visitors navigate the Website, and how the Website performs.

We do not intentionally configure Google Analytics to request or send information to Google that directly identifies an individual, such as a user’s password or payment authentication credentials.

Where an Analytics configuration permits additional features or data processing, those features may be governed by additional Google settings and policies.

5.2 Google Search Console

We use Google Search Console to monitor, maintain, troubleshoot, and understand the Website’s presence and performance in Google Search.

Search Console may provide information such as search impressions, clicks, search queries, click-through rates, search positions, and other information concerning how the Website appears in Google Search. Site Kit surfaces Search Console information within the WordPress administrative dashboard.

Search Console is primarily a Website-owner and administrator-facing service. Its connection through Site Kit does not itself mean that we receive a user’s private Google Account information.

5.3 Google PageSpeed Insights

We use Google PageSpeed Insights through Site Kit to monitor Website performance and receive performance-related recommendations and information.

Site Kit states that PageSpeed Insights is enabled by default as part of Site Kit setup and that, within Site Kit, it operates in the WordPress administrative dashboard rather than adding code to the public Website for ordinary visitors.

Accordingly, PageSpeed Insights should not be described as a visitor-tracking mechanism merely because it is connected within Site Kit.

Google’s own PageSpeed Insights website may separately use cookies when a visitor accesses Google’s PageSpeed Insights service directly. Such processing is governed by Google’s applicable policies and is distinct from the Site Kit dashboard integration.

5.4 Google’s Processing

The Google services described above are operated by Google and may involve Google’s own collection, processing, storage, and use of information.

Google’s handling of information is also subject to Google’s applicable privacy policies and terms.

We do not control Google’s independent processing activities.

6. Sources of Personal Data

We may receive Personal Data:

(a) directly from you;

(b) automatically through your use of the Website;

(d) from technology and service providers used to operate or secure our Services;

(e) through your communications with us;

(f) from lawful third parties where reasonably necessary for security, fraud prevention, support, dispute resolution, or legal compliance; and

(g) from other sources where permitted by Applicable Law.

7. Purposes for Which We Use Personal Data

We may process Personal Data for purposes including the following.

7.1 Account Administration

To create, authenticate, maintain, secure, and administer User Accounts.

7.2 Providing Products and Services

To provide courses, tests, educational content, study materials, mentorship, guidance, digital products, subscriptions, and other requested Services.

7.3 Processing Transactions

To process orders and payments, verify transactions, issue invoices or receipts, administer refunds and cancellations, and maintain financial records.

7.4 Educational and Examination Functionality

To administer tests and assessments, calculate scores, display results, record progress, issue certificates, maintain attempt history, and provide related educational functionality.

7.5 Website Operation and Improvement

To operate, maintain, troubleshoot, analyze, monitor, secure, and improve the Website and Services.

7.6 Security and Fraud Prevention

To detect and prevent unauthorized access, account compromise, account sharing, fraud, piracy, abusive conduct, attacks, security incidents, and other misuse.

7.7 Customer Support

To respond to questions, complaints, technical problems, refund or cancellation requests, and other service-related communications.

7.8 Service and Transaction Communications

To send necessary communications relating to:

Account registration and verification;
password and security matters;
purchases and payments;
order status;
access to Products or Services;
tests and examinations;
important service announcements;
changes affecting the Website or Services;
legal or policy notices; and
responses to inquiries.

7.9 Marketing and Promotional Communications

Where permitted by Applicable Law and where the required consent or other lawful basis applies, we may send communications concerning:

courses;
tests;
educational products;
study materials;
events;
offers;
promotions;
announcements;
new or updated Services; and
other products or Services offered by HITESHPANDEY.IN.

Where marketing consent is obtained, it may be withdrawn or managed through an available unsubscribe mechanism or by contacting us.

Withdrawal from marketing communications does not necessarily stop essential account, security, transaction, legal, or service-related communications.

7.10 Legal, Regulatory, and Business Purposes

To comply with Applicable Law and valid legal, judicial, regulatory, governmental, accounting, taxation, or law-enforcement requirements and to establish, exercise, or defend legal rights and claims.

8. Consent and Other Lawful Grounds for Processing

Where Applicable Law requires consent, we will seek consent through an appropriate mechanism.

Consent, where relied upon, is intended to relate to the purposes and processing described in the applicable notice.

Other processing may be carried out where permitted or required by Applicable Law without relying solely on consent, including processing necessary for providing requested Services, fulfilling transactions, complying with legal obligations, maintaining security, preventing fraud or misuse, protecting rights, or other legally recognized purposes.

Where consent is the basis for processing, you may have the right to withdraw that consent in accordance with Applicable Law.

Withdrawal of consent does not:

automatically make earlier lawful processing unlawful;
necessarily require deletion of information that we are legally required or otherwise permitted to retain; or
necessarily stop processing carried out on another lawful basis.

Where withdrawal causes a service to become unavailable, we may explain the consequences to you.

9. Registration, Terms, Privacy Policy, and Communications Consent

During Website registration, we may present a single checkbox through which the User confirms acceptance of the applicable Terms and Policies and provides the consent or acknowledgment described in the registration form.

The registration notice may include consent to receive promotional or marketing communications in addition to necessary account and service communications.

The Privacy Policy explains the relevant categories and purposes of processing, while the Terms & Conditions and other Website policies govern the contractual and service relationship.

Where Applicable Law requires a separate consent, notice, or withdrawal mechanism for a particular processing activity, we will use the mechanism required by such law, notwithstanding the use of a single registration checkbox for the general registration process.

10. Sharing and Disclosure of Personal Data

We do not sell Personal Data as a commodity.

We may disclose, transmit, or otherwise make relevant Personal Data available where reasonably necessary for the purposes described in this Policy and as permitted by Applicable Law.

Recipients may include:

payment processors;
banks or payment-service providers;
website hosting providers;
cloud and storage providers;
learning-management or educational technology providers;
video-hosting or digital-rights-management providers;
email, SMS, messaging, and communication providers;
analytics and measurement providers;
security and fraud-prevention providers;
customer-support providers;
technical service providers;
professional advisers;
accounting and taxation service providers;
auditors;
legal advisers;
insurers or other business-service providers where relevant;
competent governmental, regulatory, judicial, or law-enforcement authorities where required or permitted by law; and
other persons where disclosure is necessary to protect our rights, Users, Customers, Students, Website, or Services and is permitted by Applicable Law.

11. Third-Party Service Providers

We may use third-party service providers to help operate, secure, maintain, analyze, and provide the Website and Services.

Depending on the services actually used, such providers may process certain Personal Data on our behalf or may independently process information under their own privacy terms.

Examples include providers of:

hosting and infrastructure;
payments;
email and communications;
analytics;
security;
customer support;
educational technology;
content delivery;
storage;
technical administration.

The specific providers used may change from time to time.

We seek to use reasonable contractual, technical, and operational safeguards appropriate to the relevant processing and Applicable Law.

12. Payment Providers

Payments may be processed by third-party payment providers.

Depending on the payment method selected, the payment provider may receive payment and transaction information directly from you.

We may receive information such as:

transaction ID;
payment status;
amount;
payment method;
refund status;
order information; and
other information necessary to reconcile, confirm, refund, or investigate a transaction.

Payment providers operate under their own terms and privacy policies, which should be reviewed before completing a transaction.

13. International Processing and Transfers

Some third-party service providers, technology providers, cloud platforms, payment providers, communication providers, or other vendors may process or store information outside India.

Where Personal Data is transferred, stored, or otherwise made available outside India, we will seek to comply with the requirements applicable to such transfer or processing under Applicable Law.

14. Data Security

We take reasonable technical and organizational measures appropriate to the nature of the Personal Data and the risks associated with its processing.

Depending on the Services and technology used, security measures may include:

access controls;
authentication;
role-based administrative access;
secure connections;
encryption where appropriate;
restricted access to Personal Data;
backups;
logging and monitoring;
malware protection;
security updates;
vulnerability management;
fraud detection;
incident-response procedures.

However, no Website, Internet transmission, electronic storage system, or security mechanism can be guaranteed to be completely secure.

Accordingly, while we take reasonable measures to reduce the risk of unauthorized access, loss, misuse, alteration, disclosure, or destruction, we cannot guarantee absolute security.

15. Account Security

You are responsible for maintaining the confidentiality of your Account credentials and for taking reasonable steps to protect your device and Account.

You must not knowingly share your password or authentication credentials with another person or permit unauthorized use of your Account.

If you suspect unauthorized access, compromise, or misuse of your Account, please notify us promptly at:

connect@staging.hiteshpandey.in

16. Data Retention

We retain Personal Data only for as long as reasonably necessary for the purpose for which it was collected or otherwise processed, unless a longer period is required or permitted by Applicable Law.

Different categories of Personal Data may therefore be retained for different periods.

Retention may be necessary for purposes including:

providing continuing access to Services;
maintaining Account records;
maintaining course and test records;
transaction, accounting, and taxation requirements;
dispute resolution;
fraud prevention;
security investigations;
enforcement of our policies;
legal claims; and
compliance with legal or regulatory requirements.

Where Personal Data is no longer required and there is no lawful basis for continued retention, we may delete, anonymize, or otherwise securely dispose of it in accordance with our applicable practices and Applicable Law.

17. Account Closure and Deletion Requests

You may request closure or deletion of your Account where such functionality is available or where a deletion request is otherwise permitted under Applicable Law.

Account deletion does not necessarily require immediate deletion of every record.

We may retain information where necessary or permitted for:

(a) compliance with legal or regulatory obligations;

(b) accounting or taxation;

(d) fraud prevention and security;

(e) dispute resolution;

(f) establishment, exercise, or defence of legal claims;

(g) enforcement of our Terms & Conditions or other policies; or

(h) another lawful purpose.

Where deletion is legally available, we will take reasonable steps to process an eligible request.

18. Your Privacy and Data-Protection Rights

Subject to Applicable Law, you may have rights relating to your Personal Data, which may include:

(a) requesting information about Personal Data processed by us;

(b) requesting correction of inaccurate or incomplete Personal Data;

(d) withdrawing consent where processing is based on consent;

(e) managing or withdrawing marketing consent;

(f) seeking grievance redressal; and

(g) exercising other rights available under applicable data-protection law.

The availability, scope, conditions, and method of exercising these rights depend on the law applicable to the relevant processing and on the provisions that are in force at the relevant time.

19. How to Exercise Privacy Rights

For privacy requests, consent-related requests, deletion requests, correction requests, or privacy grievances, contact:

connect@staging.hiteshpandey.in

For Account-related requests, you should preferably contact us using the email address associated with your Account, where reasonably possible.

You should provide sufficient information for us to understand and process your request.

We may request reasonable information to verify the identity or authority of the requester before disclosing, modifying, or deleting Personal Data, particularly where doing so is necessary to prevent unauthorized access.

We will process valid requests within the period required by Applicable Law.

Where a request cannot be fully complied with because of a legal requirement, security reason, dispute, or other lawful exception, we may explain the applicable limitation where required.

20. Children and Individuals Below 18

Our Services are primarily intended for individuals who have completed 18 years of age.

For purposes of the applicable Indian data-protection framework, a child means an individual who has not completed eighteen years of age, subject to Applicable Law.

We do not knowingly encourage or permit a child to independently create an Account or purchase Services using the child’s own details where parental or lawful guardian involvement is required.

Where a Service is made available to a child, registration, consent, verification, and related requirements will be handled through the child’s parent or lawful guardian to the extent required by Applicable Law.

We will not knowingly process children’s Personal Data for prohibited purposes, including prohibited behavioural monitoring or targeted advertising, except to the extent expressly permitted by Applicable Law.

If we become aware that a child has provided Personal Data in circumstances where such processing was not lawfully authorized, we will take reasonable steps appropriate to the circumstances and Applicable Law.

A parent or lawful guardian who believes that a child has provided Personal Data to us improperly may contact:

connect@staging.hiteshpandey.in

21. Marketing and Promotional Communications

Where permitted by Applicable Law and where the required consent or other lawful basis applies, we may send promotional or marketing communications relating to HITESHPANDEY.IN.

These may include information about:

new courses;
test series;
examinations;
study materials;
educational programmes;
offers;
discounts;
events;
announcements; and
other educational Services or Products.

You may opt out of promotional communications through the unsubscribe mechanism provided in the communication or by contacting:

connect@staging.hiteshpandey.in

Opting out of marketing communications will not necessarily stop necessary communications concerning your Account, transactions, security, purchased Services, legal notices, or important operational matters.

22. Cookies and Browser Controls

Cookies and similar technologies may be controlled in various ways depending on the technology involved.

You may be able to:

block or delete cookies through your browser settings;
clear stored browser data;
restrict certain website technologies through device or browser controls; or
use an applicable consent-management mechanism where one is provided.

Disabling essential cookies or equivalent technologies may affect login, authentication, security, Account functions, and other core Website functionality.

Where Applicable Law requires consent for optional analytics or similar technologies, we may use an appropriate consent-management mechanism and configure relevant services accordingly.

Google states that Site Kit site owners are responsible for managing applicable notice and consent requirements for services such as Analytics.

23. Third-Party Websites and Services

The Website may contain links to or integrations with third-party websites, applications, platforms, payment providers, communication services, social-media services, video services, or other external services.

Those third parties may process information under their own terms and privacy policies.

We do not control the privacy practices, security, or content of third-party services that we do not operate.

You should review the applicable privacy policy of an external service before providing Personal Data directly to that service.

24. Data Breaches and Security Incidents

If we become aware of a Personal Data breach or security incident that requires action under Applicable Law, we will take reasonable steps appropriate to the circumstances to:

investigate the incident;
contain and mitigate its effects;
protect affected systems and information;
take remedial measures;
cooperate with applicable authorities where required; and
provide notices or other communications required by Applicable Law.

25. Grievance Redressal and Privacy Complaints

For privacy questions, complaints, requests, or concerns relating to Personal Data, contact:

Email: connect@staging.hiteshpandey.in

Please mention “Privacy” or the nature of your request in the subject line where reasonably possible.

Where Applicable Law requires a specific grievance mechanism, we will maintain and make available the relevant mechanism and contact details.

Our general grievance and contact information is available on the:

Contact & Grievance Redressal page.

26. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

our Services;
Website features;
technology;
Personal Data processing;
cookies or analytics;
third-party service providers;
legal or regulatory requirements;
security practices; or
business operations.

The “Last Updated” date at the top of this page will indicate the most recent revision.

Where Applicable Law requires additional notice or consent for a material change, we will provide such notice or obtain such consent as required.

27. Contact Information

For privacy-related questions, requests, complaints, or data-protection concerns:

HITESHPANDEY.IN
Proprietor: Hitesh Pandey
Email: connect@staging.hiteshpandey.in
Website: https://staging.hiteshpandey.in/

Our business and grievance-related information may also be available on the Website’s Contact & Grievance Redressal page.

28. Relationship With Other Website Policies

This Privacy Policy should be read together with the following policies:

Where another Website policy discusses Personal Data, privacy, or information handling, this Privacy Policy governs the relevant data-processing provisions unless Applicable Law requires otherwise.