Privacy policy

1. Who we are

Elite Forums is a community for aspiring founders, students, builders and partners. In this policy, “Elite Forums”, “we”, “us” and “our” refer to the organisation operating this website and its programmes.

If you have a question about this policy or how your information is handled, contact us through the Contact page.

2. Information we collect

Depending on how you interact with us, we may collect:

• Contact details: name, email address, phone number and city.
• Education and organisation details: institution, course or year, designation, E-Cell information and organisation size.
• Participation details: interests, preferred communication channel, event registrations, availability, motivation and relevant experience.
• Messages: enquiries, partnership requirements, support requests and other information you choose to submit.
• Technical information: device, browser, approximate location, pages viewed and diagnostic information needed to keep the website secure and reliable.
• Referral information: the campaign link (UTM tags), referring website and landing page that brought you to the site, saved with a form you submit so we can see which channels work.

Please do not submit passwords, payment card details, government identity numbers or other sensitive information through a public form.

3. How we use information

We use information to:

• respond to questions, partnership requests and applications;
• process community and event registrations;
• organise events, workshops, mentorship and community programmes;
• send updates you request or have agreed to receive;
• understand programme interest and improve our content and experiences;
• prevent spam, fraud, abuse and security incidents; and
• meet legal, regulatory and operational requirements.

4. Legal basis and consent

We process information where it is necessary to provide a service you request, where you have given consent, where we have a legitimate operational interest, or where processing is required by law. Where a form asks for consent, you may decline; however, we may not be able to process that submission without the requested information.

5. Indian data-protection framework

We aim to handle digital personal data in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023 and rules or notifications made under it, as they come into force and apply to our processing. Depending on the activity, Elite Forums may act as a data fiduciary, and a hosting, authentication, communications or event provider may act as a data processor.

We will provide notice about the purpose of collection, seek consent where required, use data for permitted purposes, maintain reasonable security safeguards, and provide legally required methods to exercise rights or raise grievances.

6. Sharing and service providers

We do not sell personal information. We may share limited information with trusted service providers that help us operate the website, authentication, hosting, database, communications and event programmes. They may process information only for the services they provide to us and subject to appropriate safeguards.

We may also disclose information when required by law, to protect the safety and rights of people or the service, or as part of a merger, restructuring or transfer of relevant business assets.

7. Supabase, hosting and cross-border processing

Form submissions and administrator authentication are supported by Supabase. Data is sent to the Supabase project configured for this website. Supabase may process data as our service provider under its own terms and policies. Administrator sessions may use browser storage so approved administrators can remain signed in.

Service providers may process or store information outside your state or outside India. Where cross-border transfers are permitted, we will use appropriate safeguards and follow restrictions prescribed by applicable law. A current list of processors and transfer details may be requested through our grievance contact.

8. Cookies and similar technologies

The website may use essential storage, session technologies and security mechanisms needed for authentication, routing and form operation. If you accept optional cookies, Google Analytics may process pseudonymous usage data such as page views, browser details and approximate location to help us improve the website. Analytics is not loaded when you choose essential-only storage.

9. Retention and security

We retain information only for as long as reasonably necessary for the purpose it was collected, to maintain programme records, resolve disputes, meet legal obligations and protect our legitimate interests. Retention periods depend on the type and context of the submission.

We use reasonable administrative, technical and organisational safeguards. No internet transmission or storage system is guaranteed to be completely secure, so please avoid sending sensitive information through public forms.

10. Security incidents and breach response

We maintain access controls, authentication controls, least-privilege administration, backups and other safeguards appropriate to the information. If we become aware of a personal-data breach, we will assess and contain it, investigate the cause, preserve relevant records, and notify affected persons or the relevant authority where required by applicable law.

11. Your rights and requests

Subject to applicable law, you may ask us to provide access to, correct, update or erase personal data, withdraw consent, obtain information about processing, or nominate another person to exercise rights where the law permits. You may also ask us to stop marketing communications.

Send requests to [insert official privacy/grievance email] or through our Contact page. Include the email address used in your submission, the request type and enough detail to locate your record. We may verify identity, apply lawful exemptions and retain a record of the request.

12. Grievance redressal

For privacy complaints or unresolved requests, contact our designated grievance officer at [insert grievance officer name and official email]. Include your name, contact details, relevant submission or event, and the resolution you seek. We will handle the complaint under the timelines prescribed by applicable law. You may have a right to approach the appropriate statutory authority if you are not satisfied.

13. Children and consent

Our programmes may be available to students, but the website is not intended to knowingly process a child’s personal data in a manner prohibited by applicable law, including restrictions on tracking, behavioural monitoring, targeted advertising or processing likely to cause detrimental effects. Where verifiable parental or guardian consent is required, we will use the process provided for that programme. If you believe a child has submitted information improperly, contact us.

14. Policy changes and official contact

We may update this policy as our programmes, technology or legal obligations change. The updated date at the top of this page indicates when the latest version took effect. Continued use of the website after an update means you acknowledge the revised policy.

Data fiduciary / organisation: [insert registered legal name and address]. Official contact: [insert privacy email and postal address]. These details must be completed before this policy is used as the formal legal notice.