Udaan Gateways
Udaan Gateways Pvt Ltd logoUdaan Gateways Pvt Ltd
Last updated:
Privacy & Security First

Privacy Policy

Learn how Udaan Gateways Pvt Ltd collects, uses, and protects your information across our website, apps, student recruitment, admissions guidance, test preparation, and visa consultancy services.

GDPRDPDP (India)CCPA
Secure by design

Overview

This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you interact with our student recruitment, admissions counselling, test preparation, application processing, and visa/immigration consultancy services (the "Services"). By using our Services you agree to the practices described in this Policy. If you do not agree, please do not use our Services. This Policy applies to information collected online and offline in connection with enquiries, counselling sessions, events/fairs, form-filling, applications, payments, and customer support.

Data We Collect

  • Identity & Contact: name, date of birth, gender (where relevant), email, phone, postal address, government ID (e.g., passport), and photographs (for applications/ID as required).
  • Education & Academic: academic history (school/college names, marksheets/transcripts), predicted/obtained grades, medium of instruction, backlog details, course preferences, statement of purpose (SOP), letters of recommendation (LOR) details.
  • Tests & Certifications: results/registration details for IELTS/TOEFL/PTE, GRE/GMAT/SAT/ACT, Duolingo, language certificates.
  • Immigration & Visa: passport/visa details, travel history, CAS/SEVIS/DS-160/GCKey/IRCC/UKVI reference numbers, biometrics appointment confirmations, I-20/CAS offer letters, BRP details (where applicable).
  • Financial & Sponsorship: proof of funds, bank statements, loan sanction letters, scholarship information, sponsor identity/relationship, fee payment records. We do not store full card numbers; payments are handled by secure payment processors.
  • Placement & Career (optional): CV/resume, internships, work experience, portfolios (for certain programs).
  • Events & Communications: counselling notes, webinar/event registrations, fair attendance, support chats/emails, and call recordings (where lawful and notified).
  • Technical: IP address, device identifiers, log data, approximate location, cookies/pixels.

Sources: directly from you or your authorised representative; from test bodies (e.g., IELTS/ETS), universities/colleges, application portals and aggregators, referees/recommenders, partner recruiters/sub‑agents, payment providers, verification services, and publicly available sources where lawful.

Sensitive personal data: certain information (e.g., government IDs, financial proofs) may be considered sensitive under applicable law. Where required, we obtain your explicit consent and apply additional safeguards.

How We Use Data

  • Provide counselling, shortlist programs/institutions, evaluate eligibility, and prepare applications.
  • Liaise with universities/colleges and government authorities to process admissions and visas.
  • Schedule tests, book appointments, track application status, and send updates/alerts.
  • Process payments, scholarships, and commissions; detect and prevent fraud/abuse.
  • Personalise guidance, improve our Services, run training/quality audits, and measure outcomes.
  • Run events, webinars, and fairs; send transactional messages and—where consented—marketing communications (you can opt out anytime).
  • Comply with legal obligations (KYC/record‑keeping, immigration rules) and cooperate with law enforcement where required.

Sharing & Third Parties

We share information only as necessary with: universities/colleges and their authorised representatives; application platforms and aggregators; testing bodies and language centres; visa/immigration authorities and VACs (e.g., VFS/USCIS/IRCC/UKVI as applicable); accommodation/insurance partners; payment gateways; background/verification services; IT/hosting vendors; analytics and anti‑fraud providers; and professional advisors. We require appropriate safeguards and disclose only what is necessary for the purpose.

We may disclose information to authorities where legally required, and in connection with a merger, acquisition, or asset sale.

Cookies & Tracking

We use cookies, pixels, and similar technologies to keep you signed in, remember preferences, measure performance, and deliver relevant ads. You can manage cookies via your browser settings and (where implemented) our cookie banner. Disabling some cookies may affect site functionality.

  • Strictly necessary: required for core features (forms, authentication, security).
  • Functional: remember preferences (language, location).
  • Analytics: help us understand usage and outcomes (first‑party analytics; any third‑party analytics where permitted by law/consent).
  • Advertising: used to show relevant ads and measure campaign effectiveness (only where consented and permitted by law).

Data Retention

We retain personal data only for as long as needed to fulfil the purposes outlined in this Policy, including to comply with legal, accounting, or reporting requirements, and to resolve disputes. Typical retention periods:

  • Admissions & visa files: for the duration of the application/engagement plus a reasonable period thereafter (e.g., 3–7 years) or as required by law.
  • Financial and invoicing records: as required by tax and accounting laws.
  • Marketing preferences: until you withdraw consent or opt out.

Security

We implement technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS), access controls, audit logging, regular backups, staff training, and vendor due diligence. No method of transmission or storage is 100% secure; if we become aware of a breach affecting you, we will take steps required by applicable law to notify you.

International Transfers

Given the global nature of education and immigration, your data may be transferred to and processed in countries other than your residence (e.g., UK, EU/EEA, USA, Canada, Australia, New Zealand, etc.). Where required, we use appropriate safeguards (such as contractual clauses or equivalent mechanisms) to protect your information.

Your Rights (GDPR / DPDP / CCPA)

  • Access/Portability: get a copy of your data.
  • Correction: request rectification of inaccurate data.
  • Deletion: request deletion where applicable.
  • Restriction/Objection: restrict or object to certain processing.
  • Consent management: withdraw consent (e.g., marketing) at any time.
  • CCPA/CPRA: right to know, delete, correct, and opt‑out of selling/sharing of personal information; we do not knowingly sell personal information.

To exercise rights, contact us using the details below. We may need to verify your identity (and, where you act on someone’s behalf, your authority) before responding.

Students & Minors

Our Services are intended for individuals who can lawfully engage our counselling and application services. We do not knowingly collect personal data from children without appropriate consent from a parent/guardian where required by law (for example, where an applicant is under the age threshold applicable in their country). If you believe a minor has provided us data without such consent, please contact us and we will take appropriate steps.

Changes to This Policy

We may update this Policy periodically. The "Last updated" date at the top reflects the latest version. Material changes will be highlighted on this page and, where appropriate, notified to you via email or in‑product messages.

Contact Us

Udaan Gateways Pvt Ltd
Khatima, U.S. Nagar, Uttarakhand, 262308