Under the Digital Personal Data Protection Act, 2023 (DPDP Act), The smARTists is the Data Fiduciary — the entity that determines the purpose and means of processing your personal data.
🏢 Name: The smARTists
👤 Operated by: Ms. Sridevi Manoj
📍 Address: 23/4, Gangadara Chetty Cross Road, Rukmani Colony, Sivanchetti Gardens, Bengaluru, Karnataka – 560042
📧 Email: thesmartistssridevi@gmail.com
📱 WhatsApp: +91 6379 741 305 (WhatsApp only)
🌐 Website: thesmartists.in
We collect only the minimum personal data necessary for the specific purpose stated. The table below describes what we collect, why, and the legal basis under the DPDP Act:
| Data Collected | Purpose | Legal Basis (DPDP Act) |
|---|---|---|
| Parent / Guardian name | To address and identify the person responsible for the child | Consent (Section 6) |
| Child's name | To personalise class placement and communication | Consent of parent/guardian (Section 9) |
| Child's age | To assign the appropriate programme (6–8 or 8–12) | Consent of parent/guardian (Section 9) |
| WhatsApp number | To schedule a class and send updates | Consent (Section 6) |
| Email address | To send confirmation, reminders, and programme updates | Consent (Section 6) |
| Programme interest | To recommend the right class for your child | Consent (Section 6) |
| Preferred timing | To allocate a suitable batch | Consent (Section 6) |
| Message / Notes | To understand specific needs or questions | Consent (Section 6) |
Under Section 6 of the DPDP Act, 2023, we are required to obtain free, specific, informed, unconditional, and unambiguous consent before processing your personal data.
You have the right to withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal. To withdraw consent:
We will process all withdrawal requests within 7 working days and confirm deletion in writing.
This section addresses compliance with Section 9 of the DPDP Act, 2023, which applies specifically to the processing of personal data of children (persons under 18 years of age).
We process a child's personal data — specifically their name and age — only on the basis of consent provided by a parent or legal guardian. By submitting our form, the submitter confirms they are the parent or legal guardian of the child named.
We collect only a child's first name and age group — the minimum necessary for class placement. We do not collect school names, photographs, health information, or any other data about the child without explicit separate consent.
Our form is directed at parents and guardians. If we become aware that data has been submitted by or about a child without parental consent, we will delete it immediately.
We process personal data only for the purposes for which it was collected. We will not use your data for any other purpose without obtaining fresh consent.
We use the following third-party services that may process your personal data on our behalf. Each is bound by appropriate data processing agreements:
| Service | Purpose | Data Shared | Location |
|---|---|---|---|
| Brevo (formerly Sendinblue) | Email marketing & contact management | Name, email, WhatsApp, programme details | EU (GDPR compliant) |
| Bluehost India | Website hosting | No personal data stored in website files | India |
| Google Maps | Location display on website | No personal data — anonymised usage only | USA (Google's servers) |
| Google Fonts | Website typography | No personal data — IP address only (Google) | USA (Google's servers) |
We do not sell, rent, or trade your personal data with any third party for their own marketing or commercial purposes.
We retain personal data only as long as necessary for the stated purpose or as required by applicable law, whichever is longer.
| Data Type | Retention Period | Reason |
|---|---|---|
| Enquiry data (non-enrolled) | 12 months from submission | Follow-up and future programme interest |
| Enrolled student records | 3 years from last class attended | Academic records and re-enrolment |
| Email communication records | 3 years | Dispute resolution and audit trail |
| Withdrawn consent records | 1 year from withdrawal | Evidence of compliance with withdrawal request |
After the retention period, data will be securely deleted or anonymised. You may request earlier deletion at any time — see Section 8.
Under the DPDP Act, 2023, you (the Data Principal) have the following rights with respect to your personal data:
Submit your request to our Grievance Officer:
👤 Grievance Officer: Ms. Sridevi Manoj
📧 thesmartistssridevi@gmail.com — Subject: "Data Rights Request"
📱 +91 6379 741 305 (WhatsApp only)
⏱️ Response time: Acknowledgement within 48 hours · Resolution within 30 days
We implement reasonable security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction, including:
Our website does not use tracking cookies, advertising cookies, or behavioural analytics tools. We do not use Google Analytics, Meta Pixel, or similar tracking services.
The following third-party resources are loaded when you visit our site and may involve limited technical data collection by those parties:
Please refer to Google's Privacy Policy for information on how Google handles this data.
We send marketing communications (updates, event announcements, offers) only to individuals who have explicitly opted in via our form. Each communication will include a clear opt-out mechanism.
To opt out of marketing communications at any time:
Opt-out requests will be processed within 7 working days.
When you submit our enquiry form, your data is processed by Brevo, whose servers are located in the European Union. This constitutes a cross-border transfer of personal data outside India.
We ensure this transfer is protected by appropriate safeguards including Brevo's compliance with GDPR and Standard Contractual Clauses. We will update our practices in accordance with any rules notified by the Central Government under Section 16 of the DPDP Act, 2023.
We may update this Privacy Policy periodically to reflect changes in our practices or regulatory requirements. When we make material changes, we will update the "Last updated" date at the top of this page.
We encourage you to review this policy periodically. Continued use of our website or services after any changes constitutes your acknowledgement of the updated policy.
In accordance with Section 13 of the DPDP Act, 2023, we have designated a Grievance Officer to address data-related complaints and requests:
👤 Name: Ms. Sridevi Manoj
🏢 Organisation: The smARTists
📍 Address: 23/4, Gangadara Chetty Cross Road, Rukmani Colony, Sivanchetti Gardens, Bengaluru, Karnataka – 560042
📧 Email: thesmartistssridevi@gmail.com
📱 WhatsApp: +91 6379 741 305
⏱️ Response: Acknowledgement within 48 hours · Resolution within 30 days