Privacy Policy

What we collect, why we collect it, who we share it with, and how you can take it back.

Last updated: 13 May 2026

Who we are

This privacy policy applies to the website at alt.prakriti.org.in and the registration process for the Prakriti Summer Jamboree 2026. The data controller is altPrakriti Learning Pvt Ltd, operating from Sector 22 and Sector 128, Noida, Uttar Pradesh.

What we collect

When you register a child for the Programme, we collect the following information through the form:

We do not collect cookies for tracking or analytics on this website. We do not embed third-party advertising or analytics scripts.

Why we collect it

Every field on the form serves a defined purpose:

• Operational — to enrol your child in the correct programme, allocate routes, plan meals around allergies, and coordinate pickup/drop-off.
• Communication — to send you the payment link, registration confirmation, programme updates, and the welcome pack closer to the start date.
• Safety — to contact you, or your emergency contact, in the event of any incident requiring your attention while your child is at the Programme.
• Compliance — to maintain registration records as required for audit and tax purposes.

Who we share it with

We do not sell or share your data with marketers, brokers, or external organisations. The only entities that touch your registration data are:

• Razorpay — to process your payment. They see the amount, your contact details, and a note containing your booking ID. Razorpay's own privacy policy governs their handling.
• Google Workspace (Sheets, Apps Script, Gmail) — our registration data is stored in a Google Sheet owned by jamboree@prakriti.org.in, with access restricted to the school's administrative team. Google's data-handling is governed by their privacy policy.
• Internal Prakriti staff — the principal, programme coordinators, facilitators, and administrative team for each campus have access to relevant portions of the data needed to deliver the Programme.

We do not transfer your data outside India for any purpose. Both Razorpay and Google Workspace are configured to keep our data on Indian servers where available.

How long we keep it

Registration data is retained for 12 months after the Programme ends, after which it is moved to an archived sheet visible only to the school principal, and deleted entirely after a further 24 months. Payment records may be retained longer (typically 8 years) as required by Indian tax and accounting law.

If you request deletion of your data before this period, we will honour the request to the extent permitted by law — payment records cannot be deleted ahead of statutory retention periods, but personal identifiers can be redacted from operational records.

Your rights

As a parent submitting data on behalf of your child, you have the right to:

• Access — request a copy of the data we hold about you and your child.
• Correction — ask us to update any inaccurate details (we already encourage this via WhatsApp for medical/dietary updates).
• Deletion — request removal of personal identifiers, subject to the retention requirements above.
• Opt out of image use — see the Terms and Conditions for how to do this.
• Withdraw consent — at any point you can withdraw your child from the Programme, subject to the Refund Policy.

To exercise any of these, email jamboree@prakriti.org.in from the email address used at registration. We aim to respond within 7 working days.

How we protect your data

• The registration form is served over HTTPS — all data in transit is encrypted.
• The Google Sheet storing registrations is access-controlled to specific Prakriti staff accounts; access is reviewed annually.
• Payment information never reaches our servers — Razorpay handles card numbers, UPI handles, and bank details directly.
• Apps Script web app endpoints are signed where they handle administrative actions (such as confirming a payment), to prevent unauthorised access.

Children's data

This Programme is designed for children aged 3 – 10. The registration form is filled in by a parent or legal guardian on behalf of the child. We do not knowingly collect data directly from children. If you believe a child has submitted personal data without parental involvement, please contact us immediately.

Changes to this policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Material changes will be communicated to parents with active registrations by email. The "Last updated" date at the top of this page indicates when the policy was last revised.