Student Protection Policy – Your Data, Privacy & Admission Rights

Effective Date: 01/10/2026

Website: www.mycollegeroute.com

1. Introduction – Our Commitment to Student Protection

At My College Route, we recognize the importance of protecting the privacy, personal information, educational interests, and digital rights of MBA and PGDM aspirants.

My College Route (A Unit of MARCOM) is an education information and college discovery platform that assists students in exploring MBA and PGDM institutions, management entrance examinations, admission opportunities, college comparisons, and related resources.

We believe students should be able to research educational opportunities and make informed admission decisions without being misled about institutional information, pressured into unauthorized payments, or exposed to improper use of their personal data.

This Student Protection Policy describes our approach to:

• Protecting student personal information and digital privacy.

• Explaining the collection, processing, sharing, and retention of student data.

• Enabling students to manage consent and raise privacy requests.

• Encouraging accurate and transparent MBA/PGDM admission information.

• Addressing misleading communication, suspicious admission offers, and grievances.

• Supporting compliance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023, and relevant rules as they come into force.

This Policy should be read together with our Privacy Policy, Cookie Policy, Data Retention Policy, Terms and Conditions, and Disclaimer.

2. Personal Data We May Collect

When students register on My College Route, use educational tools, submit enquiries, or request admission-related assistance, we may collect personal data relevant to the requested services.

Depending on the feature used, this may include:

• Personal details: Name and other information voluntarily submitted by the student.

• Contact information: Mobile number, email address, city, and state.

• Educational information: Academic qualifications, entrance examination details, scores, and preferences when submitted through relevant forms or tools.

• Admission preferences: Preferred MBA/PGDM colleges, specializations, locations, and other selections.

• Communication records: Enquiries, preferences, feedback, and interactions with our support or counselling team.

• Technical information: Cookies, device-related information, and website usage data collected through applicable technologies.

We aim to collect personal data only for defined and lawful purposes and to provide appropriate information about its use.

Students should avoid submitting unnecessary personal information or sensitive documents unless specifically required through an appropriate process.

3. How Student Information May Be Used

Student information may be processed for purposes connected with My College Route's services, including:

1. Creating student dashboard.

2. Providing requested MBA and PGDM college information.

3. Supporting college comparisons, examination-related tools, and relevant educational services.

4. Responding to admission-related enquiries.

5. Communicating with students about requested educational opportunities.

6. Sharing enquiry information with relevant educational institutions or authorized service providers where permitted by applicable law.

7. Improving platform functionality, performance, and security.

8. Sending promotional communications where an appropriate lawful basis and any required permissions exist.

9. Complying with applicable legal obligations.

The specific purposes, categories of data, and applicable consent requirements should be described in the relevant privacy notice or collection form.

4. Student Consent and Communication Preferences

My College Route recognizes the importance of informed and meaningful consent.

Where consent is required, we aim to provide clear information about the personal data requested, its intended purpose, and the relevant choices available to students.

Students should not be required to agree to unrelated promotional communications merely to access a service where that consent is not necessary.

Where applicable, students may request withdrawal of consent for activities such as optional promotional communication or other consent-based processing.

Withdrawal of consent may affect services that depend on the relevant information, but it does not retrospectively invalidate lawful processing undertaken before withdrawal.

Requests will be handled in accordance with applicable law and the operational requirements of the service.

Important: A student's registration on My College Route should not be interpreted as unrestricted permission to share their information with every educational institution, advertiser, or marketing partner.

5. Sharing Student Data with Educational Institutions and Partners

My College Route may engage with MBA/PGDM institutions, technology providers, customer relationship management service providers, and other authorized partners to deliver services requested by students.

Where permitted, personal data may be shared for purposes such as responding to a college enquiry, providing information about a requested program, or managing relevant services.

Our approach is to:

• Share only information reasonably relevant to the specified purpose.

• Explain relevant third-party sharing in appropriate notices.

• Obtain consent where required.

• Apply appropriate contractual and security safeguards to service providers.

• Avoid unauthorized disclosure or use of student information.

Educational institutions and other independent recipients may have their own privacy notices and legal responsibilities.

Students should review those notices before providing additional information directly to an institution.

6. Student Rights Under Applicable Data Protection Laws

Under the Digital Personal Data Protection Act, 2023, individuals whose personal data is processed are referred to as Data Principals.

Subject to the applicable provisions being in force and any statutory conditions or exceptions, students may have rights relating to:

A. Access to Personal Data Information

Students may request information about their personal data and its processing within the scope provided by applicable law.

B. Correction, Completion, Updating and Erasure

Students may request correction of inaccurate personal data, completion or updating of relevant information, and erasure where legally applicable.

C. Withdrawal of Consent

Where processing is based on consent, students may withdraw that consent as provided by applicable law.

D. Grievance Redressal

Students may raise concerns regarding the handling of their personal information through the designated grievance mechanism.

E. Right to Nominate

Where applicable, students may nominate another individual to exercise specified data protection rights in circumstances recognized by law.

These rights are subject to applicable conditions, exemptions, commencement dates, and lawful retention obligations.

My College Route also welcomes reasonable requests to review or correct account information, even where a particular statutory provision has not yet commenced.

7. Data Protection and Information Security

My College Route aims to protect student personal data against unauthorized access, improper disclosure, misuse, alteration, or loss.

Our data protection approach includes the adoption and maintenance of safeguards appropriate to the risks of the information processed.

These may include:

• Access restrictions for authorized personnel.

• Authentication and account security controls.

• Appropriate technical safeguards for systems and databases.

• Confidentiality obligations for personnel handling student information.

• Security requirements for relevant technology service providers.

• Procedures to identify, investigate, and respond to security incidents.

Specific safeguards and their effectiveness are subject to implementation, operational review, and periodic improvement.

No internet-based system can be guaranteed to be entirely free from security risks.

In the event of a personal data breach, My College Route will assess its notification and response obligations under applicable law and take appropriate action.

8. Data Retention and Secure Deletion

My College Route's Data Retention Policy, effective 1 October 2026, sets out a general 365-day retention principle for student personal data, together with retention schedules, legal requirements, and documented exceptions.

Personal data should not be retained longer than necessary for its specified purpose or any applicable legal obligation.

Where information is no longer required and no lawful reason for further retention exists, appropriate deletion, anonymization, or secure disposal measures should be applied.

Students may contact us to ask about their personal data or request deletion where applicable.

Certain information may need to be retained where required or permitted by law, including for compliance, security, or legal proceedings.

9. Protection Against Misleading MBA Admission Information

My College Route aims to help students make informed decisions about MBA and PGDM admissions.

We recognize that incomplete, inaccurate, or misleading admission information can result in financial loss, missed deadlines, or unsuitable educational decisions.

Our student protection approach encourages transparency regarding:

• MBA and PGDM course fees and associated charges.

• Institutional approvals and accreditations.

• Accepted entrance examinations and admission eligibility.

• Selection procedures, admission deadlines, and intake details.

• Placement statistics and recruiter information.

• Scholarship conditions and eligibility.

• Refund procedures and applicable institutional policies.

Information supplied by educational institutions may change. Students should verify material admission details directly from official college sources before making financial or academic commitments.

My College Route does not guarantee admission, scholarships, placements, or particular salary outcomes.

10. Protection Against Admission Fraud and Unauthorized Payments

MBA and PGDM aspirants should exercise caution when receiving admission-related messages, calls, payment requests, or scholarship offers.

Students are advised to:

• Verify the identity of the institution or representative contacting them.

• Confirm application and tuition payment instructions through official channels.

• Avoid transferring money to unknown personal accounts.

• Never disclose OTPs, passwords, or sensitive banking credentials.

• Be cautious of promises of guaranteed admission or placement.

• Report suspicious communications claiming to represent My College Route.

My College Route does not authorize any person to guarantee admission on its behalf.

If a student receives a suspicious communication using the My College Route name, they may report it to info@mycollegeroute.com for review.

Where suspected fraud or unlawful conduct is involved, students may also approach the appropriate authorities.

11. MBA College Predictor, Rankings and Placement Information

My College Route provides information and tools intended to support MBA and PGDM college selection.

College Predictor results, rankings, comparisons, and placement information are indicative decision-support resources, not promises of admission or career outcomes.

Actual admission results depend on institutional eligibility requirements, selection criteria, academic records, entrance examination performance, interviews, and other relevant factors.

Placement statistics may be based on institutional disclosures or publicly available reports and do not guarantee individual employment or salary levels.

Students are encouraged to evaluate information critically and independently confirm important details before taking action.

12. Sponsored Content and Institutional Promotions

My College Route may collaborate with educational institutions, advertisers, and other organizations for promotional campaigns or sponsored content.

We aim to distinguish advertisements and paid promotional material from independent informational or editorial content.

A featured listing, advertisement, or partnership does not automatically constitute a recommendation, accreditation, or guarantee of educational quality.

Students should evaluate sponsored information using the same care applied to other institutional claims.

13. Protection of Children and Minors

The DPDP Act defines a child as an individual who has not completed 18 years of age.

Where relevant statutory provisions apply, processing of children's personal data requires the safeguards prescribed by law, including verifiable parental consent where required and applicable restrictions concerning tracking, behavioural monitoring, and targeted advertising.

My College Route's principal services are intended for individuals exploring higher education opportunities.

If the platform is used by someone under 18, applicable age-related safeguards, parental or guardian consent mechanisms, and restrictions must be followed.

The platform should not knowingly use children's personal data for prohibited activities.

14. Student Grievance Redressal and Privacy Requests

Students may submit concerns regarding:

• Unauthorized or unexpected use of personal information.

• Unwanted educational or promotional communications.

• Requests to update or delete personal data.

• Suspected misuse of their identity or contact details.

• Misleading admission-related information.

• Suspicious communications using the My College Route name.

• Other privacy or student protection concerns.

Requests can be submitted to the contact details below. Students should provide sufficient information to identify the issue without including unnecessary sensitive documents.

My College Route may undertake reasonable identity verification before disclosing, correcting, or deleting personal data.

Requests and complaints should be acknowledged, assessed, and handled through a documented process in accordance with applicable legal requirements.

Where the relevant provisions of the DPDP Act become applicable, eligible Data Principals may pursue the statutory grievance process, including approaching the Data Protection Board of India in accordance with the Act and Rules.

15. Student Responsibilities

Students also play an important role in protecting their personal data.

We encourage students to:

• Provide accurate information during registration.

• Keep account credentials confidential.

• Use only legitimate website links and verified communication channels.

• Avoid sharing OTPs or passwords.

• Read privacy notices and communication preferences.

• Verify admission details before paying fees.

• Report suspected misuse or fraudulent activity promptly.

These responsibilities do not limit statutory protections or rights available under applicable law.

16. Changes to the Student Protection Policy

My College Route may update this Policy to reflect changes in applicable laws, platform services, technology, or data processing practices.

Where a change requires additional notice or consent under applicable law, the appropriate steps should be taken before relying on the revised practice.

The latest approved version of this Policy will be published on the website along with its effective or revision date.

17. Contact Information and Grievance Assistance

For student privacy concerns, data protection requests, suspected misuse of personal information, or admission-related complaints, contact:

My College Route (A Unit of MARCOM)

Privacy Contact: Ms. Neha Jain, designated in My College Route's existing documentation as Data Protection Officer.

Email: info@mycollegeroute.com

Address: MARCOM, P-18, Ground Floor, Gali No. 11, Bihari Colony, Shahdara, Delhi – 110032, India.

Website: www.mycollegeroute.com

Student Protection Commitment

Your education decisions matter, and so does your personal information.

My College Route aims to provide a transparent, privacy-conscious platform where MBA and PGDM aspirants can explore institutions, compare educational opportunities, and make informed decisions.

We encourage every student to understand their privacy choices, verify important admission information, and raise concerns whenever they believe their information or interests may be at risk.

FAQ- My College Route – Your Personal MBA Guide.

Q1. How does My College Route protect students' personal data?

My College Route aims to protect student information through privacy notices, appropriate access controls, data-handling safeguards, consent management, and grievance procedures.

Q2. Can I request deletion of my personal data from My College Route?

Yes. Students can submit deletion requests through info@mycollegeroute.com. Requests are assessed according to applicable law, retention requirements, and the platform's policies.

Q3. Does My College Route share student information with MBA colleges?

Student information may be shared with relevant educational institutions or service providers for specified purposes, subject to applicable privacy requirements and consent where necessary.

Q4. Does My College Route guarantee MBA or PGDM admission?

No. My College Route provides information and educational decision-support resources. Admission decisions are made by the respective institutions.

Q5. What should I do if I receive a suspicious admission call?

Verify the caller's identity, do not share OTPs or financial credentials, and report suspicious communications claiming to represent My College Route to info@mycollegeroute.com.

Q6. What is the DPDP Act, 2023, and how does it protect students?

The DPDP Act establishes a legal framework for processing digital personal data in India, including obligations for organizations and rights for individuals. Relevant protections apply according to the Act's phased commencement dates.