Home Data Retention Policy

Data Retention Policy – How My College Route Protects & Manages Student Data

Effective Date: 01/10/2026

Last Revised: 01/10/2026

1.1 INTRODUCTION

This Data Retention Policy ("Policy") is established by My College Route (A Unit of MARCOM) to ensure the lawful, fair, and transparent handling of personal data in compliance with the Digital Personal Data Protection Act, 2023 ("DPDPA"), the Information Technology Act, 2000, and other applicable laws and regulations. This Policy sets out the principles and procedures governing the retention and secure disposal of data processed by the Organisation.

1.2 OBJECTIVES

Ensure compliance with legal, regulatory, and contractual obligations related to data retention.
Protect the privacy and security of personal data of MBA Aspirants throughout its lifecycle.
Provide clear guidelines for the retention, archiving, and destruction of data.
Minimise risks associated with over-retention, such as legal liabilities and security breaches.

1.3 SCOPE

This Policy applies to:

Data Types: Personal data of students, such as name, email, mobile, state & City-related information processed by the My College Route (A Unit of MARCOM), regardless of format (electronic or physical).
Entities Covered: All employees, educational institutes and third parties processing data like Meritto, LeadSquared, Zoho, Sales Force or ExtraaEdge on behalf of the My College Route.
Systems: Applications, databases, storage media, and systems used by the My College Route.

1.4 DATA RETENTION PRINCIPLES

Purpose Limitation: Retain data only for 365 days to fulfill its original purpose, as outlined in privacy notices or agreements.
Retention Periods: Retention periods are based on
legal, regulatory, contractual, and operational requirements, as detailed in the Data Retention Schedule (Annexure A).
Data Minimisation: Retain only data necessary for specific purposes.
Access Controls: Limit access to retained data to authorised personnel.
Secure Disposal: Ensure secure destruction or anonymisation of data no longer required.

1.4 RESPONSIBILITIES

1. Data Protection Officer (DPO):

Oversee Policy compliance and periodic reviews of the Data Retention Schedule.
Address queries related to data retention and disposal.

2. Department Heads:

Ensure departmental compliance with the Policy.
Identify and classify data within their areas of responsibility.

3. Employees and Contractors:

Adhere to data retention guidelines.
Report non-compliance or data incidents to the DPO.

1.6 DATA RETENTION SCHEDULE

The Data Retention Schedule (Annexure A) specifies:

Categories of data.
Retention periods for each category.
Legal or regulatory justification for retention.
Procedures for data archiving, retrieval, and secure disposal.

1.7 DATA DESTRUCTION AND DISPOSAL

1. Disposal Methods:

Physical Records: Shredded, incinerated, or securely destroyed.
Electronic Data: Permanently deleted using industry-standard techniques.

2. Destruction Documentation:

Maintain records of data destruction, including the date, method, and responsible personnel.

1.8 AUDIT AND MONITORING

Internal Audits: Conduct regular audits to ensure adherence to the Policy and Data Retention Schedule.
Non-Compliance: Report instances of non-compliance to the DPO and address them promptly, with potential disciplinary actions.
Policy Reviews: Review the Policy annually or as required by legal or operational changes.

1.9 EXCEPTIONS

Any exceptions to retention or disposal requirements must be:

Approved by the DPO.
Documented with a rationale for the exception.

1.10 CONTACT INFORMATION

For questions or concerns regarding this Policy, contact:

Data Protection Officer: Ms. Neha Jain

Email: info@mycollegeroute.com

Phone: 9958466652

Address: MARCOM, P-18, Ground Floor, Gali No-11, Bihari Colony, Shahdara, De;hi-110032

1.11 ACKNOWLEDGEMENT AND ACCEPTANCE

All employees, contractors, and third parties processing data on behalf of the Organisation must acknowledge and accept this Policy as part of their responsibilities.

Approved by: SK Jain

Title: Founder

Date: 01/10/2026

Data Retention Policy