Privacy Policy

1. Introduction

Open Sky Adventure Academy ("OSAA," "we," "us," or "our") is committed to protecting the privacy and security of the personal data of all visitors, users, and institutional partners who interact with our website (www.osaacademy.in) and our services. This Privacy Policy is in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and its Rules, and explains how we collect, use, disclose, and safeguard your information.

2. Information We Collect

We may collect the following categories of information:

• Inquiry Data: Name of Principal/Director, designation, school name, city, contact number, email address, program of interest, preferred visit dates, number of students, grade levels, and any special requirements.
• Website Usage Data: IP address, browser type, pages visited, time spent on pages, and other analytical data collected through cookies and similar technologies.
• Booking Data: Information provided during the booking process, including student lists, faculty identification documents (Aadhaar Cards), and intent letters.

3. Purpose of Processing

We process your personal data for the following purposes:

• To respond to inquiries and provide information about our programs
• To process bookings and manage program logistics
• To comply with safety and regulatory requirements (e.g., aerodrome access clearances)
• To improve our website and services
• To send communications related to our programs (with consent)

4. Legal Basis for Processing

We process personal data based on: (a) your consent, provided when you submit an inquiry or booking; (b) legitimate uses as permitted under the DPDP Act, including compliance with legal obligations and performance of contractual obligations with partner institutions.

5. Data Sharing

We do not sell your personal data. We may share information with: (a) government authorities as required for aerodrome access clearances (GFTS); (b) insurance providers for program liability coverage; (c) transportation partners for logistical coordination; (d) service providers who assist in website operations under strict confidentiality agreements.

6. Children's Privacy

Our programs serve students from Nursery through Grade 12. We do not directly collect personal data from children. All data collection is conducted through partner schools and institutional representatives who are responsible for obtaining appropriate parental consent. We rely on our partner schools to obtain verifiable parental consent before sharing any student information with us.

7. Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and understand where our visitors are coming from. You can control cookie preferences through your browser settings.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encrypted data transmission, secure server infrastructure, and restricted access controls.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Inquiry data is retained for up to 24 months. Booking and program data is retained for up to 7 years for compliance and insurance purposes.

10. Your Rights

Under the DPDP Act, you have the following rights as a Data Principal:

• Right to access your personal data
• Right to correction and erasure of your data
• Right to withdraw consent at any time
• Right to grievance redressal

11. Grievance Officer

If you have any concerns regarding the processing of your personal data, please contact our Grievance Officer:

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.