Privacy Policy

Effective Date: 1 August 2026

Last Updated: 31 July 2026

Mahindra United World College of India, located at Village Khubavali, PO Paud, Taluka Mulshi, Pune, Maharashtra 412 108, India ("we", "us", "our", "MUWCI", or "the Institution"), is committed to protecting the privacy and security of your Personal Data.

This Privacy & Cookies Policy ("Policy") applies to all services offered by us to all individuals ("you", "your", or "user") when accessing, browsing, or using our Website at https://www.uwcmahindra.org ("Website"). This Policy is an integral part of the Website Terms and Conditions.

1. Key Definitions

• "Personal Data" means any data about an individual who is identifiable by or in relation to such data.

• "Processing" (and its grammatical variations) means any operation or set of operations performed on digital Personal Data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, alignment, combination, indexing, sharing, disclosure, restriction, erasure, or destruction.

2. Personal Data That We Collect

We collect only the information necessary to perform our services, fulfill institutional obligations, or respond to your enquiries. We process Personal Data relating to:

1. Prospective and current students

2. Prospective and current parents or legal guardians

3. Alumni

4. Donors

5. Subscribers and event participants

6. Website users and job applicants

A. Information Provided Directly by You

• Website Users: When you submit an enquiry or subscribe via the Website, we collect your first name, last name, email address, and mobile number.

• Donors: In processing donations, we collect your full name, email address, contact number, supported cause, affiliation, official mailing address (for tax receipt purposes), nationality, tax identifier (e.g., PAN, Social Security Number, or tax identification number required to claim tax benefits in your jurisdiction), and payment metadata.

• Job Aspirants: When applying for a career or teaching position, we collect your curriculum vitae (CV), employment history, cover letter, qualifications, and contact details.

B. Electronic Information Collected Automatically

When you browse the Website, we automatically collect technical usage data, including:

• Visited URLs, navigation paths, pages viewed, time spent per page, and exit pages

• Date and timestamp of your visit

• IP address, approximate geographical location (country, region, or city), and GPS location (if explicitly permitted by your device settings)

• Web browser type, version, and user agent string

• Operating system, device type (e.g., mobile, desktop), and transmission protocols used

• Search terms, queries, and referring URLs

• Information gathered via essential and performance cookies

Note on Electronic Information: While usage data is generally non-identifying, where it can be combined with other data to identify you, we treat it as Personal Data. Processing this data supports our legitimate interests in ensuring system security, stability, error analysis, and optimizing website functionality.

3. Cookies and Tracking Technologies

A cookie is a small file installed on your device to enable specific features, keep track of your session, remember preferences, and improve user navigation.

• Session Cookies: Temporary cookies that are deleted automatically when you close your browser.

• Persistent Cookies: Remain on your device until deleted or expired. These allow us to recognise returning visitors.

The four categories

Nothing outside the strictly necessary category is loaded until you allow it. You can allow some categories and refuse others.

• Strictly necessary — needed for the site to work. Always on. Today this is only the record of your own cookie choice.

• Functional — remembers preferences you set, and allows embedded YouTube videos and Instagram posts to load automatically. Without it you can still load each one individually.

• Analytics — Google Analytics, so we can see which pages are read and improve them.

• Marketing — advertising and retargeting. We do not use this category. The choice is offered so that nothing of the kind could ever load without your permission.

What this site sets

The complete list. It was last checked against the live site on 11 August 2026, by loading the site in a browser and recording everything stored, both before and after consent.

If you refuse the analytics category, or later withdraw it, the two Google Analytics cookies are deleted from your device and no further analytics data is sent.

Content and services from other companies

• YouTube and Instagram embeds — some articles include a video or post hosted by Google or Meta. These are not loaded until you allow the functional category or choose to load that specific item, because loading one shares your IP address with them. Once loaded, they may set their own cookies, governed by that company's own policy.

• Razorpay — our payment provider. Loaded only at the moment you begin a donation or payment, and necessary to take it.

Sharing and selling

We do not sell your personal data. We run no advertising or retargeting tags, and we share no cookie data with advertising networks — as of the date above there are none on this site to share it with. Analytics data is collected by Google Analytics on our behalf; Google's own handling of it is governed by their terms.

Cookie Control

You can configure your web browser to notify you when a cookie is being set, block cookies entirely, or clear previously stored cookies via your browser’s setting menu. Please note that disabling cookies may affect website functionality or limit your user experience.

You can also change or withdraw your choice at any time using the Cookies link in the footer of every page, without changing your browser settings.

4. Purposes for Processing Personal Data

We process your Personal Data for the following operational, educational, and statutory purposes:

Service Delivery & Educational Operations

• To operate, maintain, and optimise the Website and its online portals.

• To communicate with you regarding educational programmes, admissions, and institutional news (e.g., newsletters).

• To process, confirm, and receipt incoming financial donations in alignment with donor intent (e.g., scholarship funds or corpus support).

• To respond to enquiries, requests, or administrative concerns.

Institutional Security & Compliance

• To generate aggregated usage statistics and perform user experience research.

• To detect, prevent, and investigate security threats, fraudulent activities, or cyber attacks.

• To enforce our legal rights, comply with statutory obligations, and assist law enforcement or statutory regulators.

5. Lawful Bases for Processing

We process your Personal Data relying on specific legal bases:

• Consent: Where you have provided clear, unambiguous consent for specific operations (e.g., newsletter subscriptions or marketing).

• Contractual Necessity: Where processing is required to fulfill a request, complete an application, or process an agreement with you.

• Legal Obligation: Where compliance with applicable laws, judicial orders, or tax regulations in India or internationally is required.

• Legitimate Interests: Where processing is necessary for institutional security, operational auditing, administrative efficiency, and website protection, provided these do not override your fundamental privacy rights.

6. Sharing and Disclosure of Personal Data

We do not sell your Personal Data. We share Personal Data only with trusted third parties under strict confidentiality and security requirements:

1. Service Providers: Technical vendors, hosting providers, and administrative tools operating on our behalf. These service providers must implement appropriate safeguards and may only process data according to our explicit instructions.

2. Scholarship Donors: Where relevant to financial aid or scholarship applications during your time at MUWCI, necessary details may be shared with designated scholarship partners.

3. Internal Administrative Staff: Authorised personnel and faculty across academic and administrative departments who require access to fulfill their roles.

4. Courts and Public Authorities: Where required by law, legal proceedings, or government regulations (such as law enforcement agencies or tax authorities).

7. International Data Transfers

As an international educational institution delivering the International Baccalaureate Diploma Programme (IBDP), Personal Data may be transferred across borders (e.g., to national selection committees, university application systems, or overseas processing tools).

When transferring data internationally, we ensure appropriate legal safeguards—such as standard contractual clauses and adequacy assessments—are in place to maintain standard levels of data protection.

8. Data Security Measures

We implement robust technical and organisational security measures to protect Personal Data against unauthorised access, alteration, disclosure, accidental loss, or destruction. These controls include encryption, secure access permissions, regularly updated firewalls, and data protection audits.

However, given the inherent nature of internet transmissions, complete system security cannot be guaranteed absolutely against all cyber threats.

9. Data Retention

We retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, or to satisfy legal, accounting, statutory, or reporting requirements.

When Personal Data is no longer required, it is securely deleted, anonymised, or archived in accordance with applicable statutory limitation periods.

10. Safeguarding Minors

MUWCI provides secondary education to students, many of whom are under 18 years of age.

• We do not knowingly collect or solicit Personal Data from individuals under 18 years of age without verifiable consent from a parent or legal guardian.

• We do not conduct behavioural profiling, automated tracking, or targeted marketing directed at minors.

• Tracking involving enrolled minors is strictly limited to supporting educational activities, safety measures, or safeguarding policies required by law.

If you suspect a minor under 18 has submitted Personal Data without parental consent, please contact our Data Protection Officer immediately.

11. Your Data Protection Rights

Depending on your jurisdiction (such as under the DPDP Act, GDPR, or UK GDPR), you possess specific statutory rights regarding your Personal Data:

• Right to Access: Request a summary of the Personal Data we hold about you, processing operations performed, and details of third parties with whom it was shared.

• Right to Rectification: Request corrections or updates to inaccurate, incomplete, or out-of-date Personal Data.

• Right to Erasure / Deletion: Request the removal or deletion of your Personal Data where it is no longer necessary for operational or legal purposes.

• Right to Withdraw Consent: Revoke previously given consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

• Right to Object / Restrict Processing: Request restrictions on processing or object to processing based on legitimate interests.

• Right to Data Portability: Request a copy of your Personal Data in a structured, machine-readable format for transfer to another data controller, where technically feasible.

• Right to Nominate (DPDP Act): Nominate another individual to exercise your privacy rights in the event of death or incapacity.

• Right to Grievance Redressal: Submit inquiries or complaints regarding our data practices.

To exercise any of these rights, please contact our Data Protection Officer as detailed in Section 12. Proof of identity may be requested to protect your data against unauthorised modification.

12. Contact Information & Grievance Redressal

If you have questions, comments, or grievances regarding this Policy or wish to exercise your data subject rights, please contact us at:

Data Protection Officer / Grievance Officer

Mahindra United World College of India
Village Khubavali, PO Paud, Taluka Mulshi,
Pune, Maharashtra – 412 108, India

• Telephone: +91 97644 42751 – 54

• Email: dpo@muwci.net

Regulatory Complaints

If you feel your privacy concern or grievance has not been satisfactorily addressed by our Data Protection Officer, you have the right to lodge a complaint with your local data protection supervisory authority or the Data Protection Board of India.

13. Policy Updates

We reserve the right to revise or update this Policy at any time to reflect changing technical standards, legal requirements, or operational changes. All updates will be published on this page with a revised "Last Updated" date.

Last Revision Date: 31 July 2026