Privacy Policy
Last updated 11 November 2026
This policy explains how Mihir Dedhiya's Academy ("the Academy", "we", "us") collects, uses, shares and protects your personal data when you use mihirdedhiya.com, contact us or buy a course. It is published under the Information Technology Act, 2000 and its rules, and the Digital Personal Data Protection Act, 2023. By using this website or giving us your details, you agree to this policy.
1. Personal data we collect
Details you give us: your name, mobile number and email address when you download the brochure, ask to see course fees, request a call back or buy a course. We may also ask which level you are interested in, how you would like to learn and the best time to call you.
Purchase details: the course, exam attempt and mode you buy, the amount paid, and the payment and order references we receive from our payment partner.
Technical details: your IP address, and the date and time of your request, which we record to prevent spam and misuse of our forms.
Course access details: when you use our learning platform, the platform may record the devices you log in from and your viewing time, so that the device and viewing limits in our Terms & Conditions can be applied.
We do not collect your card, UPI or bank details. Payments are handled entirely by Razorpay, and we only receive a payment reference.
2. How we use your data
To reply to your enquiry, send you the brochure, show you the course fees and call you back.
To process your purchase, issue your receipt and send your login credentials and access details by email and WhatsApp.
To give you access to lectures, apply the device and viewing limits you chose, and help you with access problems, extensions and device resets.
To tell you about batches, schedules, offers and other courses that may interest you, by phone, WhatsApp or email. You can ask us to stop at any time.
To prevent fraud, misuse and the sharing or copying of our content, and to protect our rights under our Terms & Conditions.
To keep accounts and records required by tax and other laws, and to respond to lawful requests from authorities.
We use your data only for these purposes. We do not sell or rent your personal data to anyone.
3. Consent and your choices
We process your personal data on the basis of the consent you give when you submit a form or make a purchase, and, where the law allows, for legitimate uses such as completing a purchase you asked for or meeting a legal obligation.
By submitting any form on this website, you agree that we may contact you on the phone number and email address you give us, by call, WhatsApp, SMS or email, about your enquiry and about our courses, batches and fees.
You can withdraw your consent at any time by writing to us (see "Contact and grievances" below). Withdrawing consent does not affect anything done before it. If you withdraw consent needed to deliver a course you have bought, we may not be able to continue giving you access, and the Refund Policy in our Terms & Conditions will apply.
To stop receiving marketing calls or messages, tell us by email, WhatsApp or on a call, and we will stop.
4. Who we share your data with
We share only what is needed, with service providers who work for us under obligations of confidentiality:
Razorpay, to process payments.
Our learning platform provider, to create your account and give you access to lectures.
Cloudflare, which hosts this website and stores form and order records.
Google, whose Google Sheets we use to keep track of enquiries and payments.
WhatsApp (Meta), when we message you or you message us on WhatsApp.
We may also disclose personal data where required by law, a court order or a government authority, or to protect our rights, our content and the safety of our students.
5. Cookies, local storage and embedded content
We do not use advertising, tracking or analytics cookies.
Only strictly necessary cookies may be set: Cloudflare, which hosts this website, may set a security cookie to block bots and attacks, and Razorpay sets cookies during checkout to process your payment safely. These do not track you for advertising.
When you download the brochure or view the fees, your browser remembers the name, phone number and email address you entered, so you are not asked again. Your quiz progress is remembered the same way. This is stored only on your device. You can clear it at any time by clearing your browser's site data.
The map in the Contact section is provided by Google Maps. When you use it, Google may collect data under its own privacy policy.
6. Where your data is stored
Your data is stored with our service providers, some of whom may store or process it on servers outside India. Where this happens, we transfer it only as permitted under Indian law.
7. How long we keep your data
Enquiry details (brochure, fees and call back requests) are kept for as long as they are useful for helping you with your CFA preparation, and in any case not longer than 3 years after our last contact with you, unless you ask us to delete them sooner.
Purchase, payment and invoice records are kept for as long as tax and accounting laws require, currently up to 8 years.
Course access details are kept while your access is valid and for a reasonable period afterwards to handle queries and disputes.
After this, we delete or anonymise your data.
8. How we protect your data
This website uses encrypted connections (HTTPS). Access to your data is limited to the people and providers who need it to serve you. Payment details never reach our systems.
No method of storage or transmission over the internet is completely secure, so we cannot guarantee absolute security. If a breach affecting your personal data occurs, we will inform you and the relevant authorities as required by law.
9. Your rights
Subject to applicable law, you have the right to: ask for a summary of the personal data we hold about you and how we use it; ask us to correct, complete or update it; ask us to erase it once it is no longer needed for the purpose it was collected for or a legal requirement; withdraw your consent; nominate another person to exercise these rights if you die or become unable to; and raise a grievance with us.
To use any of these rights, write to us using the details below. We may need to verify your identity before acting on a request. We may keep some data where the law requires it, for example purchase records.
10. Children
Our courses are meant for adults. If you are under 18, please ask your parent or legal guardian to contact us or buy the course on your behalf; we will process your data only with their verifiable consent. If we learn that we have collected a child's data without such consent, we will delete it.
11. Contact and grievances
For questions about this policy, requests about your data or complaints, contact our Grievance Officer:
Grievance Officer, Mihir Dedhiya's Academy, Ghatkopar, Mumbai, Maharashtra
Email: enquiries@mihirdedhiya.com
WhatsApp/Call: 9136917126 / 9136917191
We will acknowledge your request and try to resolve it within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
12. Changes to this policy
We may update this policy from time to time. The updated version will be published on this page with a new "Last updated" date. Where a change significantly affects how we use your personal data, we will tell you or ask for your consent again where the law requires.