What we collect, why, who else sees it, how long we keep it, and how to have it changed or deleted. Written for parents first, because many of our learners are children.
The short version
We collect only what we need to reply to you, arrange classes and workshops, and deliver orders.
We don't sell your data, show ads, or track children for advertising.
We ask a parent or guardian's consent before we use a child's details.
You can ask to see, correct or delete your details at any time.
Who is responsible
the business behind Nextory Minds (its registered details are being added) is the data fiduciary for this website under the Digital Personal Data Protection Act 2023. Our grievance officer is being appointed, at privacy@nextoryminds.com.
What we collect, and why
When you book a demo, register for a workshop, send a message or bring us an idea: your name, email and phone number, and what you tell us. For a child: their first name, age or school grade, and interests. We use these to reply, arrange the class or workshop, and send reminders.
When you buy: your name, email, phone and delivery address, to deliver the order and send the receipt. Payment details go to Razorpay, not to us.
When you browse: which pages are visited, the site that sent you (its domain only), campaign tags in the address, the kind of device, and a random visit number. This tells us which pages help people and doesn't identify you. We don't use advertising or social media trackers.
On your own device, the site remembers small things for you: your cart, your maker passport stamps, announcements you've closed, and your chat with Nex during a visit. These stay in your browser; we can't see them.
Children's data
Under the DPDP Act a child is anyone under 18. Before we use a child's details, the parent or guardian confirms on the form that they are the parent or guardian and consent to us using those details for the purposes above. We record when that consent was given.
We don't track children's behaviour, profile them, or show them advertising. Children's work shared on the site, such as a photo of a build, only ever appears with a parent or guardian's separate agreement, and with a first name at most.
Who else handles it
We use a few services to run the site, each only for its part: Supabase (the database), Vercel (hosting), Resend (sending emails) and Razorpay (payments). Their servers may be outside India. Each is bound to protect the data and use it only for us.
We share details with nobody else, except when the law requires it.
How long we keep it
Messages, demo bookings and workshop registrations: up to 2 years after our last contact with you, then deleted.
Orders: as long as tax and accounting law requires (currently 8 years in India).
Visit statistics: up to 400 days, and they never contained your name.
Your rights
You can ask us for a summary of the details we hold about you, ask us to correct or complete them, ask us to delete them, or withdraw a consent you gave. You can also name someone to act for you if you can't. email hello@nextoryminds.com. We reply within 30 days.
If you aren't satisfied with our answer, you can complain to the Data Protection Board of India.
Keeping it safe
Details are sent over encrypted connections, stored with access limited to the people who need them, and protected by database rules that stop anyone else reading them. No system is perfectly secure; if a breach ever affects your data, we'll tell you and the Data Protection Board as the law requires.
Changes
If we change this policy we'll update the date at the top, and for any significant change we'll tell you by email if you're a customer.