1. Introduction
The Indian Institute of Management Bangalore, operating through its digital learning initiative IIMBx (hereinafter “IIMB,” “IIMBx,” “us,” “we,” “our” or “the Institute”), is committed to the security and responsible management of personal data, so as to function effectively and successfully for the benefit of our stakeholders, learners and the wider community. In doing so, it is essential that people’s privacy is protected through lawful and appropriate means for handling personal data. Therefore, we have implemented this privacy policy (hereinafter referred to as the “policy”).
2. Aim
This policy aims to protect the personal data of the various stakeholders connected to our Institute. It is aimed at providing individuals with notice of the basic principles by which we process the personal data of individuals (“Personal Data”) who visit, use, deal with and/or transact through the website, and includes a guest user and browser (hereinafter ‘you’, ‘user’).
3. Purpose and Scope
The purpose of this policy is to describe how IIMBx collects, uses, and shares information about you through our online interfaces (e.g., websites and mobile applications) owned and controlled by us, including but not limited to https://online.iimbx.edu.in/ (hereinafter the “website”), which hosts the programs and related offerings. This policy is also designed to provide information on how we ensure data security, conduct data transfers and processes requests from data subjects.
4. Types of Personal Data collected
We may collect the following types of personal information based on your interaction with our services:
A. Personal Identification Data
First Name, Last name
Job title & Company
Signature
Photographs
B. Financial Data
Payment gateway account details
E-wallet account details
C. Personal Characteristics
Age
Gender
Date of Birth
Marital Status
Nationality
D. Contact Data
Postal address
Email address
Phone number
E. Educational Background
Educational qualification(s)
Post-qualification experience documents (e.g. Offer Letter, Experience Letter)
F. Electronic Identification Data
Login credentials (if you are a registered user)
Visitor’s IP data
Date and time of website visit
Pages visited and navigation on the website
Browser being used
Country of accessing the website
Language of the browser being used
Words searched for
Pixel tags
G. Inquiries
Personal Data stated in the form – for example: Name, address, phone number, country
Subject of inquiry
Personal details (Name on the card, billing address)
Payment details (card numbers, card type)
Recordings of calls with learners and users showing interest in our Programme
Information about your interactions with customer service and maintenance interactions with us
H. User-Generated Data
Projects and assignments submitted
Peer feedback and grading
Program performance data
Responses to quizzes, standalone quizzes, exams, and surveys
Web cam recordings (during assessments related to online courses)
Posts made to public forums through our platform
Any other information necessary to ensure conformity with test/assessment rules, and areas of interest
I. Marketing Data
Your preferences in receiving marketing information from us
Your communication preferences
J. Behavioural Data
Data inferred or assumed information relating to your behaviour and interests based on your online activity on our sites
5. Sources of data collection
The data collected by us is derived directly from information provided by the user or by use of our sites.
Data collected when you:
Register/apply for various seminars, webinars or any other outreach initiatives made available by us
Request a quote for the various products and services offered by us
View our services or visit our website pages on the internet
Browse our website
Appear for assignments, exams or any other assessments in relation to online courses
Data collected from third parties
We receive Personal Data such as access or login details, profile picture or any other text/image in relation to your Personal Data which may be available with such third parties. We also receive information about your visits to this platform and to other websites using pixel tags.
Third parties from whom we receive your Personal Data include our service providers, other networks connected to our service, our advertising partners, our marketing and advertising affiliates, our educational partners, scholarship providers, analytics providers, recruiters and such other third-party sources.
6. Cookies
Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. When you visit our websites, we may collect information from you automatically through cookies or similar technology.
Furthermore, we may allow third-party advertising companies (such as Meta, Google, Twitter, Quora and Bing) to place cookies on our website. These cookies enable such companies to track your activity across various sites where they display ads and record your activities, so they can show ads that they consider relevant to you as you browse the internet. These cookies store information about the content you are browsing, together with an identifier linked to your device or IP address.
How do we use cookies?
IIMBx uses cookies in a range of ways to improve your experience on our website, including:
To recognise our website user and to enhance the user experience when interacting with our website
To help us analyse the use and performance of our website and services
To improve the delivery and value of various services and products offered by us
What types of cookies do we use?
There are a few different types of cookies; however, our website uses:
Persistent Cookies. We use persistent cookies to improve your experience of using the sites. This includes recording your acceptance of our Cookie Policy to remove the cookie message which first appears when you use the sites.
Session Cookies. Session cookies are temporary and deleted from your machine when your web browser closes. We use session cookies to help us track internet usage as described above.
Analytical/Performance Cookies. Analytical cookies allow us to recognise and count the number of visitors and see how visitors move around our website while they are using it. This helps us improve the way our website works, for example, by ensuring users find what they are looking for.
Functionality Cookies. Functionality cookies recognise when you return to the website. This enables us to create greater content for you and remember your likes, dislikes and other preferences.
Targeting Cookies. Targeting cookies record the visit to our website, the pages navigated to and the links clicked upon. They help to formulate information relevant to the user’s areas of interest.
How to manage cookies?
Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version. Disabling some cookies from the website may have a negative impact and may result in the non-availability of some features.
If you want to remove previously stored cookies, you can manually delete the cookies at any time. However, this will not prevent the sites from placing further cookies on your device unless and until you adjust your internet browser setting as described above.
You can obtain up-to-date information about blocking and deleting cookies via these links:
https://support.apple.com/kb/PH21411 (Safari)
These opt-out mechanisms rely on cookies to remember your choices. If you delete your cookies, use another computer or device, or change browsers, you will need to repeat this process. In addition, opting out of interest-based ads will not opt you out of all ads, but rather only those ads that are personalised to your interests.
7. Data protection principles
Where third parties process data on behalf of the Institute, we endeavour to obtain assurances from such third parties that your Personal Data will be safeguarded consistently. All Personal Data obtained and held by the Institute will: a) be processed fairly, lawfully and in a transparent manner; b) be collected for specific, explicit, and legitimate purposes; c) be adequate, relevant and limited to what is necessary for the purposes of processing; d) be kept accurate and up to date – every reasonable effort will be made to ensure that inaccurate data is rectified or erased without delay; e) not be kept for longer than is necessary for its given purpose; f) be processed in a manner that ensures appropriate security of Personal Data, including protection against unauthorised or unlawful processing, accidental loss, destruction or damage, by using appropriate technical or organisational measures; and g) comply with the relevant laws and procedures for international transfer of Personal Data applicable to us.
8. Consent
We may obtain your consent to collect and use certain types of Personal Data when we are required to do so by law.
Once consent is obtained from the individual to use his or her information for those purposes, the Institute has the individual’s implied consent to collect or receive any supplementary information that is necessary to fulfil the same purposes. Express consent will also be obtained if, or when, a new use is identified. Consent may also be implied where a user is given notice and a reasonable opportunity to opt out of his or her personal information being used for mail-outs and the marketing of new services or products, and the user does not opt out. Subject to certain exceptions (e.g., the personal information is necessary to provide the service or product, or the withdrawal of consent would frustrate the performance of a legal obligation), individuals can withhold or withdraw their consent to use their personal information in certain ways. Further, by using this website, acknowledging this privacy policy, or voluntarily providing us with your Personal Data, you consent to the collection, storage, and processing of your Personal Data in accordance with this privacy policy and our Terms of Service. If you refuse or withdraw your consent, or if you choose not to provide us with any required Personal Data, we may not be able to provide you the services that can be offered on our platform.
9. Purpose of collecting Personal Data
We collect your Personal Data for the following purposes:
To fulfil or meet the reason you provided the information;
For managing and processing purposes, including, but not limited to, tracking attendance, progress and completion of a program. As part of our management and processing of the program, we will use certain Personal Data to administer exams, projects, and other assessments. For example, as part of an exam, IIMBx may use certain information collected from you in order to verify your identity or to monitor your performance during the exam to confirm that you are abiding by the applicable testing rules or requirements;
To send you updates about the programs, other IIMB/IIMBx events, platform maintenance or new services provided by IIMBx, among other things, through itself or through third parties, via WhatsApp, email, SMS, phone call or any other medium;
To enhance the quality of our content and product offerings;
Compliance with security and other mandatory policies and building access;
Providing information to relevant external authorities for tax and other purposes as legally required;
Conducting surveys to assess your satisfaction, including but not limited to our processes or policies;
Setting up and maintaining accounts and subscriptions with third parties that provide information and research services, communication services, and technological services;
Making decisions about your continued engagement;
To monitor use of our information and communication systems to ensure compliance with our IT and document management policies;
To ensure network and information security, including preventing unauthorised access to our computer and electronic communications systems and preventing malicious software distribution;
Business management and planning, including accounting, auditing and insuring;
Planning or reviewing options in relation to the operation or management;
Keeping registers required by law or regulation;
Communicating with you, for example to respond to inquiries;
Enhancing the safety and security of the services and preventing fraud, or protecting our or our customers’, or your rights or property;
Enforcing applicable terms and conditions and other applicable policies.
10. Advertising and Marketing
We send marketing communications only where you have requested information from us or have expressly consented to receive such communications. We may use your personal and usage data to understand your preferences and tailor relevant services and offers. We may also engage third-party partners to display advertisements on our behalf across digital platforms. These partners may collect data regarding your interactions with our platform to deliver targeted advertisements. You may opt out of electronic marketing communications at any time through the opt-out option provided in each communication, and your preference will be duly honoured.
11. Data Sharing
By accessing, using, or registering on our Website and agreeing to this Privacy Policy, you expressly consent to our collection, use, processing, and sharing of your personal information with our affiliates, group entities, business associates, channel partners, educational partners, third-party lenders, technology service providers, vendors, contractors, marketing partners, analytics providers, and other third parties engaged by us from time to time, to the extent necessary for the provision, administration, improvement, support, and promotion of our services. You acknowledge and agree that such third parties may contact you through telephone calls, SMS, WhatsApp messages, emails, in-app notifications, or any other mode of communication in connection with: (i) the services, products, programs, or offerings that you have requested, enrolled in, or expressed interest in; (ii) customer support, onboarding, verification, payment collection, financing, certification, placement assistance, alumni engagement, and other ancillary services; and (iii) additional products, services, programs, offers, benefits, events, or opportunities that we, our affiliates, or our business partners reasonably believe may be of interest to you.
We may also share your information with our technology service providers and marketing partners who assist us in operating our Website and other platforms, maintaining our systems, conducting analytics, personalising user experiences, delivering advertisements, carrying out marketing activities, processing payments, managing customer relationships to serve you better. All such disclosures shall be subject to applicable law and appropriate contractual, technical, and organizational safeguards designed to protect your personal information.
You may withdraw your consent to receive marketing or promotional communications from us, our affiliates, or our partners at any time by using the opt-out mechanisms provided by us or by contacting us through the details provided in this Privacy Policy.
12. Disclosure of Personal Data
IIMB is a leading academic institution and may share or provide access to the personal information collected with other group entities, business partners, and third-party service providers.
Personal Data may be shared with the following categories of third parties: government and regulatory authorities to comply with applicable laws and audits; suppliers, business associates, subcontractors, and service providers for operational, technological, and communication needs; professional advisers, consultants, and recruitment or verification agencies for background checks, payroll administration, and related services; legal advisers and external auditors for legal and compliance purposes; service providers supporting business continuity and contingency planning; and entities enabling participation in digital wallets, payment services, or rewards programs.
We provide access to or share your information with operations third-party service providers who perform services on our behalf strictly on confidential terms. They provide a variety of services to us, including billing, sales, marketing, test proctoring, couriers, mentoring, recruitment consulting, product content and features, advertising, analytics, research, customer service, learner support, data storage, security, fraud prevention, credit facilities, payment processing and legal services. This includes our authorised education and technology partners engaged to operate, market and deliver the program hosted on this website. Such third parties may also collect additional information to serve you better. By submitting your details, you explicitly agree and consent to the collection of such additional information by these third parties.
13. Data Principal rights
Depending on applicable law, you may have the right to:
Right to Access Information
Right to Correction and Erasure
Right to Withdraw Consent
Right to Grievance Redressal
Right to Nominate
To exercise a right that you believe you may be entitled to under applicable law, please write to us at digital.learning@iimbx.edu.in
We may need to verify your identity before we fulfil your request.
Our response and further processing of the request to exercise these rights will depend upon the law applicable in relation to the rights exercised by you. We may refuse requests that are unreasonably repetitive, require disproportionate technical effort, risk the privacy of others, may compromise an ongoing investigation, or are impractical. It is our policy to never discriminate against you for exercising any of these rights.
14. Policy on Children’s Data
We do not knowingly collect, process, or store personal data of individuals under the age of 18. Our platforms are intended for use by adults only.
By accessing or using our platforms and accepting this policy, you confirm and represent that you are 18 years of age or older. If we become aware that personal data of a minor has been collected without the required consent, we will take appropriate steps to delete such data in compliance with applicable law.
15. Data Security and Retention
IIMBx ensures that appropriate technical and organisational measures are in place to safeguard Personal Data and maintain a secure environment for information held both electronically and in physical form. Robust security controls, supported by internal policies and risk assessments, are implemented to prevent unauthorised access, unlawful processing, accidental loss, or damage to Personal Data. Clear responsibilities and accountability for data security are assigned, along with periodic risk reviews to ensure ongoing protection of the confidentiality, integrity, and availability of data.
Personal Data is retained only for as long as necessary to fulfil the purposes for which it was collected, or as required under applicable laws, including for establishing, exercising, or defending legal rights. Where required to extend the retention period, consent will be obtained. Data may also be securely deleted earlier if the purpose for which it was collected has been fulfilled. Users may exercise their applicable data protection rights as provided under this policy.
16. External Links and Third-Party Services
Our website or platform may contain links to third-party websites or services that are not operated by us (for example, university portals, payment gateways, or external content repositories). We do not control and are not responsible for the privacy practices of such third-party sites.
If you follow a link to any third-party site, you are encouraged to review their privacy policy to understand how your Personal Data will be processed.
17. Breach Notification
Where a data breach is likely to result in a risk to the rights and freedoms of individuals, it will be reported to the relevant supervisory authority within 72 hours of the Institute becoming aware of it and may be reported in more than one instalment. Individuals will be informed directly in the event that the breach is likely to result in a high risk to the rights and freedoms of that individual. If the breach is sufficient to warrant notification to the public, the Institute will do so without undue delay.
18. Use of Website and Terms of Service
Use of the website and platform is governed by the applicable Terms of Use, which, together with this Privacy Policy, set out the legal framework for accessing and using our services. This policy forms an integral part of such Terms by reference.
19. Updates to this Policy
We may update this policy periodically. The updated version will be posted on this page with the “Last Updated” date. Continued use of the platform constitutes acceptance of the revised policy.
20. Data Protection Officer
The Institute has appointed a Data Protection Officer, who can be reached at the details below:
Email Address: digital.learning@iimbx.edu.in
Copyright: IIM Bangalore & IIMBx copyrights owned by upGrad Education Private Limited
Last Updated: 18-Jun-2026
Copyright: IIM Bangalore & IIMBx copyrights owned by Talentedge (an upGrad Education Private Limited's company)