Privacy policy

1. Who we are

This website, goenglishx.com, is operated by GoEnglishX Education Private Limited (“GoEnglishX”, “we”, “us”), #72, 2nd Cross, 2nd Main, Ganganagar, Bengaluru 560032, Karnataka, India.

Under India's Digital Personal Data Protection Act, 2023 and the rules made under it, we are the Data Fiduciary for the personal data described in this policy: we decide why and how it is processed.

2. What this policy covers

This policy covers personal data we collect through goenglishx.com, including our contact form, when you email us, and when we discuss or provide our services to your business.

Personal data we process to deliver a service for you, such as the details of employees we employ for you through our Employer of Record, is covered by the agreement for that service.

EasyAgentra, our AI chatbot product, has its own privacy policy on easyagentra.com(opens in a new tab).

3. Personal data we collect

Information you give us

• Contact form: your name, work email, company, what you need and your message.
• Emails you send us: your email address, the content of your message and any details you choose to include.
• When we work together: the business contact details of the people we deal with at your company, and the information we need to agree and deliver the work.

Please don't include sensitive information, such as financial or health details, in your messages.

Information collected automatically

When you visit this website, our hosting and security providers process technical information needed to deliver pages and protect the site, such as your IP address, browser type, device type, the pages you request and the time of your visit.

The spam check on our contact form is provided by Cloudflare Turnstile, which processes technical information about your browser to tell people from bots.

Cookies

We don't use tracking or advertising cookies. Our website analytics count visits without cookies. To protect the site, Cloudflare may set strictly necessary security cookies, for bot protection and for the spam check on our contact form. Our cookie notice explains this.

4. How we use your personal data

We use your personal data only for these purposes:

• to reply to your enquiries and questions;
• to discuss, agree and provide our services to your business;
• to keep this website secure, including preventing spam and abuse;
• to run and improve this website, using technical information and analytics that don't identify you;
• to meet our legal obligations.

We process your data on the basis of the consent you give when you submit our contact form or email us, or where the law otherwise permits it, for example to comply with a legal requirement. We will ask for your consent separately before using your details for anything else, such as sending you news about GoEnglishX.

5. What we don't do

• We don't sell your personal data.
• We don't use it for advertising, and we don't share it with advertisers.
• We don't use your personal data, or any content you share with us, to train AI models.

6. Who we share it with

We share personal data only with trusted service providers that help us operate this website and our business, such as providers of hosting, security and email services, and only as needed for them to provide those services. They process it on our behalf and under our instructions.

Where a company setup you've asked us for needs it, we share the details it requires with our partner CA firm.

We may also disclose personal data if the law requires it, for example in response to a valid order from a court or government authority, or to protect the rights, safety or security of GoEnglishX, our clients or others.

If our business is involved in a merger, acquisition or sale, personal data may be transferred as part of that transaction. We will tell you before your data becomes subject to a different privacy policy.

7. Where your data is stored

We don't store enquiries in any website system or database. When you send our contact form, your enquiry is sent by email, through Amazon SES in the Mumbai region, to our inbox at [email protected]. That email is the only copy, and we keep it as long as we need it to respond to you and follow up.

Some of our service providers operate globally, so some data, such as email and the technical information used to deliver this website securely, may be processed outside India. Where this happens, we rely on our providers' security measures and contractual commitments, and we transfer data only as permitted under applicable law.

8. How long we keep it

• Enquiries, through our contact form or by email: we keep your enquiry for as long as we need it to respond to you and follow up on it. You can ask us to delete it at any time by emailing [email protected], and we will do so within 30 days.
• Spam prevention for our contact form: we keep a short-lived record containing a one-way, salted hash of the email address and internet (IP) address used, never the addresses themselves. It's deleted automatically after about one hour.
• Technical and security logs: for up to 90 days, unless needed longer to investigate a security issue.

If we go on to work together, we keep the records of that work for as long as the agreement for it and the law require.

We may keep some data longer where the law requires it. When we no longer need your data, we delete it.

9. How we protect it

We use reasonable security safeguards, including encrypted connections (HTTPS) for every page and form, access limited to the people who need it, and security measures provided by our hosting and security providers.

No system is completely secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as required by law.

10. Your rights

Under Indian data protection law, you have the right to:

• access information about the personal data we hold about you and how we use it;
• correct, complete or update your personal data;
• ask us to erase your personal data, where we no longer need to keep it;
• withdraw your consent at any time. This won't affect anything we did before you withdrew it, but we may no longer be able to reply to you;
• nominate another person to exercise your rights if you die or become unable to do so;
• raise a grievance with us, and if you're not satisfied with our response, complain to the Data Protection Board of India.

If you're in the European Union, the European Economic Area or the United Kingdom

The General Data Protection Regulation (GDPR), or the UK GDPR, gives you the right to access, correct and erase your personal data, to restrict or object to how we use it, to receive it in a portable format, and to withdraw your consent at any time.

We rely on your consent, on steps you ask us to take before entering into an agreement with us, or on our legitimate interest in replying to business enquiries and running our business.

You can also complain to the data protection authority where you live or work.

Elsewhere

If you're located elsewhere outside India, you may have additional rights under the laws where you live. Contact us and we'll help.

11. How to exercise your rights or raise a concern

Email [email protected] with your request. So that we can protect your data, we may ask you to confirm your identity, usually by replying from the email address you gave us.

We will respond to requests and grievances within 30 days.

12. Children

This website and our services are intended for businesses and are not directed at children. We don't knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, please contact us and we will delete it.

13. Changes to this policy

We will update this policy when our practices change. The date at the top shows when it last changed. If we make significant changes, we will highlight them on this page and, where appropriate, tell you by email.

14. Contact

For privacy questions or anything else, email [email protected].