Privacy Policy

Wings to Fly Center ("we," "us," or "our"), operating from Mumbai, Maharashtra, India, is committed to protecting the privacy and security of your personal data. This Privacy Policy outlines how we collect, use, disclose, store, and process your personal information when you visit our website (wingstofly-in.com), book clinical or career counseling sessions, or participate in our institutional training programs.

This document is formulated in compliance with Section 43A of the Information Technology Act, 2000; Regulation 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the "IT Rules"); and references the general consent and processing architectures mandated under the Digital Personal Data Protection (DPDP) Act, 2023.

1. Information We Collect

We may collect two broad categories of data from you: Personal Data and Sensitive Personal Data or Information (SPDI).

• Personal Identity Data: Name, age, date of birth, gender, and school/corporate affiliation details.
• Contact Information: Email address, physical address, and mobile phone number.
• Sensitive Personal Data (SPDI): Medical history, physiological wellness indicators, psychological traits, and behavioral assessments filled voluntarily by clients or legal guardians during consultation preparation or clinical evaluations.
• Technical Data: IP addresses, browser types, device data, and anonymized user analytical metrics gathered via essential cookies.

2. Grounds and Purpose of Data Processing

We process your personal information strictly based on clear, specific, and legitimate purposes, supported by either your **explicit consent** or legal necessities:

• Service Provisioning: To design customized clinical psychology, emotional resilience, or career trajectory maps.
• Communication & Scheduling: To coordinate bookings, issue appointment updates, and send requested academic path tools.
• Billing & Validation: To execute payment accounting transactions securely.
• Legal Compliance: To adhere to applicable safety protocols, judicial requests, and national commission mandates.

3. Information Sharing and Disclosure

We do not trade, sell, or rent your personal information to third-party commercial marketing networks. Data sharing is limited to the following restricted contexts:

• With Explicit Consent: Sharing evaluations with educational institutions or corporate systems only when strictly pre-authorized by you or a legal guardian.
• Service Partners: Securely sharing essential transaction or scheduling data with third-party web application managers operating under stringent non-disclosure agreements.
• Legal Compulsion: When requested by authorized government bodies or courts under specific legislative provisions to address protective safety or cyber-security concerns.

4. Data Security & Technical Standard Maintenance

In alignment with Rule 3 of the IT Rules, 2011, we execute comprehensive managerial, operational, and technological safety guidelines to protect against unauthorized data alteration, leakages, or destruction. This includes internal encryption frameworks, restricted administrative accessibility configurations, secure database endpoints, and routine validation sweeps. While we enforce clinical-grade internal protection baselines, users acknowledge that internet-wide operations carry localized transit risks.

5. Data Retention Boundaries

Your personal and diagnostic records are retained only for as long as necessary to successfully complete individual therapeutic cycles, fulfill organizational training contracts, clear auditing checkpoints, or comply with statutory limitations. Once data outlives its operational or legal utility, it is permanently scrubbed or safely anonymized.

6. Your Data Rights

Under Indian legal provisions, you hold complete autonomy over your personal information, including the right to:

• Access and Review: Request a review of the personal files or diagnostic notes currently logged in our databases.
• Correction and Update: Request modification or corrections to incomplete or inaccurate personal details.
• Withdraw Consent: Revoke processing authorization at any stage. Dropping consent may limit our capability to offer structured individual counseling tracks moving forward.

7. Grievance Redressal Mechanisms

In accordance with the IT Act, 2000, and the DPDP Act, 2023, if you have any questions, concerns, updates, or complaints regarding our data handling protocols, you may formally contact our designated Grievance Officer:

8. Policy Amendments

We reserve the right to revise this Privacy Policy periodically to reflect emerging digital regulatory shifts, compliance rule updates, or system architecture updates. Any adjustments made will be immediately indicated by a revised timestamp posted clearly at the top of this page.