Privacy Policy

PRIVACY POLICY

Effective Date: March 24, 2026

This Privacy Policy describes how Pine Overseas (hereinafter referred to as “Pine Overseas”, “we”, “us”, or “our”) collects, uses, processes, discloses, and protects your personal information when you use our website at https://pineoverseas.com/ (the “Website”), our services, or interact with us. We are committed to protecting your privacy and handling your personal information in a transparent and secure manner, in compliance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (DPDP Act, 2023), the Information Technology Act, 2000 (IT Act, 2000), and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules, 2011).

1. DEFINITIONS

For the purposes of this Privacy Policy:

1.1 “Data Principal” means the individual to whom the personal data relates.

1.2 “Data Fiduciary” means Pine Overseas, which determines the purpose and means of processing personal data.

1.3 “Processing” means a wholly or partly automated operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, erasure, or destruction.

2. WHO WE ARE

2.1 Pine Overseas is an overseas education consultancy dedicated to assisting students with their international study aspirations. Our services include, but are not limited to, career counselling, university selection, application processing, visa guidance, and pre-departure assistance.

3. CONSENT

3.1 By providing your personal data or using our services, you consent to the collection, processing, storage, and use of your personal data for the purposes described in this Privacy Policy. Where required under applicable law, explicit consent will be obtained before processing sensitive or additional personal data.

4. INFORMATION WE COLLECT

4.1 We collect various types of information from and about you to provide our services effectively and to comply with legal obligations. This information may include:

• Personal Information such as full name, date of birth, gender, email address, phone number, mailing address, educational background (academic transcripts, degrees, certificates) and work experience.

• Sensitive Personal Data or Information (SPDI) which may include your financial information (bank account details, credit card or debit card details, or other payment instrument details), biometric information (if required for specific applications), and health information (if required for visa or university applications). We collect SPDI only when absolutely necessary for the provision of our services and with your explicit consent.

• Non-Personal Information that does not directly identify you, such as your IP address, browser type, operating system, referring URLs, pages viewed, and the dates/times of your visits. This information is primarily used for analytical purposes to improve our website and services.

• Information from Third Parties such as educational institutions, testing agencies, or referral partners, where you have provided consent for them to share your information with us.

Users are responsible for ensuring the accuracy and completeness of the personal data they provide.

5. HOW WE COLLECT YOUR PERSONAL DATA

5.1 We collect information in the following ways:

• When you fill out forms on our website, register for an account, subscribe to newsletters, attend our events, communicate with us via email, phone, or in person, or provide documents for application processing.

• Through cookies, web beacons, and other tracking technologies when you browse our website.

• From third-party sources such as educational institutions, testing agencies, or other partners with your consent.

6. HOW WE USE DATA

6.1 We process your personal data primarily based on your consent, except where processing is permitted under legitimate uses as defined under the DPDP Act, 2023. Such legitimate uses may include:

• To provide our services: This includes career counselling, university shortlisting, application submission, visa application assistance, accommodation arrangements, and pre-departure briefings.

• To communicate with you: To respond to your inquiries, provide updates on your applications, send important notices, and deliver promotional materials about our services or relevant educational opportunities.

• For legal and regulatory compliance: To meet our obligations under applicable laws, including immigration laws, anti-money laundering regulations, and data protection statutes.

• To improve our services: By analysing usage patterns and feedback to enhance our website functionality, service offerings, and user experience.

• For marketing and promotional activities: Marketing communications are sent only with your explicit consent. You may withdraw your consent at any time by clicking the “unsubscribe” link in our emails or by contacting us using the details provided in this Policy.

• To process payments: For services rendered, including application fees, counselling charges, or other related expenses.

• To maintain records: For administrative, accounting, and audit purposes, ensuring transparency and accountability in our operations.

• To protect our rights and interests: Including fraud prevention, enforcing our terms and conditions, and defending against legal claims.

7. NOTICE AT THE TIME OF COLLECTION

7.1 We shall provide you with a clear and accessible notice, at or before the time of collection of your personal data, specifying:

• The categories of personal data being collected;

• The purpose of processing;

• The manner in which you may withdraw your consent

Such notice shall be made available through website forms, email communications, or other appropriate means.

8. DISCLOSURE OF YOUR INFORMATION

8.1 We may disclose your personal information to third parties under specific circumstances and with appropriate safeguards, primarily to facilitate the provision of our following services:

• To Educational Institutions: We share your academic, personal, and financial information with universities, colleges, and other educational institutions to process your applications for admission.

• To Visa and Immigration Authorities: We may share your personal and sensitive information, including passport details, financial records, and health information, with relevant government bodies and embassies for visa and immigration purposes.

• To Service Providers: We engage third-party service providers to assist us with various functions, such as IT support, payment processing, data analytics, marketing, and courier services. These providers are contractually bound to protect your information and use it only for the purposes for which it was disclosed.

• For Legal Compliance: We may disclose your information if required by law, court order, or governmental regulation, or if we believe such disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.

• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of the transaction. We will notify you via email and/or a prominent notice on our website of any such change in ownership or control of your personal information.

• With Your Consent: We may share your information with other third parties not listed above, with your explicit consent.

9. DATA SECURITY

9.1 We implement reasonable security practices and procedures to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction, as mandated by the SPDI Rules, 2011, and the DPDP Act, 2023. Our security measures include:

• Encryption, firewalls, secure server infrastructure, and regular security audits.

• Access controls, employee training on data protection, and strict internal policies regarding data handling.

• Secure storage of physical documents and restricted access to data processing facilities.

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security. In the event of a personal data breach, we shall notify the Data Protection Board of India and affected Data Principals as required under applicable law.

10. YOUR RIGHTS AS A DATA PRINCIPAL

10.1 Under the DPDP Act, 2023, you, as a Data Principal, have certain rights concerning your personal data such as:

• Right to request access to your personal data held by us and to request corrections to any inaccurate or incomplete data.

• Right to request the erasure (deletion) of your personal data under certain circumstances, subject to legal obligations for retention.

• Right to a readily available means of grievance redressal provided by us in respect of any act or omission of the Data Fiduciary.

• Right to nominate any other individual who shall, in the event of your death or incapacity, exercise your rights under the DPDP Act, 2023.

• Right to withdraw your consent at any time for the collection and processing of your personal data, provided such withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. Please note that withdrawing consent may impact our ability to provide certain services to you.

To exercise any of these rights, please contact us at email provided below. We shall respond to rights requests within the timelines prescribed under applicable law.

11. DATA PRINCIPAL DUTIES

11.1 Under the DPDP Act, 2023, Data Principals have certain duties, including:

• Not to impersonate another person while providing personal data;

• Not to suppress any material information while providing personal data;

• Not to register false or frivolous grievances or complaints.

12. CHILDREN’S DATA

12.1 We may request verification of parental or guardian consent before collecting personal data from for users under 18 years of age. We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children in violation of applicable law.

13. COOKIES AND OTHER TRACKING TECHNOLOGIES

13.1 Our website uses “cookies” and similar tracking technologies to enhance your browsing experience, analyse website traffic, and personalize content. Where required, we obtain your consent before placing non-essential cookies on your device. Cookies are small data files stored on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website.

14. LINKS TO THIRD-PARTY WEBSITES

14.1 Our website may contain links to third-party websites, such as those of educational institutions or visa application centres. We are not responsible for the privacy practices or the content of these third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

15. INTERNATIONAL DATA TRANSFERS

15.1 As an overseas education consultancy, it is inherent to our services that your personal information, including sensitive personal data, may be transferred to and processed in countries outside India, particularly to the countries where you intend to study or apply for a visa. These countries may have data protection laws that differ from those in India. Such transfers shall be conducted in accordance with the DPDP Act, 2023, and any restrictions notified by the Government of India. By using our services, you consent to such international transfers where required.

16. DATA RETENTION

16.1 We retain your personal information only as long as necessary to fulfil the purposes for which it was collected. Compliance, accounting, and regulatory records may be retained for a period of up to seven (7) years or as required under applicable law.

17. CHANGES TO THIS PRIVACY POLICY

17.1 We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website and updating the “Effective Date”. We encourage you to review this Privacy Policy periodically.

18. GOVERNING LAW AND JURISDICTION

18.1 This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising out of or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts in Vadodara, Gujarat, India.

19. CONTACT US

19.1 If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

info@pineoverseas.com