Introduction and Scope
1.1
This Privacy Policy (“Policy”) describes how Treqo School of Modern Learning Private Limited, operating under the trade name “Treqo” (“we”, “our”, “us”), collects, uses, stores, discloses, transfers, and protects your personal data in connection with your use of the Treqo Platform, on-campus studio programs in Madhapur, online flagship cohorts, and all related educational services.
1.2. Compliance Framework
This Policy is issued in strict compliance with:
- Section 43A and Section 72A of the Information Technology Act, 2000;
- The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”);
- The Digital Personal Data Protection Act, 2023 (“DPDPA 2023”) and rules framed thereunder; and
- The Consumer Protection Act, 2019 and Consumer Protection (E-Commerce) Rules, 2020.
1.3
This Policy applies to all personal data processed by Treqo through our website (www.treqo.org), admissions portal, webinar registrations, offline studio admissions, capstone portfolios, and institutional campus partnerships.
1.4. User Consent
By using any Treqo Service or submitting your details through our admission or curriculum download forms, you signify your consent to the collection and processing of your personal data as outlined in this Policy. For individuals under eighteen (18) years of age, parental or guardian consent is mandatory.
Data Controller
2.1. The data fiduciary and controller responsible for your personal data is:
| Field | Details |
|---|---|
| Entity Name | Treqo School of Modern Learning Private Limited |
| Registered Office & Campus | Plot No. 286, 4th Floor, Road No 16, Ayyappa Society Main Rd, Madhapur, Hyderabad 500081, Telangana, India |
| Data Privacy Email | legal@treqo.org |
| Admissions & Support | admission@treqo.org / support@treqo.org |
Categories of Personal Data Collected
3.1. Data Provided Directly by You
- aApplication & Lead Data: Full legal name, email address, WhatsApp/mobile telephone number, current career background, educational status, and target program selection.
- bAcademic & Professional Data: Résumé, portfolio links, GitHub/Figma repositories, prior marketing experience, and capstone project submissions.
- cFinancial & Invoicing Data: Billing address, GSTIN (for corporate/B2B invoicing), and payment confirmation tokens. Treqo does not store full credit card numbers, CVVs, or UPI PINs.
- dCommunications: Notes, transcripts, and records of admissions advisory discussions, counseling calls, and mentor feedback sessions.
3.2. Data Collected Automatically
- aTechnical Data: IP address, browser type, operating system, device identifiers, screen resolution, and network latency.
- bUsage & Interaction Data: Page visit flow, syllabus download events, video watch completion rate, and referral sources.
Purposes and Legal Bases for Processing
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Cohort Admissions & Counseling | Name, email, WhatsApp, profile | Contractual necessity / Consent |
| Curriculum & Resource Delivery | Email, WhatsApp number | Legitimate interest / Consent |
| Tuition & Invoicing (GST Compliance) | Billing details, GSTIN, transaction ID | Legal obligation (GST Act, 2017) |
| Career Placement & Referrals | Portfolio, deliverables, capstone score | Explicit consent (per fellow) |
| Platform Security & Fraud Prevention | IP address, telemetry logs | Legitimate interest |
Disclosure of Personal Data
No Data Brokerage: Treqo does not sell, rent, or trade your personal data to any third party for independent advertising or commercial purposes.
Personal data is disclosed only to verified service providers under binding data processing agreements:
- Cloud Infrastructure: Secure cloud database and server hosting within India.
- Communications Providers: WhatsApp Business API and email gateways for admissions notifications and curriculum dispatch.
- Hiring Partners (Placement Track): Fellow work samples and portfolio summaries are forwarded to recruiting agencies and companies solely upon the fellow's explicit request.
- Legal & Regulatory Authorities: Where mandated by court orders, lawful requests, or statutory obligations under Indian law.
Cross-Border Data Transfers
6.1. Treqo stores all student and applicant data primarily on servers located within India. In scenarios where auxiliary SaaS processing tools operate globally, transfers are conducted strictly under contractual safeguards that guarantee privacy standards equivalent to the Digital Personal Data Protection Act, 2023.
Data Retention Schedule
| Data Category | Retention Period | Statutory Basis |
|---|---|---|
| Enrolled Fellow Records | Course duration + 3 years | Educational record & alumni services |
| Verified Credentials & Certs | Permanent / Indefinitely | Employer verification & proof |
| Financial & Invoicing Invoices | 7 years from invoice date | Section 36, CGST Act, 2017 |
| Admissions Lead Inquiries | 12 months from inquiry date | Consent & admissions cycle |
Security Measures & Data Protection
8.1. Treqo implements industry-standard organizational and technical security measures:
- TLS 1.3 encryption across all public and internal web endpoints;
- Restricted, role-based access control (RBAC) to student and applicant personal data;
- Secure tokenized authentication without plaintext password storage;
- Encrypted at-rest storage for all admission database tables; and
- Regular security audits and continuous automated dependency vulnerability scanning.
8.2 Incident Notification: In the unlikely event of a security breach affecting personal data, Treqo will notify affected individuals and the Data Protection Board of India within 72 hours as mandated by DPDPA 2023.
Cookie Policy & Analytics
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential / Core | Modal state, navigation, form session management | Session |
| Performance & Analytics | Aggregated user navigation trends (IP anonymized) | 12 months |
| Marketing & Pixels | Ad campaign attribution for admissions cohorts | 90 days |
Your Rights as a Data Principal (DPDPA 2023)
10.1. As a data principal under Indian law, you have the following enforceable rights:
Request a summary of your personal data processed by Treqo and the identity of third-party processors.
Request correction of inaccurate or misleading personal data, or completion of incomplete records.
Request deletion of your data where continued retention is no longer necessary for admissions or legal compliance.
Withdraw consent for admissions outreach or newsletters at any time via written request.
Submit grievances directly to Treqo's Grievance Officer, with escalation rights to the Data Protection Board of India.
Nominate an individual to exercise data principal rights in the event of death or incapacity.
10.2 How to Exercise Your Rights: Email legal@treqo.org with the subject line “Data Rights Request, [Your Name]”. We acknowledge requests within 3 working days and respond substantively within 15 working days.
Third-Party Links
11.1. Our website may contain references or links to client brands, alumni startup portals, or partner tools. Treqo is not responsible for the privacy practices of external platforms, and users are encouraged to inspect third-party privacy notices independently.
Children's Privacy
12.1. Treqo does not knowingly enroll or process personal data of individuals under thirteen (13) years of age. Applicants between 13 and 18 years must register with verified parental or guardian consent.
Amendments and Contact Details
13.1. This Policy is effective as of September 2026 and may be updated periodically to reflect statutory updates or operational enhancements.