ACCA Admissions for upcoming batch of March 2026 are open now. Connect with one of our counsellor today.

Privacy Policy

Welcome to Leaf Academy (“we,” “our,” or “us”). We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and safeguard information when you use our website https://leafacademy.in or interact with us in any other way.

This Policy is compliant with:

  • The Digital Personal Data Protection Act, 2023 (DPDP Act) of India

  • The General Data Protection Regulation (GDPR) (EU Regulation 2016/679)

By using our website or submitting your data, you agree to the practices described in this policy.

1. Who We Are

Leaf Academy is an educational platform providing courses, learning resources, and related services.
Data Controller: Leaf Academy
Email: info@leafacademy.in
Website: https://leafacademy.in

For users within the European Economic Area (EEA), we act as the Data Controller for your personal data.

2. Information We Collect

We collect the following categories of data:

a. Personal Data

Provided voluntarily via forms, registration, or communication:

  • Full Name

  • Email Address

  • Phone Number

  • City, Country

  • Educational Qualification / Interests

  • Payment or billing details (for paid courses)

b. Automatically Collected Data

When you browse our website:

  • IP address

  • Browser type and version

  • Device identifiers

  • Operating system

  • Pages visited, time spent, referring URLs

  • Cookies and analytics data

c. Sensitive Personal Data

We do not intentionally collect or process sensitive personal data (e.g., financial account credentials, health data, religious or political beliefs).

3. How We Use Your Data

To provide and manage educational content, enrollment, or certification

  • To send you updates, offers and newsletters.
  • For analytics, performance tracking and marketing.
  • To respond to your queries or support requests.
  • To improve our website performance and UX
  • To comply with legal obligations

4. Legal Basis for Processing (GDPR)

If you are located in the EEA, we rely on the following bases:

  • Consent: When you subscribe or opt in to communications

  • Contract: To provide services you request

  • Legal Obligation: To meet legal or regulatory requirements

  • Legitimate Interests: To improve services, marketing, and operations (without infringing on your rights)

5. How We Share Your Data

We do not sell or rent your data.
We may share limited information with:

  • Service Providers: Website hosting, email automation, analytics, or payment processors (e.g., Google Analytics, Razorpay, Mailchimp)

  • Regulatory or Legal Authorities: Where required by law or in response to legal requests

  • Business Transfers: In case of a merger, acquisition, or restructuring

All third parties are bound by confidentiality and data protection agreements in compliance with GDPR and DPDP.

6. International Data Transfers

Your information may be stored or processed on servers located outside India (for example, in the EU or the United States).
We ensure that such transfers occur only:

  • To countries with adequate data protection standards, or

  • Through contractual clauses that ensure equivalent protection (e.g., Standard Contractual Clauses under GDPR).

7. Data Retention

We retain personal data only as long as necessary for:

  • The purposes it was collected for, or

  • Compliance with legal obligations, or

  • Until you withdraw consent (for marketing purposes).

Afterward, data is securely deleted or anonymized.

8. Your Rights (GDPR + DPDP)

Depending on your jurisdiction, you have the following rights:

  1. Access: Request a copy of the data we hold about you
  2.  Correction: Request correction of inaccurate or incomplete data
  3. Erasure (“Right to be Forgotten”): Request deletion of your data
  4. Restriction of Processing: Limit how your data is used
  5. Data Portability: Receive your data in a structured, machine-readable format
  6. Withdraw Consent: Revoke consent at any time for marketing or data use
  7. Grievance Redressal: File a complaint with Data Protection Board of India (for Indian users) or your local Data Protection Authority (for EU users)

To exercise any of these rights, please email us at info@leafacademy.in

9. Cookies and Tracking

We use cookies and similar technologies for:

  • Analytics (e.g., Google Analytics, Meta Pixel)

  • Site functionality and personalization

  • Marketing and advertising

By using the website, you consent to cookie usage. You can manage or disable cookies through your browser settings.
A cookie consent banner will be displayed on first visit as per GDPR and DPDP guidelines.

10. Data Security

We implement strict technical and organizational measures including:

  • SSL encryption

  • Access controls

  • Regular security audits

  • Secure payment gateways

While we take every precaution, no system is 100% secure. Use of the Site implies acceptance of this risk.

11. Children's Privacy

We do not knowingly collect personal date from individual under the age of 13 (or 16 in the EU)

12. Change to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with a revised “Last Updated” date.
If significant updates are made, we will notify you via email or site notice.

13. Contact Information

For questions, concerns, or data-related requests, contact:

Leaf Academy
Email: info@leafacademy.in
Website: https://leafacademy.in

If you are an Indian user and have any concerns regarding the processing of your personal data, you may contact:

Grievance Officer
Email: info@leafacademy.in
Response Time: Within 15 business days