Privacy Policy | KMCT College of Engineering for Women

Privacy Policy

How we collect, use and protect your personal information.

Who we are

KMCT College of Engineering for Women, Kallanthode ("the College") is run by Komath Mehboob Charitable Trust ("KMCT"). For the purposes of the Digital Personal Data Protection Act, 2023, KMCT is the Data Fiduciary responsible for the personal information described in this policy.

KMCT College of Engineering for Women
Kallanthode, NITC-P.O, Kozhikode - 673601, Kerala, India
+91 9539455423 | +91 8921801520 | office@kmctcew.ac.in

Komath Mehboob Charitable Trust
Registered office: Kalanthod, Thazhecode, Kozhikode 673602, Kerala
Registration No. 40/IV/2018

Grievance Officer: Akhinisha P T, Accountant
9072771888 | accounts.t@kmct.edu.in

What this policy covers

This policy covers the personal information collected through this website and the student portal, and the student, admission and fee records that are created from it, for KMCT College of Engineering for Women, Kallanthode.

It does not cover information collected entirely offline and unconnected to the portal - for example, campus CCTV, which is dealt with by a separate notice displayed on the campus.

Information we collect

  • Identity and contact details - name, date of birth, gender, photograph, address, telephone number, email address, and those of a parent or guardian.
  • Academic details - programme applied for or admitted to, admission or register number, academic year, previous qualifications and marks.
  • Payment details - the amount paid, the fee head, the date, the transaction reference, the status of the transaction, and the receipt issued.
  • Technical details - IP address, browser type and pages visited, collected automatically for security and to keep the website working.

We collect only what is needed to process an application, confirm an admission, maintain a student record, and collect and account for fees.

What we do not collect or store

The College does not collect or store your card number, CVV, card PIN, UPI PIN, net-banking password or any other payment credential. These are entered directly on the secure page of the bank or payment gateway and are never visible to the College.

Why we use your information

  • To process applications, confirm admissions and assign an admission number.
  • To collect fees, issue receipts, and maintain accounts.
  • To communicate with you about your application, admission, fees and academic matters.
  • To meet the reporting requirements of the affiliating university, the All India Council for Technical Education and government departments.
  • To meet obligations under Indian law, including tax and audit requirements.

We use your information for these purposes on the basis of the consent you give when you apply or register, and, where the law requires us to hold or report information, on the basis of that legal obligation.

We do not use your information for any other purpose. We do not sell it, and we do not share it for marketing.

Consent, and how to withdraw it

When we ask for your personal information, we tell you at that point what we are collecting, why, and what you are consenting to.

Where we rely on your consent, you may withdraw it at any time. Withdrawing consent is as easy as giving it - write to the Grievance Officer at accounts.t@kmct.edu.in, or use the consent settings in your portal account.

Withdrawing consent stops any further processing that depended on that consent. It does not affect processing already carried out lawfully, and it does not affect information we are required to keep or report under a law, a university regulation, or a direction of a regulatory body - for example, your academic record and your fee record.

Where withdrawing consent means we can no longer provide a service, we will tell you what the consequence is before it takes effect.

Students under 18

Many applicants are under 18 at the time of application. Where the person whose information we hold is under 18, we treat it as a child's personal data under the Digital Personal Data Protection Act, 2023. In that case:

  • The application is made, and consent is given, by a parent or lawful guardian - not by the student.
  • We verify that the person giving consent is an adult, and is the parent or guardian of the student, from the identity and relationship details submitted with the application, in the manner required under the DPDP Rules.
  • Payments are made by the parent or guardian.
  • We do not track a student under 18 across other websites, do not carry out behavioural monitoring of a student under 18, and do not direct advertising at them.
  • We use the information only for the admission, academic and fee purposes set out in this policy.

A parent or guardian may exercise all the rights in this policy on the student's behalf. Once the student turns 18, the student may exercise those rights directly, and we will update our records on request.

Who we share it with

We share your information only where necessary, and only with:

  • Banks and payment gateways, to process a payment or a refund.
  • The affiliating university, and the All India Council for Technical Education.
  • Government departments and statutory authorities, where required by law.
  • Service providers who operate the portal and the website on our behalf, under a written obligation of confidentiality and a restriction on using the information for any other purpose.
  • Auditors, in the course of a statutory audit.

Where you choose to load embedded content on this website - a video or a map - the provider of that content receives your IP address and information about the page you are viewing. See "Cookies and embedded content" below.

Where your information is stored

The portal and its database are hosted on cloud infrastructure located in Mumbai, India. We do not transfer your personal information outside India.

Where you choose to load embedded content from a third party, technical information about your visit may be received by that provider outside India, under its own privacy policy, which the College does not control.

How long we keep it

Record Retention
Student academic record - admission number, programme, results, certificates issued For the period required by the affiliating university and the All India Council for Technical Education, and thereafter as part of the permanent institutional record
Fee and payment records, receipts, transaction references 8 years from the end of the financial year to which they relate, for tax and audit purposes
Application records of candidates who were not admitted, or who withdrew 1 year after the close of that admission cycle
Website and portal access logs 1 year
Correspondence about a grievance or a refund 3 years from the date the matter was closed

After these periods we delete the information, unless a specific legal, audit or dispute requirement means we must keep it longer.

Security

The website and the portal use secure connections (HTTPS/TLS). Access to student and fee records is restricted by role - a member of staff sees only the records they are authorised to see, and a student sees only their own record. Access is logged. Payment processing is carried out entirely on the secure infrastructure of the bank or payment gateway.

No system can be guaranteed to be completely secure. We take reasonable technical and organisational measures appropriate to the sensitivity of the information we hold.

If something goes wrong

If a personal data breach occurs, we will inform the Data Protection Board of India and every affected person without delay, and in any event within the period required under the DPDP Rules. We will tell you what happened, what information was involved, what we are doing about it, what you can do to protect yourself, and who to contact.

Cookies and embedded content

This website uses cookies that are necessary for it to function - for example, to keep you logged in during a session and to remember your cookie choice.

Some pages embed content from other services - videos from YouTube and maps from Google Maps. When such content loads, the provider may set its own cookies and receive your IP address and information about the page you are viewing. That happens under the provider's own privacy policy, which the College does not control.

Embedded content of this kind is not loaded until you allow it. When you first visit the site you are asked whether to allow embedded content and the cookies it sets. You may accept, reject, or change your choice at any time using the "Cookie Settings" link in the footer. If you reject, videos and maps are replaced by a placeholder with a link to open the content on the provider's own site.

We do not use advertising cookies, we do not use analytics cookies, and we do not use cookies to build a profile of you.

You can also block cookies in your browser, but parts of the website may then not work.

Your rights

Under the Digital Personal Data Protection Act, 2023, you have the right to:

  • Access - a summary of the personal information we hold about you, how we are processing it, and who we have shared it with.
  • Correction and completion - to have information that is wrong corrected, and information that is incomplete completed.
  • Erasure - to have information erased where we no longer need it for the purpose it was collected for and no law requires us to keep it.
  • Withdraw consent - as described above.
  • Grievance redressal - to complain to us, and, if you are not satisfied with our response, to the Data Protection Board of India.
  • Nomination - to nominate another person to exercise these rights on your behalf if you die or become unable to act. Write to the Grievance Officer to register a nominee.

Some information cannot be erased. Academic records, fee records, and records the university, a regulatory body or tax and audit law require us to keep are retained for the periods set out above, whatever the outcome of a request.

How to exercise a right, or make a complaint

Write to the Grievance Officer:

Akhinisha P T, Accountant
KMCT College of Engineering for Women
Kallanthode, NITC-P.O, Kozhikode - 673601, Kerala, India
9072771888 | accounts.t@kmct.edu.in

We will acknowledge your request within 7 working days and respond within 30 days. If we need longer, we will tell you why and when you can expect a response.

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Changes to this policy

We may update this policy. The version published on this website is the version in force.