Privacy Policy

1. Who We Are

This Privacy Policy is published by Star Aviation Pvt. Ltd. (SAPL) and its subsidiary Star Aviation Academy (SAA), registered in India, with its principal campus at P-76, New Palam Vihar, Sector-110, Gurugram — 122017, Haryana, India.

This policy governs all personal data collected through our website staraviationindia.com and its sub-domains (collectively, "the Site"), including any forms, voice interactions, or other digital touchpoints operated by SAPL / SAA.

We are committed to protecting your privacy in compliance with India's Digital Personal Data Protection Act, 2023 (DPDPA) and applicable rules thereunder. We encourage you to read this policy carefully before submitting any personal information.

2. Information We Collect

2a. Information you provide directly

When you fill the enquiry or scholarship application form on the Site, we collect:

• ◆ Full name
• ◆ Mobile number
• ◆ City / location
• ◆ Preferred programme stream (B1.1 Mechanical or B2 Avionics)
• ◆ Preferred campus visit date
• ◆ Email address (if provided)
• ◆ Any additional information you submit in free-text fields

2b. Information collected automatically

When you visit the Site, our servers and third-party services may automatically record:

• ◆ IP address and approximate geographic location
• ◆ Browser type, version, and operating system
• ◆ Pages visited, URLs requested, and referrer URLs
• ◆ Date, time, and duration of visit
• ◆ Device type and screen resolution
• ◆ Cookies and similar tracking identifiers (see Section 5)
• ◆ Number of bytes transferred

2c. Voice interaction data

The Site features an AI voice assistant powered by ElevenLabs. If you interact with this assistant, your voice input is processed by ElevenLabs' servers to generate a spoken response. Voice sessions may be logged for quality and safety review. By initiating a voice interaction, you consent to this processing.

2d. Information from advertising platforms

If you reach our Site via a paid advertisement (Google Ads, Meta Ads), the advertising platform may share anonymised click identifiers (e.g., Google Click ID / gclid, Facebook Click ID / fbclid) solely to measure campaign effectiveness.

3. How We Use Your Information

We use the information we collect for the following purposes:

We will not use your personal data for any purpose materially different from those described above without first obtaining your explicit consent.

4. Legal Basis for Processing (DPDPA 2023)

Under the Digital Personal Data Protection Act, 2023, we process your personal data on the following grounds:

• ◆ Consent: You provide consent when you submit the enquiry form. You may withdraw consent at any time by contacting us (see Section 8).
• ◆ Legitimate interests: Processing for internal record-keeping, site analytics, and fraud prevention — where our legitimate institutional interests do not override your privacy rights.
• ◆ Legal obligation: Where we are required to retain data for compliance with Indian law or DGCA regulatory requirements.

5. Cookies and Tracking Technologies

The Site uses cookies and similar technologies to enhance your experience and measure performance. The following categories of cookies may be active:

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Site.

6. Third-Party Services and Data Sharing

We use the following third-party services which may process your data on our behalf:

We do not sell, rent, or trade your personal data to any third party for their own marketing purposes. We do not share your personal information with any other educational institution, agent, or recruiter without your explicit consent.

We may disclose personal data if required by law, court order, or lawful request from a government authority.

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

• ◆ Enquiry records (did not enrol): Up to 2 years from date of enquiry, after which data is anonymised or deleted.
• ◆ Enrolled student records: Duration of programme + 7 years, as required for DGCA compliance and institutional records.
• ◆ Analytics data: Aggregated data retained for up to 26 months (standard Google Analytics retention).
• ◆ Voice interaction logs: Session-level logs retained for up to 30 days for quality review, then deleted.

8. Your Rights Under DPDPA 2023

Under India's Digital Personal Data Protection Act, 2023, you have the following rights:

To exercise any of these rights, contact our Privacy Officer at: [email protected] or write to us at the campus address below.

9. Security of Your Information

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• ◆ HTTPS encryption for all data in transit
• ◆ Encrypted database storage with role-based access controls
• ◆ Cloudflare edge protection against DDoS and malicious traffic
• ◆ Only authorised staff can access lead and application records
• ◆ Regular security review of third-party integrations

While we take all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. In the event of a personal data breach affecting your rights, we will notify you as required by applicable law.

Unauthorised use of this website — including attempts to access, alter, or extract data without authorisation — may constitute a criminal offence under the Information Technology Act, 2000 and related Indian legislation.

10. Children's Privacy

Our services are intended for individuals aged 17 and above (minimum eligibility age for the AME programme). We do not knowingly collect personal data from children under 18 without verifiable parental or guardian consent. If you are a parent or guardian and believe your child has submitted personal data without your consent, please contact us immediately and we will delete it.

Where a student is under 18 at the time of application, we may require a parent or guardian to countersign the admission form and provide explicit consent for data processing.

11. Links to External Websites

The Site may contain links to third-party websites for reference purposes. Once you leave our Site, this Privacy Policy no longer applies. We are not responsible for the privacy practices of external websites and encourage you to read their privacy policies before providing any personal information.

12. Changes to This Policy

Star Aviation Academy may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the Site after changes are posted constitutes your acceptance of the revised policy. We encourage you to check this page periodically.

13. Contact / Grievance Officer

For any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our designated Grievance Officer: