Last updated Notice version 2026-10-v2
This is the itemised notice the Digital Personal Data Protection Act, 2023 (DPDP Act) and the DPDP Rules, 2025 ask us to give you before we collect your personal data. It is written in plain English. If anything here is unclear, ask us before you fill in a form.
Notice version 2026-10-v2. The version number travels with every form you submit, so we can always tell which notice you saw.
Who we are
Rahul Seth (proprietor), trading as Excel Traders Academy, a stock-market coaching centre in Beltola, Guwahati, Assam. We are the data fiduciary for the data described here, which means we decide what is collected and why.
Our address and contact details are on the contact page. Our grievance officer is named at the end of this notice.
What we collect, and why
We collect only what a form needs for the purpose you choose. Every field is listed below. Nothing is collected in the background.
| When you… | We collect | So that we can |
|---|---|---|
| Send an enquiry (a question, a fees and payment question, or a request for a demo class) | Name, phone number, email (optional), preferred language (English, Hindi or Assamese), the topic and your message, the course you asked about, your confirmation that you are 18 or older | Answer you by phone, WhatsApp or email; arrange the demo class if you asked for one |
| Request the candlestick cheat sheet | Name, phone number or email | Send you the guide |
| Save your Trading IQ quiz result | Name, phone number or email, your score | Show you your answers and suggest a starting level |
| Register for the course | Everything above plus the format you chose and your preferred start, age band, city and PIN code, occupation (optional), how you heard about us, a referral code if you have one, and your declarations | Enrol you, prepare your registration record and reach you about joining |
| Register and are under 18 | A parent’s or guardian’s name and phone number, and their consent | Enrol you lawfully, with your guardian’s agreement |
| Make a data request | Name, the contact detail we hold for you, what you want us to do | Find your records and act on your request |
With every submission we also record the time, a reference number, the page you were on, the referrer and any campaign tags in the link you followed (for example utm_source=ig), so we know which channel brought you to us. The Cloudflare Turnstile check that protects our forms from bots returns a pass or fail token; it tells us nothing about you.
We never ask for, and you should never send us, your Aadhaar or PAN number, identity documents, bank or card details, income, or trading history.
The legal basis: your consent
We process your data on the basis of the consent you give when you submit a form. Each form has separate, unticked boxes:
- one to let us contact you about the thing you asked for;
- one, optional, to let us send you news about classes and events;
- one to confirm you are 18 or older (or, on registration, to give your guardian’s consent).
You can submit a form without the optional marketing box. We record every grant and every withdrawal of consent in a consent log, with the notice version in force at the time.
Where your data goes
Your data is stored and handled by these processors, each under its own published terms:
- Google (Google Sheets, Google Drive, Gmail and Google Apps Script): forms post to a Google Apps Script web app in our own Google account, which writes the rows to a Google Sheet, stores registration documents in a private Google Drive folder and sends confirmation emails through Gmail.
- Cloudflare (Pages, Turnstile and Web Analytics): hosts this website, checks that a form is submitted by a person rather than a bot, and gives us cookieless visitor statistics (see the cookie policy).
- WhatsApp (Meta Platforms): only when you choose to message us. A WhatsApp button opens the WhatsApp app with a draft message; nothing leaves your phone until you tap send, and the conversation is then governed by WhatsApp’s own terms.
- Meta Platforms and Google (Google Ads), for ad measurement, only if you accept the cookie bar. If you tap Accept, the Meta Pixel and the Google Ads tag load and tell those companies that an ad brought you here, which pages you saw and whether you asked for course details, so our ads reach more people like you. After a form you submit with that consent in place, our system also sends Meta one matching event with your phone number and email hashed (the Conversions API), so the lead can be credited to the ad without Meta reading them. Nothing you type is sent to either company from your browser. If you reject, or before you answer, none of this happens. See the cookie policy.
We do not sell your data or share it with brokers. Beyond the ad measurement you can accept or reject above, we do not use it to build advertising profiles. Our staff see your data only to answer you and run your course.
How long we keep it
- Enquiries, guide and quiz requests that do not lead to an enrolment: 12 months after your last contact with us, after which they are deleted or anonymised automatically. The consent log keeps a note that the record was removed.
- Registration and billing records of students who joined: we keep them for as long as tax and accounting law requires.
- Data requests: kept until the request is closed, plus the period above.
Your rights
Under the DPDP Act you may ask us, at no cost, to:
- access a summary of the personal data we hold about you and how we have used it;
- correct or complete anything that is wrong or out of date;
- erase your data, unless a law requires us to keep it;
- withdraw any consent you gave, at any time;
- nominate another person to exercise these rights for you if you are unable to;
- raise a grievance with our grievance officer, and then with the Data Protection Board of India if you are not satisfied.
We reply within 30 days. Our full process is on the grievance page.
Withdrawing consent
Withdrawing is as easy as giving. Any one of these works:
- reply STOP to any WhatsApp message from us;
- use the unsubscribe link in any email from us;
- send a data request with the form below.
Withdrawal does not undo anything we did lawfully before it, and it does not affect a course you are already enrolled in.
Make a data request
Use this form to ask for access, correction or erasure, or to withdraw consent. Write from the phone number or email address we hold for you, so we can match your records. You can also write to the grievance officer named below with the same details.
Your data, your call
Children
Our courses are for adults. Every enquiry form asks you to confirm that you are 18 or older. Under 18? Ask a parent or guardian to contact us. A registration for someone under 18 needs a parent’s or guardian’s details and their consent, and we do not direct advertising at children.
How we protect your data
The Google account that holds your data uses 2-step verification; the Drive folders are private; the keys our forms use are stored as script properties rather than in code; this site is served over HTTPS only; and no personal data is ever placed in a web address, only a reference number.
Cookies and local storage
This site sets no advertising cookie until you accept the cookie bar, and sets none if you reject; “Cookie settings” in the footer changes your choice at any time. Everything it keeps in your browser, and why, is listed in the cookie policy.
Grievance officer
Rahul Seth
Email: exceltradersacademy@gmail.com
Phone: +916901463131
If we do not resolve your grievance, you may complain to the Data Protection Board of India in the manner the DPDP Act and Rules prescribe.
Changes to this notice
When this notice changes we update the version number and the date at the top. Forms always carry the current version, and we will tell you if a change affects data we already hold.