Your information. Our responsibility.

This Privacy Policy applies to personal information collected through IID digital services. It may not apply to third-party websites, applications, platforms or services that are independently operated by other organisations.

“Personal Data” means information that relates to an identifiable individual or can reasonably be associated with or used to identify an individual. IID will seek to collect only information that is reasonably necessary for the relevant purpose.

When you visit the IID website, certain technical information may be collected automatically, depending on the website configuration and tools being used. This information may be used for website functionality, security, analytics, performance monitoring and improvement.

Depending on the website's cookie-management system, users may be able to manage cookies as listed below. Disabling certain cookies may affect some website functionality.

IID will process personal data only for lawful purposes and through an applicable legal basis or permitted use under the laws applicable to the relevant processing activity. Where consent is required, IID will seek consent in an appropriate manner. The Digital Personal Data Protection Act, 2023 provides for processing based on consent or specified legitimate uses, and requires notice regarding the personal data and purpose of processing.

Where processing is based on consent, you may withdraw your consent, subject to applicable law and legitimate processing requirements. Withdrawal of consent will not affect processing lawfully carried out before withdrawal. Depending on the nature of the request, withdrawal may affect IID's ability to provide certain services or respond to certain enquiries. The DPDP Rules contemplate that users should have accessible means to withdraw consent and exercise applicable rights.

Where applicable, IID may request separate consent for promotional or marketing communication. Marketing consent should be separate from consent required to process an enquiry or provide a requested service where appropriate. You may opt out of promotional communication.

If you provide your email address, IID may use it for the purposes below. Where required, promotional emails will include an appropriate unsubscribe mechanism.

Where students are minors or where a parent/guardian provides information on behalf of a student, IID may process relevant information for educational, administrative and admission-related purposes. Where applicable, IID will follow requirements relating to consent and processing of children's personal data under applicable law.

IID may receive information that users voluntarily submit through admission or other forms. Users should not submit sensitive or confidential information unless IID specifically requests it for a legitimate institutional purpose. Where sensitive information is required, IID will apply appropriate safeguards and process it only for the relevant purpose.

Where IID or an authorised payment service facilitates online payments, payment information may be processed by the applicable payment service provider. IID generally does not require users to provide complete card or banking credentials directly through ordinary website contact forms.

The IID website may contain integrations or links to independently operated platforms. These platforms may have their own privacy policies and terms. IID does not control their privacy practices. Users should review the relevant third party's privacy policy before providing information directly to that platform.

IID may use analytics tools to understand website use and performance. Analytics information may be aggregated or otherwise used for website improvement and reporting. Where applicable, IID will use appropriate consent mechanisms for non-essential analytics technologies.

IID may disclose personal data only where reasonably necessary for a lawful and specified purpose. IID does not intend to sell personal data as a commercial product.

Some third-party technology providers may process or store data outside India. Where personal data is transferred, accessed or processed outside India, IID will take such steps as may be required under applicable law and contractual arrangements.

Users should take reasonable care when sharing information with IID.

You may request deletion of personal information where applicable and subject to legal or other legitimate retention requirements. IID may need to retain certain information where required.

If information submitted to IID is inaccurate, incomplete or outdated, you may request correction or updating where applicable. IID may verify the identity of the requester before making changes.

For privacy-related questions, requests or complaints, contact IID's privacy / grievance contact using the official details on this page.

IID may process certain information to protect users and institutional systems.

If IID's operations, assets or relevant organisational structure are transferred, merged, reorganised or otherwise changed, personal information may be transferred as part of such transaction, subject to applicable law. Any recipient would be expected to handle personal information in accordance with applicable legal requirements.

IID may use reasonable technical and organisational measures to protect the website. Despite reasonable safeguards, IID cannot guarantee that the website will always be free from security risks.

IID relies on information submitted by users. Users are responsible for ensuring that information supplied to IID is accurate, complete and current. IID may request clarification or supporting documentation where necessary.

Information voluntarily posted by a user in a publicly accessible area may become visible to other users or third parties. Users should carefully consider whether to publish personal information publicly.

Where IID publishes student, parent, alumni or other testimonials, the information will be used in accordance with the applicable permission, consent or lawful basis. Users should not assume that testimonials constitute a guarantee of a particular academic or career outcome.

You may request that IID stop sending non-essential promotional communications. IID may require reasonable time to process such requests.

If you provide IID with personal information relating to another person, such as a parent, guardian or student, you should do so only where you are authorised or legally permitted to provide that information.

IID aims to collect personal information that is reasonably necessary for the stated purpose. Users are encouraged not to provide information that is unrelated to the enquiry or service requested.

Where consent is required, IID may maintain records relating to consent for compliance and operational purposes.

IID may update this Privacy Policy from time to time. The updated policy will be published on this webpage with a revised Last Updated date. Where required, IID may provide additional notice regarding material changes.

For questions regarding this Privacy Policy, contact Indian Institute of Design using the official details below.

By submitting an IID website form, you acknowledge that you have read and understood IID's Privacy Policy and consent to the processing of the information provided by you for the stated purpose of responding to your enquiry and providing relevant IID information, subject to applicable law.

IID will endeavour to ensure that privacy notices provided at the point of data collection are clear, understandable and sufficiently specific. The notice may be presented separately from other website terms where appropriate.

Where consent is required, IID will seek an affirmative action from the individual. Consent checkboxes should not be pre-selected by default for optional processing or marketing purposes. Different purposes may require separate consent options.

Where processing is based on consent, IID will provide a reasonable mechanism through which consent may be withdrawn. The withdrawal mechanism should be reasonably accessible and should not require unnecessarily complicated steps. Withdrawal may not affect processing that was lawfully completed before withdrawal.

Where applicable under the prevailing data-protection framework, IID will facilitate the exercise of a nomination-related right in accordance with applicable law and prescribed procedures.

IID will endeavour to respond to valid privacy requests within the time period prescribed by applicable law. Where a request cannot be fulfilled, IID may provide an explanation to the extent permitted or required by law.

IID will maintain reasonable procedures for identifying, assessing, containing and responding to personal-data breaches.

IID or its authorised technology providers may maintain secure backups of relevant information. Backups may remain temporarily available even after information is deleted from an active system where necessary for disaster recovery, security or legal purposes. Such backup data will be handled in accordance with applicable retention and security practices.

IID may require relevant employees, consultants and service providers to maintain confidentiality regarding personal information accessed in connection with their work.

IID does not intend to make significant decisions about individuals solely through automated processing unless such processing is permitted under applicable law and appropriate safeguards are implemented. Where applicable, IID may use automated tools for operational purposes such as spam detection, analytics, security monitoring or form processing.

If IID introduces a chatbot, virtual assistant or automated enquiry system, information entered into that system may be processed for the purposes below. Users should avoid submitting unnecessary confidential information through a chatbot.

If CCTV or other security systems are used at IID premises, visual information may be collected for campus security and related purposes. CCTV footage may be retained for an appropriate period based on operational, security and legal requirements.

For events, seminars, workshops and other activities, IID may collect participant information. Event-specific notices may be provided where required.

If a person provides IID with another individual's contact details for a referral or enquiry, the person providing the information should ensure that they are authorised to do so or have an appropriate basis for providing it. IID may contact the referred person for the stated purpose.

Where IID collects information from applicants, interns, consultants or other professionals, such information may be used for recruitment and related administration. A separate recruitment privacy notice may be used where appropriate.

Where applicable, IID may retain transaction-related information. Financial records may be retained for periods required by applicable law.

IID may maintain internal retention schedules identifying appropriate retention periods for different categories of data. Retention may vary according to the purpose and applicable law.

IID may use anonymised or aggregated information for institutional purposes. Where information has been properly anonymised, it may no longer constitute personal data under applicable law.

IID may use CAPTCHA, anti-spam systems or similar security technologies. Such systems may process limited technical information as necessary for security.

If a future IID application or digital service requests access to device features, the relevant permission will be requested through the applicable device or platform mechanism where required. Users may manage permissions through their device settings, subject to the functionality of the service.

Technical information associated with website access may be recorded by hosting, security or infrastructure providers. This information may be used for security, reliability and website administration.

Some IID webpages may display content from third parties. Such third parties may process technical or usage information when their content is loaded or used. Users should review the relevant third party's privacy practices.

Nothing in this Privacy Policy is intended to restrict any mandatory right, protection or requirement available under applicable law. Where applicable law requires a different standard, the applicable legal requirement will prevail.

Where the website requires consent or acknowledgement, users may be asked to confirm that they have read and understood the applicable Privacy Policy. A Privacy Policy acknowledgement does not automatically constitute consent for every possible processing activity. Where separate consent is required, IID may provide a separate consent mechanism.