Privacy Notice
MB Learning India Private Limited
Effective date: 4 October 2026. This notice replaces the notice dated 10 March 2026.
MB Learning India Private Limited ("MB Learning", "we", "us") runs educational immersion programmes for schools and students in India and abroad. This notice explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and how you can exercise your rights. It covers:
- our websites (mblearning.org and mblearning.in);
- our student portal (sign-in at mblearning.org/admin/login);
- our enquiry and advertising forms;
- our email and WhatsApp conversations with you.
1. Who is responsible for your data
MB Learning India Private Limited (CIN U85500TS2025PTC205245) is responsible for the personal data described in this notice.
- Registered office: H.No. 6-3-902/7/4, Plot No. 1, Raj Bhavan Road, Somajiguda, Nampally, Hyderabad 500082, Telangana, India.
- Office: 4th Floor, Nordwest, P. Janardhan Reddy Nagar, Gachibowli, Hyderabad 500032, Telangana, India.
For any question about your data, contact our Grievance Officer (section 12).
2. What we collect
a) Student portal, when an account is created
- Student first and last name
- Student email address and phone number
- Gender and date of birth
- School and grade
- Password, stored only in hashed form. We cannot read it.
b) Student portal and programme forms, when a student joins a programme
What we ask for depends on the programme and the destination. It may include:
- Name as on passport, the name to print on the certificate, and nationality.
- Passport number, issue and expiry dates, and passport copies.
- Parent or guardian names and relationship, phone numbers, email addresses and passport numbers.
- City and address.
- Photographs, school ID card, a covering letter and visa forms.
- Visa-support documents, only where the destination's visa requires them: a parent's passport or PAN, a no-objection letter, bank statements, salary slips, income-tax returns or GST documents.
- Health, medical, dietary and emergency-contact information that you or your parent give us for safety, insurance and care during the programme.
- Payment records: amount, date and transaction reference.
- Any special requests you choose to share.
c) Enquiries and advertising
- Name, email address, phone or WhatsApp number, city, and your area of interest.
- We collect these through our website forms, Facebook and Instagram lead forms, WhatsApp chats you start, and email.
d) From your school
For a school-organised trip, your school may share with us the names, grades and parent contact details we need to organise that trip.
e) During a programme
- Attendance records and any assessment results for programme certificates.
- Photographs and videos taken during the programme (see section 3).
f) Website
- The portal uses a session cookie to keep you logged in.
- Our web host keeps standard technical logs, such as IP address and browser type, for security.
3. Why we use it
| Purpose | Data used |
|---|
| Creating and running your portal account | 2(a) |
| Running a programme you have joined: enrolment, travel, hotel and activity bookings, visas, insurance, certificates, safety and emergency care | 2(a), 2(b), 2(d), 2(e) |
| Taking and recording payments, issuing invoices, and keeping accounts | Payment records, names, contact details |
| Answering your enquiry | 2(c) |
| Sending information about programmes in future years, only if you have said YES. For a student under 18, this goes only to a parent or guardian who has said YES. | Name, email or phone |
| Using programme photographs and videos in our brochures, website and social media, only as agreed by the parent or guardian in the programme consent form | 2(e) |
| Meeting legal obligations and protecting our rights | As needed |
We do not use your data for any other purpose without telling you first and, where the law requires it, asking for your consent. We do not sell personal data.
4. Children (under 18)
Under Indian law a child is anyone under 18. Many of the students on our programmes are children.
- Under 13. A child under 13 cannot create a portal account. The portal rejects a date of birth under 13. If a child under 13 joins a school programme, their parent or guardian deals with us directly. If we find an account held by a child under 13, we close it and deal with the parent or guardian instead. We delete the data the child entered, except records that the parent confirms are needed for a booked programme, or that the law requires us to keep.
- 13 to 17. A student aged 13 to 17 may create a portal account to register interest in a programme. We use that data only to run the account and to arrange the programme. Before a student under 18 takes part in a programme, a parent or guardian must give us their details and sign the programme consent form.
- Never. We do not send marketing to anyone under 18, we do not direct targeted advertising at children, and we do not track or profile children's behaviour.
- Parents. If you are a parent or guardian and believe your child gave us data without your agreement, contact the Grievance Officer. We will delete it, except records that the law requires us to keep (section 6).
5. Who we share it with
We share only what each party needs for the purpose above:
- Programme partners for the programme you join: universities and host institutions, hotels, airlines and transport operators, activity providers, and travel insurers.
- Immigration authorities and embassies, for visas and entry requirements.
- Your school, if you are travelling on a school-organised programme. We share only what the trip needs, such as the participant list and rooming.
- Service providers who host or process data for us, such as website hosting, email, CRM, banks and payment providers. They act on our instructions.
- Government or regulators, when the law requires it.
Programmes abroad mean some data goes to partners and authorities in the destination country. We send only what that trip needs.
6. How long we keep it
We keep personal data only for as long as the purpose needs it, and after that we delete it within a reasonable period.
When you withdraw consent, we stop the processing that relied on that consent and delete that data. We keep only what we still need to run a programme you are booked on, or what the law requires us to keep.
Some records must be kept by law, such as invoices and payment and accounting records under tax and company law. We keep these for the period that law requires and use them for nothing else.
If we ask whether you want information about programmes in future years and you do not reply YES, we will not contact you again and we will delete your contact details. We keep only a one-way code of your email address so that we never contact you by mistake.
7. Your rights
You can exercise these rights yourself, or, for a child, through the parent or guardian:
- Access: ask what personal data we hold about you and how we use it.
- Correction: ask us to correct or complete inaccurate data.
- Erasure: ask us to delete your data, except records that the law requires us to keep.
- Withdraw consent: at any time, as easily as you gave it. Reply STOP to our email or WhatsApp message, or write to the Grievance Officer. Withdrawing does not affect anything we did before.
- Nominate: name someone to exercise these rights for you if you die or become unable to.
- Complain: raise a grievance with us (section 12) and, if you are not satisfied, complain to the Data Protection Board of India.
Before acting on a request, we may need to confirm your identity, or, for a child's data, that you are the parent or guardian.
8. Marketing messages
We send information about future programmes only to people who have said YES. For students under 18, that means only a parent or guardian who has said YES. We contact you on WhatsApp only if you have separately agreed to be contacted there. Every message tells you how to stop.
9. Security
We protect personal data with access controls, hashed passwords, and restricted access to uploaded documents. No system is completely secure. If a breach affects your data, we will inform you and the authorities as the law requires.
10. Links to other websites
Our websites may link to other websites. Their own privacy policies apply to them.
11. Language
You can ask us for this notice in Hindi, Telugu or any other language listed in the Eighth Schedule to the Constitution of India.
12. Grievance Officer and contact
Grievance Officer: Duggempudi Taaran Reddy, Founder, MB Learning India Private Limited
- Email: taaran@mblearning.in
- Phone: +91 88888 44666
- Address: H.No. 6-3-902/7/4, Plot No. 1, Raj Bhavan Road, Somajiguda, Nampally, Hyderabad 500082, Telangana, India
Please write "Privacy request" in the subject line. We acknowledge requests promptly. We aim to resolve them within 30 days, and in any case within 90 days.
If you are not satisfied with our response, you may complain to the Data Protection Board of India in the manner it prescribes.
13. Changes to this notice
If we change this notice, we will post the new version on this page with a new effective date. If a change affects how we use data you have already given us, we will tell you before the change applies.