Privacy Policy

1. Who We Are and What This Policy Covers

iNCUBE8 VFX Academy, operated by iNCUBE8 Education Pvt. Ltd. (“iNCUBE8”, “we”, “us”, or “our”) is a vocational career training institute offering skill-based programmes in Visual Effects (VFX), 3D Animation, Motion Graphics, Game Design and other creative courses. We are headquartered in Goregaon West, Mumbai, Maharashtra, India.

This Privacy Policy explains how iNCUBE8 collects, uses, stores, shares, and protects personal data when you:

Interact with our advertisements on Meta platforms (Facebook and Instagram) or Google (Search and Display)
Visit any iNCUBE8 advertising landing page
Submit an enquiry through our lead generation forms
Communicate with us via phone, WhatsApp, email, or SMS following an enquiry

This Policy is published in compliance with:

The Digital Personal Data Protection (DPDP) Act, 2023
The Digital Personal Data Protection Rules, 2025
The Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
Meta Lead Ads Terms and Meta Business Tools Terms
Google Ads Data Collection and Use policies

By submitting any enquiry form on an iNCUBE8 landing page or by engaging with our advertisements, you acknowledge that you have read and understood this Privacy Policy.

2. Data We Collect

2.1 Information You Provide Directly

When you submit our enquiry form, we collect:

Full name
Mobile phone number
Email address
City or location
Course or programme of interest
Any additional information you voluntarily share in the form or in subsequent communication

2.2 Information Collected Automatically

When you visit our landing pages, we and our technology partners automatically collect:

IP address
Browser type and version
Device type and operating system
Date and time of visit
Pages visited and time spent on page
Referring URL (how you arrived at our page)
Cookie identifiers (see Section 8, Cookie Policy)
UTM and advertising campaign parameters

2.3 Data We Do Not Collect

We do not collect, ask for, or store — at any stage of our lead generation funnel — the following categories of sensitive personal data:

Aadhaar numbers, PAN numbers, or any government-issued identification numbers
Bank account details, credit/debit card numbers, or any financial information
Health, medical, or insurance information
Criminal records or arrest history
Political opinions or religious beliefs
Biometric data

Our lead generation forms are designed solely to capture contact details and course interest. If our form requests change in the future, this Policy will be updated accordingly.

3. How We Use Your Data

We use your personal data strictly for the following purposes:

3.1 Responding to Your Enquiry

To contact you about the course or programme you expressed interest in, and to provide information about admissions, curriculum, fees, batch schedules, and demo classes.

3.2 Communication and Follow-Up

To communicate with you via phone call, WhatsApp, email, or SMS in connection with your enquiry. By submitting our form, you expressly consent to being contacted through these channels. You may withdraw this consent at any time (see Section 7).

3.3 Advertising and Remarketing

To display relevant advertisements to you on Meta platforms (Facebook and Instagram) and Google platforms, including to people who have previously visited our landing pages or submitted an enquiry. This is achieved through Meta Pixel, Meta Conversions API (CAPI), Google Analytics, and Google Ads remarketing tags, as described in Section 5.

3.4 Analytics and Campaign Optimisation

To understand how users interact with our landing pages and advertisements, to improve ad performance, and to measure the effectiveness of our marketing campaigns. Analytics data is aggregated and used at a campaign level, not to make decisions about individual users.

3.5 Legal Compliance and Record-Keeping

To maintain records of consents obtained, enquiries received, and communications sent, as required under the DPDP Act, 2023, and other applicable laws.

We do not use your personal data for any other purpose without your explicit consent.

4. Legal Basis for Processing Your Data

We process your personal data on the basis of your freely given, specific, informed, and unambiguous consent, which you provide by actively submitting our enquiry form.

You have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, see Section 7.

5. Tools and Platforms We Use for Advertising

We use advertising and analytics technologies provided by Meta Platforms, Inc. (Facebook and Instagram) and Google LLC to measure ad performance, understand how visitors use our pages, and show relevant advertisements to people who have previously interacted with our content.

Enquiry data is stored and managed in our CRM system operated by a third-party provider.

6. How We Share Your Data

We do not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes.

We may share your data in the following limited circumstances:

With our authorised marketing partners and agency staff who manage our advertising campaigns on our behalf, bound by confidentiality obligations and data processing agreements.
With technology service providers (Meta, Google) as described in Section 5, solely for the operational purposes described.
For legal compliance: if required by law, court order, government directive, or regulatory authority, including the Data Protection Board of India.
In connection with a merger, acquisition, or restructuring of iNCUBE8, in which case data may transfer to the successor entity under equivalent privacy protections.

We do not share Meta advertising data with any third-party ad networks, data brokers, or parties other than those acting directly on our behalf, in accordance with Meta’s Data Use Restrictions policy.

We do not share Google remarketing or analytics data beyond what is described in Section 5 and do not use customer data to target overly narrow or specific audiences in violation of Google’s Restricted Targeting in Personalized Advertising policy.

7. Your Rights Under the DPDP Act, 2023

As a data principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

Right to Information

You have the right to know what personal data we hold about you, the purposes for which it is being processed, and the identity of third parties with whom it is shared.

Right to Correction and Updation

You have the right to request correction or updating of inaccurate or incomplete personal data we hold.

Right to Erasure

You have the right to request deletion of your personal data. Upon receiving a valid erasure request, we will delete your data unless we are required to retain it to comply with a legal obligation or to defend a legal claim. Erasure of your data will result in us being unable to continue processing your enquiry.

Right to Withdraw Consent

You may withdraw your consent to be contacted at any time, without penalty. To opt out:

Email us at marketing@incube8.school
Reply “STOP” to any WhatsApp or SMS message from us
Click the unsubscribe link in any email communication

Withdrawal of consent will be actioned within 5 working days.

Right to Nomination

Under the DPDP Act, you may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacitation.

Right to Grievance Redressal

You have the right to raise a data protection grievance with our Grievance Officer (see Section 11) or with the Data Protection Board of India, once constituted under the DPDP Rules, 2025.

8. Opt-Out of Personalised Advertising

In addition to your rights under the DPDP Act, you can control how your data is used for advertising through these platform-specific opt-out mechanisms:

Meta (Facebook/Instagram) Ad Preferences: https://www.facebook.com/adpreferences/ad_settings
Google Ad Settings: https://adssettings.google.com
Digital Advertising Alliance (pan-network opt-out): https://www.aboutads.info/choices/
iOS: Settings > Privacy & Security > Tracking
Android: Settings > Google > Ads > Opt out of Ads Personalisation

Opting out of personalised ads means ads you see will not be based on your browsing behaviour, but you may still see general ads from iNCUBE8.

9. Data Retention

We retain your personal data for the following periods:

Enquiry data (name, phone, email, course interest): Up to 24 months from your last interaction, or until you withdraw consent, whichever is earlier.
Analytics data: As per Google Analytics 4 default retention settings (14 months).
Meta Pixel and CAPI event data: As per Meta’s data retention policies.
Cookie data: As per the lifespan of individual cookies (detailed in our Cookie Policy).
Legal compliance and consent records: Retained for the period required under applicable law.

Upon expiry of the applicable retention period, your data is securely deleted or irreversibly anonymised.

10. Children and Minors (Under 18)

The DPDP Act, 2023 defines anyone below the age of 18 as a child. We take this obligation seriously.

We do not knowingly collect, process, or retain personal data from individuals under 18 years of age without verifiable consent from a parent or lawful guardian. We do not engage in behavioural tracking, profiling, or targeted advertising directed at children, in compliance with Section 9 of the DPDP Act, 2023.

If you are under 18, please have your parent or lawful guardian review this Privacy Policy and provide their consent before you submit any personal data through our forms.

If we become aware that personal data from a minor has been collected without appropriate parental consent, we will delete such data promptly. To report such a case, contact our Grievance Officer (Section 11).

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

HTTPS encryption across all iNCUBE8 landing pages
Restricted CRM access on a need-to-know basis with role-based permissions
Contractual data processing agreements with all third-party service providers
Regular review of data access, permissions, and retention practices

No method of transmission over the internet or electronic storage is completely secure. While we take data security seriously and work to protect your information, we cannot guarantee absolute security.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our technology, practices, or legal obligations. When we do, the “Last Updated” date at the top of this page will be revised. We encourage you to review this Policy periodically. Continued engagement with our advertisements or landing pages following any update constitutes acceptance of the revised Policy.

13. Grievance Officer

In accordance with the DPDP Act, 2023 and the IT Act, 2000, we have appointed a Grievance Officer:

Grievance Officer: Sapan Shrestha

Email: marketing@incube8.school

Address: iNCUBE8 VFX Academy, 801, 8^th Floor, DLH Park, Goregaon West, Mumbai — 400104, Maharashtra, India

Complaints will be acknowledged within 48 hours and resolved within 30 days of receipt, in accordance with the DPDP Rules, 2025.

If you are not satisfied with our response, you may approach the Data Protection Board of India (once constituted) or any applicable regulatory or judicial authority.

14. Contact Us