Privacy Policy

Welcome to Friday Intelligence. We are an educational technology company headquartered in the United Kingdom that provides workshops, online courses, webinars, and related learning experiences.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website (thefriday.ai), register for our programs, or interact with our services (collectively, "Services"). Please read this document carefully. By using our Services, you agree to the practices described herein.

This Policy is compliant with applicable Indian laws, including but not limited to the Information Technology Act, 2000 ("IT Act"), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and the Digital Personal Data Protection Act, 2023 ("DPDPA").

This Privacy Policy applies to:

• All visitors to our website and digital platforms
• Learners who register for any course, workshop, webinar, or enroll in our upskilling or certification programs
• Any individual who communicates with us via email, contact forms, chat, or social media

If you are accessing our Services on behalf of an institution or employer, you represent that you have the authority to bind such entities to this Policy.

We collect the following categories of information, always with your knowledge and, where required by law, with your explicit consent:

3.1 Information You Provide Directly

• Identity Information: Full name, date of birth, gender
• Contact Information: Email address, mobile number, mailing address
• Academic/Professional Information: College name, degree, graduation year, employer, job role
• Account Credentials: Username and password for your learner account
• Payment Information: Billing details processed securely via third-party payment gateways (we do not store card numbers)
• Communications: Queries, feedback, complaints, and support messages
• Reviews and Testimonials: Feedback you voluntarily submit about our programs

3.2 Information Collected Automatically

• Device and browser type, IP address, operating system
• Browsing behavior on our platform (pages visited, session duration, clicks)
• Cookies and similar tracking technologies (see Section 9)
• Course progress, quiz results, attendance, and learning analytics

3.3 Information from Third Parties

• Social login data (e.g., via Google or LinkedIn) if you choose to sign in through those platforms
• Referral data from partner institutions or employers
• Publicly available professional profiles where relevant

We process your personal data on the following lawful grounds as recognized under the Digital Personal Data Protection Act, 2023:

• Consent: Where you have given express, informed, and unambiguous consent (e.g., for marketing communications, testimonials, use of photographs)
• Contractual Necessity: To fulfill obligations when you purchase a course or register for a program
• Legal Obligation: Where processing is required by applicable Indian law or government directive
• Legitimate Interest: For fraud prevention, platform security, and service improvement, where such interests do not override your rights

You may withdraw consent at any time by contacting us at hello@thefriday.ai. Withdrawal of consent will not affect the lawfulness of processing prior to the withdrawal.

We use collected information for the following purposes:

Service Delivery

• To register and manage your learner account
• To enroll you in courses, workshops, and webinars
• To issue certificates and track your learning progress
• To process payments and send transaction confirmations

Communication

• To respond to your enquiries and provide customer support
• To send important service updates, reminders, and notifications
• To share newsletters, course recommendations, and promotional offers (only with your consent)

Marketing & Content

• To publish anonymized or attributed testimonials and reviews on our website or social media (only with your prior written consent)
• To create case studies or success stories featuring learners (with explicit written consent)

Platform Improvement

• To analyze usage patterns and improve course content and user experience
• To conduct internal research and generate aggregated, anonymized analytics

Legal & Compliance

• To comply with applicable laws, regulations, and court orders
• To detect, prevent, and respond to fraud or security incidents

Friday Intelligence does not sell or rent your personal data to third parties. We may share information in the following limited circumstances:

6.1 Service Providers

We engage trusted third-party vendors to support our operations, including cloud hosting providers, payment gateways, email delivery services, and video conferencing platforms. These vendors process data solely on our behalf under binding data processing agreements.

6.2 Academic or Employer Partners

If you enroll through a college placement cell, employer partnership, or government scheme, we may share your performance or enrollment data with the concerned institution, subject to the agreement under which you enrolled and with your prior knowledge.

6.3 Legal Requirements

We may disclose personal data if required by law, court order, or government authority in India, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Friday Intelligence, our users, or the public.

6.4 Business Transfers

In the event of a merger, acquisition, or restructuring of Friday Intelligence, personal data may be transferred to the succeeding entity, subject to equivalent privacy protections and prior notice to users.

Under the Information Technology (SPDI) Rules, 2011, certain categories of data are classified as Sensitive Personal Data or Information. Friday Intelligence currently does not collect SPDI such as passwords beyond account credentials, financial information beyond what is strictly necessary for payment, physical or mental health data, biometric data, or sexual orientation.

If we ever collect SPDI in the future, we will seek your explicit written consent, implement appropriate safeguards, and comply fully with the SPDI Rules and the DPDPA, 2023.

We retain your personal data only as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law:

• Active learner account data: Duration of account activity plus 3 years after closure
• Payment and transaction records: 7 years (as per applicable financial regulations)
• Course completion records and certificates: 10 years (for credential verification)
• Marketing preferences and communications: Until consent is withdrawn
• Log files and analytics: Up to 12 months

Upon expiry of the retention period, data is securely deleted or anonymized in accordance with our data destruction protocols.

We use cookies and similar technologies to enhance your experience on our platform:

• Essential Cookies: Required for core functionality such as login sessions and secure checkout
• Analytical Cookies: To understand how users interact with our platform (e.g., Google Analytics)
• Preference Cookies: To remember your settings and preferences
• Marketing Cookies: To deliver relevant content (only with your consent)

You may manage or disable cookies through your browser settings. Disabling essential cookies may impair the functionality of our platform. For detailed information, refer to our Cookie Policy available on our website.

Under the Digital Personal Data Protection Act, 2023, you have the following rights as a Data Principal:

• Right to Access: Obtain a summary of your personal data processed by us and details of processing activities
• Right to Correction and Erasure: Request correction of inaccurate data, or erasure of data no longer necessary for the purpose it was collected
• Right to Grievance Redressal: Register a complaint with our Grievance Officer and receive timely redressal
• Right to Nominate: Nominate another individual to exercise your rights in the event of your death or incapacity
• Right to Withdraw Consent: Withdraw consent for processing at any time, without affecting prior lawful processing

To exercise any of these rights, please write to us at hello@thefriday.ai. We will respond within 30 days of receipt of your request.

We implement industry-standard technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These include:

• SSL/TLS encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Role-based access control limiting employee access to personal data
• Regular security audits and penetration testing
• Secure payment processing via PCI-DSS compliant gateways

While we take all reasonable precautions, no method of transmission over the internet is 100% secure. We encourage you to use strong, unique passwords and to contact us immediately at hello@thefriday.ai if you suspect any unauthorized activity on your account.

Our Services are intended for learners who meet the applicable age requirements in their jurisdiction. We do not knowingly collect personal data from individuals below the age required to provide valid consent without appropriate permission from a parent or legal guardian.

If we become aware that personal data has been collected from an individual below the required age without such permission, we will take steps to delete that information promptly.

A parent or legal guardian may contact us at hello@thefriday.ai to request deletion of such data.

This Privacy Policy is governed by and subject to the following Indian statutes:

• Information Technology Act, 2000 (as amended in 2008): Governs electronic records, digital signatures, and computer-related offences
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011: Regulates collection and processing of sensitive personal data
• Digital Personal Data Protection Act, 2023 (DPDPA): India's primary personal data protection legislation establishing rights of Data Principals and obligations of Data Fiduciaries
• Consumer Protection Act, 2019: Applicable to our role as a service provider to consumers
• Indian Contract Act, 1872: Governs the contractual aspects of our user agreements

We are committed to full compliance with these laws and will update this Policy as and when new rules or regulations are notified under the DPDPA or any other applicable legislation.

Our website may contain links to third-party websites, social media platforms, or partner portals. We are not responsible for the privacy practices of such third parties. We encourage you to read their respective privacy policies before sharing any personal data.

In accordance with the Information Technology Act, 2000 and the DPDPA, 2023, we have appointed a Grievance Officer to address any complaints or concerns regarding the processing of your personal data:

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or service offerings. When we make material changes, we will:

• Post the updated Policy on our website with a revised "Last Updated" date
• Notify registered users via email or an in-platform notification
• Where required by law, seek fresh consent for new processing activities

Your continued use of our Services after the effective date of any update constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: