01 Who we are
This website is operated by Bloomin Learning Private Limited ("BLOOM", "we", "us", "our"), the entity behind the BLOOM UPSC offerings.
02 What this policy covers
It covers personal data you give us through this website only — principally the "register interest" form. Nothing is purchasable on this site yet, so this policy does not cover payments, billing, or any in-product data from our learning tools; those will get their own notices when they go live.
03 What we collect
When you submit the interest form, we collect:
| Data | Required? | Why we need it |
|---|---|---|
| Email address | Required | The single channel we use to tell you when an offering opens. |
| Phone number | Optional | An alternate way to reach you about an offering you asked about — only if you choose to give it. |
| Offerings selected | Required | So we message you only about what you actually asked about (Visual Notes, DOJO, PRISM, the 2027 Program). |
| Technical metadata | Automatic | Your browser's user-agent string, the page URL, and the time of submission — for security, to debug failed submissions, and to prevent abuse. |
We do not ask for, or want, any sensitive personal data on this site. Please don't include any in the form fields.
04 Why we use it (purpose)
- To notify you when the specific offering you registered for opens, and nothing beyond that.
- To keep the form working — basic security, abuse-prevention, and debugging.
We do not sell or rent your data. We do not send daily nudges or unrelated marketing. We do not use your data to build advertising profiles.
05 Our legal basis — your consent
We process this data on the basis of the consent you give when you submit the form. That consent is specific (the offerings you picked) and purpose-limited (to notify you). You can withdraw your consent at any time — see "Your rights" below — and withdrawing is as easy as giving it. Lawyer to confirm DPDP consent-notice wording.
06 Where your data is stored, and who processes it
We keep data only with reputable infrastructure providers ("data processors") who act on our instructions:
| Processor | Role | Note |
|---|---|---|
| Supabase | Database where your submission is stored. | Access is locked down so the public website can only add a signup — it cannot read the list back. Reads happen only through our protected administrative access. |
| Vercel | Hosts and serves this website. | Processes standard request data (e.g. IP address) to deliver the page, as any web host does. |
| Google Fonts | Serves the fonts used on this page. | Loading fonts may expose your IP address to Google. Consider self-hosting fonts to avoid this — TODO. |
Some of these providers may store or process data on servers outside India. Lawyer to confirm cross-border transfer position under DPDP and add specifics.
07 How long we keep it
We keep your interest submission only as long as needed to send you the update you asked for, and for a reasonable period after launch in case you re-engage. If an offering you registered for is cancelled, or you ask us to delete your data, we remove it. Lawyer to set a concrete retention period.
08 Your rights
Subject to applicable law, you can ask us to:
- Access the personal data we hold about you.
- Correct data that is inaccurate or incomplete.
- Erase your data and withdraw consent, after which we stop contacting you.
- Nominate another person to exercise these rights on your behalf in the event of death or incapacity (as provided under DPDP).
To exercise any of these, contact our Grievance Officer below. We will respond within a reasonable time. Lawyer to confirm the exact rights, exceptions, and response timelines under DPDP.
09 Grievance Officer & contact
For any question, data request, or grievance about your personal data, reach our Grievance Officer:
10 How we protect your data
Submissions travel over an encrypted (HTTPS) connection. In our database, the public website is allowed to insert a signup but cannot read the list — only our protected administrative access can. We limit who can access the data and apply reasonable safeguards. No method of transmission or storage is ever 100% secure, but we work to protect your data and will notify affected users and the authorities of a reportable breach as required by law.
12 Children
This website and its offerings are intended for adult UPSC aspirants and are not directed at children. We do not knowingly collect data from anyone under 18. If you believe a minor has submitted data, contact our Grievance Officer and we will delete it. Lawyer to confirm DPDP rules on minors and verifiable parental consent.
13 Changes to this policy
We may update this policy as our offerings evolve or to meet legal requirements. When we make material changes we will update the "Last updated" date above and, where appropriate, notify you. The current version always lives at this page.