Last updated: September 10, 2026
Evidence Based Pharmacy Academy (“EBPA,” “we,” “us,” “our”), an initiative of Mamtosh Enterprise Pvt. Ltd., operates this website and Learning Management System (LMS) to provide pharmaceutical education courses, GPAT preparation, and academic research guidance (“Services”). This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, enroll in a course, or use our Services.
This Policy is intended to align with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.
By using this website or enrolling in our courses, you consent to the practices described in this Policy.
1. Information We Collect
Account and enrollment data: Name, email address, phone number, postal address, date of birth, educational qualifications, and institutional affiliation (collected via Tutor LMS registration and enrollment forms).
Payment information: Billing details processed through Razorpay. We do not store full card, UPI, or bank details on our servers.
Course activity data: Login history, progress, quiz/assignment scores, certificates issued, forum posts, and support queries recorded within Tutor LMS.
Technical data: IP address, browser type, device information, and cookies (see Section 6).
Communication data: Emails, messages, or feedback you send us.
2. How We Use Your Information
We use collected information to:
Create and manage your student account on Tutor LMS
Deliver course content, assessments, and certificates
Process payments and enrollments via Razorpay
Send course updates, reminders, and administrative notices
Respond to support and research-guidance requests
Improve our courses, LMS features, and website
Comply with legal and regulatory obligations under Indian law
We do not use student data for purposes unrelated to the Services without your consent.
3. Legal Basis for Processing (DPDP Act, 2023)
Under the DPDP Act, 2023, we process your personal data based on:
Your consent, given at the time of registration/enrollment
Legitimate uses permitted under the Act, such as providing services you have requested and fulfilling contractual obligations
You have the right to withdraw consent at any time (see Section 8).
4. Sharing of Information
We do not sell your personal information. As a Data Fiduciary under the DPDP Act, we may share data with these Data Processors:
Tutor LMS (and its hosting infrastructure) — for course delivery, progress tracking, and certification
Razorpay — for payment processing and transaction verification
Instructors/mentors — for course delivery, grading, and research guidance
Legal/regulatory authorities — if required by law, court order, or government directive
We require these processors to maintain appropriate confidentiality and security standards consistent with the DPDP Act. [Analytics/email/SMS providers, if used, to be added here.]
5. Data Retention
We retain personal data for as long as necessary to provide the Services and meet legal, accounting, or regulatory requirements under Indian law. You may request erasure of your data subject to Section 8 and any statutory retention obligations.
6. Cookies and Tracking Technologies
Our website and Tutor LMS may use cookies to:
Keep you logged in
Remember preferences
Analyze site traffic and usage [Analytics Platform Name, if used]
You can control cookies through your browser settings. Disabling cookies may limit certain LMS features.
7. Data Security
We implement reasonable security safeguards — such as encryption, access controls, and regular backups — to protect your data, as required under the DPDP Act. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Your Rights
You have the right to:
Access a summary of the personal data we hold about you and how it is processed
Request correction or completion of inaccurate/incomplete data
Request erasure of your data (subject to legal/academic record-keeping requirements)
Withdraw consent at any time (this does not affect processing done before withdrawal)
Nominate another individual to exercise your rights in the event of death or incapacity
Raise a grievance with us, and if unresolved, approach the Data Protection Board of India
To exercise these rights, contact our Grievance Officer at [Contact Email].
9. Children’s Privacy
Our Services are intended for learners aged 17 years and above. We do not knowingly collect personal data from individuals below this age without verifiable parental/guardian consent, in line with DPDP Act requirements for processing children’s data.
10. Third-Party Links
Our website may link to third-party sites (e.g., journals, regulatory bodies, Razorpay’s payment pages). We are not responsible for the privacy practices of these external sites.
11. Data Transfers
If your data is processed or stored outside India (e.g., via cloud hosting), we take steps to ensure it receives an adequate level of protection, consistent with DPDP Act provisions on cross-border data transfer. [To be confirmed based on actual hosting location.]
12. Changes to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with a revised “Last updated” date. Continued use of the Services after changes constitutes acceptance.
13. Contact Us / Grievance Officer
For questions, requests, or grievances regarding this Privacy Policy, contact:
Grievance Officer
Evidence Based Pharmacy Education (Mamtosh Enterprise Pvt. Ltd.)
H. No. B-70A, B Block , Patel Vihar, Karawal Nagar, Delhi-110094
ebpa18@gmail.com