Legal Document

Privacy Policy

This Policy explains how Animix World collects, uses, stores, and discloses information about its users. Please read it carefully. Where we require your consent to process personal data, we will ask for it explicitly — for example, through our cookie consent banner or during account registration. Continued use of the Platform does not by itself constitute consent to non-essential data processing.

📅 Effective: June 2026
🔄 Last Updated: June 2026
📍 Animix World, Bhopal, M.P., India
✉️ support@animixworld.com
🪪

Personal Information

Personal Information means any information that identifies a Learner:

  • First and last name, identification number
  • Email address, phone number
  • Age, gender, location, photograph
  • Any info provided at registration or thereafter

Sensitive Personal Information includes:

  • Passwords and financial data (except last 4 digits of card)
  • Health data, biometric data, Aadhar / SSN / passport details
  • Sexual life, race, ethnicity, political or religious beliefs
  • Account details and passwords
  • Any data under IT Rules 2011, DPDP Act 2023, GDPR, or CCPA
📥

Information We Collect

Our Commitment: We do not ask for Personal Information unless truly needed, do not share it except as required by law, and do not store it beyond operational necessity.

Personal Identifiable Information — name, email — collected only when voluntarily provided. You may refuse, though this may restrict Platform access.

Non-Personal Information — browser, OS, ISP, date/time, referring site — collected automatically when you interact with the Platform.

Cookies & Trackers — used to enhance experience, analyze traffic, and serve relevant content. Non-essential cookies (Statistics, Marketing, Preferences categories) are set only after you give explicit, freely-given consent via our cookie banner. You may accept, decline, or customise cookie categories independently. See the full Cookie Table below.

AI Assistant Widget — the “AI Assistant” available on our Platform offers a fixed set of pre-written questions and answers (e.g. about courses, fees, admissions). It does not collect, store, or transmit any information you type or select, and no personal data is processed by any third-party AI model through this widget.

⚖️

Legal Basis for Processing (GDPR Article 6)

For users in the UK, EU, and EEA, we process your personal data only where we have a valid legal basis. The table below sets out each processing activity, its purpose, and the legal basis we rely on.

Processing Activity Purpose Legal Basis Retention
Account Registration Creating and managing your user account Contract Until account deletion + 30 days
Course Delivery Providing purchased courses, tracking progress Contract Duration of subscription + 6 months
Payment Processing Processing transactions, issuing receipts Contract 7 years (legal/financial compliance)
Marketing Emails Sending offers, newsletters, new content alerts Consent Until consent withdrawn
Analytics Cookies Understanding site usage, improving UX Consent Up to 13 months (per cookie)
Marketing Cookies Traffic source tracking (SourceBuster / sbjs) Consent Up to 12 months
Fraud Prevention Detecting abuse, protecting user accounts Legitimate Interest 90 days post-detection
Security Logging Server logs, access control, incident response Legitimate Interest 90 days
Legal Compliance Responding to court orders, tax records, audits Legal Obligation As required by applicable law
Grievance Handling Resolving user complaints and rights requests Legal Obligation 3 years from resolution
Note: Where we rely on Legitimate Interest, you have the right to object at any time. Where we rely on Consent, you may withdraw it at any time — see the Withdraw Consent section.
🍪

Cookie & Tracker Table

Below is a full list of all 22 cookies and trackers used on Animix World, each classified by category. Non-essential cookies (Statistics, Marketing, Preferences) are only activated after you give explicit consent via the cookie banner.

Cookie Name Provider Category Purpose Data Sent To Duration
amxw_consent Animix World Necessary Stores your cookie consent preference India (AWS – Mumbai region, ap-south-1) 1 year
wordpress_logged_in_* Animix World Necessary Keeps you logged in securely India (AWS – Mumbai region, ap-south-1) Session / 14 days
wordpress_sec_* Animix World Necessary WordPress security authentication India (AWS – Mumbai region, ap-south-1) Session
wfwaf-authcookie-* Wordfence (Security) Necessary Wordfence firewall authentication — verifies admin requests to protect against unauthorised access India (AWS – Mumbai region, ap-south-1) Session
_ga Google Analytics Statistics Distinguishes unique users for traffic analysis USA (Google LLC) 2 years
_gid Google Analytics Statistics Distinguishes users within 24 Working Days USA (Google LLC) 24 Working Days
_gat Google Analytics Statistics Throttles request rate to Google Analytics USA (Google LLC) 1 minute
_gtm_* Google Tag Manager Statistics Manages analytics and marketing tags USA (Google LLC) Session
tk_qs Jetpack / WordPress.com Statistics Tracks referral information across subdomains to measure traffic sources — analytics only, no cross-site advertising USA (Automattic) Session
sbjs_migrations SourceBuster JS Marketing Tracks migration version of traffic attribution data India (AWS – Mumbai region, ap-south-1) 1 year
sbjs_current_add SourceBuster JS Marketing Records additional data about the current visit source India (AWS – Mumbai region, ap-south-1) 1 year
sbjs_first_add SourceBuster JS Marketing Records additional data about the first visit source India (AWS – Mumbai region, ap-south-1) 1 year
sbjs_current SourceBuster JS Marketing Records the current traffic source (UTM parameters) India (AWS – Mumbai region, ap-south-1) 1 year
sbjs_first SourceBuster JS Marketing Records first-ever traffic source for attribution India (AWS – Mumbai region, ap-south-1) 1 year
sbjs_session SourceBuster JS Marketing Tracks page views in the current session India (AWS – Mumbai region, ap-south-1) Session (30 min)
sbjs_udata SourceBuster JS Marketing Stores user device and browser info for attribution India (AWS – Mumbai region, ap-south-1) 1 year
_fbp Meta (Facebook) Marketing Used by Facebook to deliver and measure ad relevance USA (Meta Platforms) 3 months
IDE Google DoubleClick Marketing Used for remarketing and targeting ads USA (Google LLC) 1 year
NID Google Marketing Stores user preferences and personalizes Google ads USA (Google LLC) 6 months
__utma / __utmb / __utmz Google Analytics (legacy) Marketing Legacy campaign and session tracking USA (Google LLC) Up to 2 years
wp-settings-* Animix World (WordPress) Preferences Stores logged-in user interface and layout preferences (e.g. editor mode, admin panel settings) — no cross-site tracking India (AWS – Mumbai region, ap-south-1) 1 year
Your Control: You can change or withdraw cookie consent at any time by clicking the Cookie Preferences link in the site footer, or by adjusting your browser settings. You can accept or decline each category independently. Withdrawing marketing/statistics/preferences consent will not affect cookies already set before withdrawal, but no new non-essential cookies will be placed.
⚙️

How We Use & Share Information

  • Platform Access — Allow access to services, verify identity, resolve issues, fulfill purchases. (Legal basis: Contract)
  • Safety & Improvement — Improve the platform, prevent fraud, detect criminal activity, protect user safety. (Legal basis: Legitimate Interest)
  • Communication & Marketing — Send order updates, offers, new product info, respond to inquiries. You may unsubscribe anytime. (Legal basis: Consent / Contract)
  • Analytics — Understand how visitors use the Platform to improve content and performance. (Legal basis: Consent)

We do not use Personal Information for automated decision-making or profiling as defined under GDPR Article 22, nor do we sell or exploit it to third parties for their own marketing purposes.

🤝

Recipients of Personal Data

To provide, maintain, secure, and improve our services, we may share personal information with the following categories of recipients where necessary and legally permitted:

  • Hosting & Infrastructure Providers – Including Amazon Web Services (AWS) and related cloud infrastructure providers.
  • Payment Service Providers – Payment gateways, banking partners, and transaction processors used for purchases, subscriptions, refunds, and financial compliance.
  • Learning Management & Course Delivery Providers – Systems used to provide courses, certificates, progress tracking, and educational services.
  • Analytics Providers – Including Google Analytics and Google Tag Manager used to understand website usage and improve user experience.
  • Marketing & Advertising Providers – Including Google Ads, Meta (Facebook), and related advertising technologies where consent has been provided.
  • Email & Communication Providers – Providers used to send account notifications, support responses, newsletters, and service-related communications.
  • Customer Support & Technical Service Providers – Third parties assisting with troubleshooting, platform maintenance, and customer support.
  • Government, Regulatory, Legal & Law Enforcement Authorities – Where disclosure is required by law, legal process, court order, or regulatory obligation.
No Sale of Personal Data: We do not sell, rent, or trade personal information to third parties for their own independent marketing purposes.
🎛️

Your Choices

  • Limit Information Provided — Update or delete your information anytime; some features may be restricted.
  • Limit Communications — Choose what communication you receive. Legal/security notices cannot be opted out of.
  • Cookie Preferences — Use our cookie banner or the Cookie Preferences link in the footer to accept, decline, or customize which cookies are active. Each category (Statistics, Marketing, Preferences) can be toggled independently. You can change this at any time.
  • Browser Settings — Adjust your browser to reject cookies; certain services may not be available without necessary cookies.
🛡️

Your Rights

All Learners have these general rights. Exercise them via the Platform or by writing to our grievance address.

✅ Confirmation & Access
Get confirmation and access your Personal Information held by us.
✏️ Correction
Ask us to rectify inaccurate or incomplete information.
🚫 Right to Object
Object to processing based on Legitimate Interest at any time.
⏸️ Restrict Processing
Request we limit how your data is processed in certain circumstances.
🗑️ Erasure
Request full deletion of your Personal Information. This permanently deletes your account.
📦 Data Portability
Receive your data in a structured, machine-readable format to transfer elsewhere.
🤖 No Automated Decisions
We do not make solely automated decisions that significantly affect you (GDPR Art. 22).
🏛️ Supervisory Authority
File a complaint with your national data protection authority. See country-specific section below.
Response Time: We will respond to all valid rights requests within 30 days of receipt. For complex requests, we may extend this by a further 2 months and will notify you.
↩️

Right to Withdraw Consent

You can withdraw your consent at any time.

Where we process your personal data based on your consent (e.g. marketing emails, analytics cookies, marketing cookies, preferences cookies), you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of any processing we carried out prior to the withdrawal.

How to withdraw consent:

  • Cookies — Click the Cookie Preferences link in the site footer and select “Decline” or uncheck individual categories (Statistics, Marketing, Preferences). Changes take effect immediately on next page load.
  • Marketing Emails — Click the “Unsubscribe” link in any email we send, or email us at support@animixworld.com.
  • Account Data Processing — Email us at support@animixworld.com with the subject line “Withdraw Consent”.
Note: If you withdraw consent for necessary cookies or account processing, some features of the Platform may become unavailable to you.
🔒

Protection of Your Information

Security Measures in Place: We use SSL/TLS encryption, restricted administrative access, firewall protection (Wordfence), malware scanning, security monitoring, regular software updates, backup and recovery procedures, access-control mechanisms, and incident response processes designed to protect personal information against unauthorized access, disclosure, alteration, or destruction.

We take all reasonably necessary measures — including encryption in transit (HTTPS/TLS), access controls, and regular security audits — to protect against unauthorized access, use, alteration, or destruction of Personal Information. Disclosure is strictly limited to:

  • Employees, contractors, and affiliates who need it for processing and have signed confidentiality agreements.
  • Responses to court orders, government or law enforcement requests.
  • Situations necessary to comply with applicable laws, protect safety, or prevent criminal activity.

In the event of a personal data breach that risks your rights and freedoms, we will notify affected users and the relevant supervisory authority within 72 Working Days of becoming aware, as required under GDPR Article 33. This means 72 calendar Working Days — not business or working days.

🔗

Third-Party Websites

The Platform may contain links to partner or third-party websites. We do not control these sites and are not responsible for their practices or privacy policies. Browsing any third-party site is governed by its own terms and policies.

Third-party services we use that may process your data independently include: Google LLC, Meta Platforms Inc., Automattic (Jetpack/WordPress.com), and SourceBuster. Each operates under their own privacy policy and data protection terms.

🌐

Cross-Border Data Transfer

Your information is primarily stored and processed on Amazon Web Services (AWS) servers in India (Mumbai region). Some data may also be processed by third-party service providers located in the United States (e.g. Google, Meta, Automattic).

Transfers to the United States: The US has not received an EU adequacy decision for all transfers. Where we transfer your data to US-based service providers (Google Analytics, Meta Pixel, Google Tag Manager, DoubleClick, Automattic), we rely on:

  • Standard Contractual Clauses (SCCs) — approved by the European Commission under GDPR Article 46(2)(c), incorporated into our agreements with Google LLC, Meta Platforms Inc., and Automattic.
  • EU-U.S. Data Privacy Framework — where applicable, for providers certified under the Framework.

Transfers to India: India is not yet recognised as an adequate country by the EU Commission. Where we transfer data to India (our AWS servers, SourceBuster cookies), we rely on:

  • Standard Contractual Clauses (SCCs) — incorporated into our agreements with AWS India.
  • Your explicit consent — for SourceBuster (sbjs_*) marketing cookies, which is collected via the cookie consent banner before any data is sent to India. You may decline marketing cookies at any time.
Your Right: You may request a copy of the safeguards we have in place for international transfers by contacting us at support@animixworld.com.
🗄️

Duration of Data Storage

We retain your information for as long as required for the stated purposes. Specific retention periods are set out in the Legal Basis table above. General principles:

  • Account data: retained until account deletion, then purged within 30 days.
  • Payment records: retained for 7 years for legal and tax compliance.
  • Cookie data: retained per individual cookie duration (see Cookie Table).
  • Grievance records: retained for 3 years from resolution.

Publicly posted content may not be fully deletable but will be anonymized so you can no longer be identified. Aggregated data will never be disclosed in a way that identifies you.

🗺️

Country-Specific Additional Rights

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, Indian residents (“Data Principals”) have the following rights:

Note: The DPDP Act 2023 is being implemented in phases. The rights below reflect the Act as enacted. Implementation rules and regulations are being notified progressively by the Data Protection Board of India.
Confirmation & Access
Access a summary of your Personal Data held by us and the processing activities carried out.
Correction & Completion
Rectify inaccurate, incomplete, or outdated personal data.
Erasure
Request erasure of personal data where it is no longer necessary for the stated purpose, subject to legal retention obligations.
Grievance Redressal
File a grievance with our Grievance Officer. If unresolved, escalate to the Data Protection Board of India.
Nominate a Nominee
Nominate another individual to exercise your data rights in the event of your death or incapacity (DPDP Act 2023, Section 14).
Grievance Officer (IT Rules 2011 / DPDP Act 2023):
Name: Privacy & Grievance Officer, Animix World
Email: support@animixworld.com
Address: Animix World, Bhopal, Madhya Pradesh, India
Response time: We will acknowledge your grievance within 72 Working Days and resolve it within 30 days, as required under IT Rules 2011 and the DPDP Act 2023.

Under the UK/EU GDPR, you have all the rights listed in the Your Rights section above, plus the right to lodge a complaint with your national supervisory authority:

🇬🇧 United Kingdom
Information Commissioner’s Office (ICO)
ico.org.uk · 0303 123 1113
🇩🇪 Germany
Bundesbeauftragter für Datenschutz (BfDI)
bfdi.bund.de
🇫🇷 France
Commission Nationale de l’Informatique et des Libertés (CNIL)
cnil.fr
🇳🇱 Netherlands
Autoriteit Persoonsgegevens (AP)
autoriteitpersoonsgegevens.nl
🇮🇪 Ireland
Data Protection Commission (DPC)
dataprotection.ie
🌍 Other EU Countries
Contact your national DPA — full list at edpb.europa.eu
Response Time: We respond to all GDPR rights requests within 30 days. You have the right to escalate to your national DPA at any time without any obligation to contact us first.

California residents have the following rights under CCPA / CPRA:

  • Access the Personal Information we hold about you.
  • Know what categories of Personal Information will be collected before collection.
  • Opt in or out of marketing, analytics, and similar activities.
  • Receive equal services without discrimination for exercising rights.
  • Request deletion of your Personal Information.
  • Correct inaccurate Personal Information (CPRA addition).
  • Limit use of Sensitive Personal Information (CPRA addition).
Non-Discrimination: We do not discriminate against users for exercising CCPA/CPRA rights. No financial incentives tied to data sharing.

Categories collected (last 12 months): Identifiers, California Customer Records, Internet/network activity, Geolocation data, Commercial information, Audio/electronic/visual information, and Inferences.

Personal Information sold or shared for cross-context behavioural advertising: None in the preceding 12 months.

To exercise CCPA rights: Email support@animixworld.com with subject “CCPA Rights Request”. We will respond within 45 days.

🎓

Instructor Privacy Policy

This section applies to all registered instructors on Animix World.

Data Collected:

  • Personal details: name, email, phone, address, photo
  • Professional details: background, bio, course content, expertise
  • Payment information: bank account or UPI details
  • Platform usage: login activity, analytics, communication logs

Legal Basis: Processing of instructor data is based on the instructor agreement (Contract) and legal obligations (tax/financial compliance).

Data Sharing: Not sold or shared for marketing. May be shared with payment gateways, legal authorities, or technical service providers under appropriate data processing agreements.

Data Retention:

  • Payment and tax data retained for up to 7 years for legal/financial compliance.
  • Course content retained until 6 months after instructor termination, then permanently deleted.

Instructor Rights:

Access & Correction
Request access to or correction of your data.
Deletion
Request deletion of your profile after all pending payouts are complete.
Withdraw Consent
Withdraw consent or terminate your instructor account at any time via email.
📝

Modifications to this Policy

We may modify this Policy from time to time. When material changes are made, we will notify you by email (for registered users) and update the “Last Updated” date at the top of this Policy. We encourage you to review this page periodically. For changes that require your consent under applicable law (e.g. new processing purposes), we will seek your consent separately before such changes take effect.

Grievances & Contact

For any questions, privacy concerns, rights requests, or grievances, please reach out with a thorough description. We respond within 30 days.

✉️ support@animixworld.com

Privacy / Grievance Officer

Animix World — Privacy & Grievance Officer

📧 support@animixworld.com

📍 Animix World, Bhopal (M.P.), India

⏱ Acknowledgement: 72 Working Days  |  Resolution: 30 days

EU/UK users may also contact the supervisory authority in their country — no obligation to contact us first.

Indian users may escalate unresolved grievances to the Data Protection Board of India once operational under the DPDP Act 2023.