Privacy Policy
This Policy explains how Animix World collects, uses, stores, and discloses information about its users. Please read it carefully. Where we require your consent to process personal data, we will ask for it explicitly — for example, through our cookie consent banner or during account registration. Continued use of the Platform does not by itself constitute consent to non-essential data processing.
- Personal Information
- Information We Collect
- Legal Basis (GDPR Art. 6)
- Cookie Table
- How We Use & Share
- Recipients of Personal Data
- Your Choices
- Your Rights
- Withdraw Consent
- Data Protection
- Third-Party Websites
- Cross-Border Transfer
- Data Retention
- Country-Specific Rights
- Instructor Privacy
- Grievances & Contact
Personal Information
Personal Information means any information that identifies a Learner:
- First and last name, identification number
- Email address, phone number
- Age, gender, location, photograph
- Any info provided at registration or thereafter
Sensitive Personal Information includes:
- Passwords and financial data (except last 4 digits of card)
- Health data, biometric data, Aadhar / SSN / passport details
- Sexual life, race, ethnicity, political or religious beliefs
- Account details and passwords
- Any data under IT Rules 2011, DPDP Act 2023, GDPR, or CCPA
Information We Collect
Personal Identifiable Information — name, email — collected only when voluntarily provided. You may refuse, though this may restrict Platform access.
Non-Personal Information — browser, OS, ISP, date/time, referring site — collected automatically when you interact with the Platform.
Cookies & Trackers — used to enhance experience, analyze traffic, and serve relevant content. Non-essential cookies (Statistics, Marketing, Preferences categories) are set only after you give explicit, freely-given consent via our cookie banner. You may accept, decline, or customise cookie categories independently. See the full Cookie Table below.
AI Assistant Widget — the “AI Assistant” available on our Platform offers a fixed set of pre-written questions and answers (e.g. about courses, fees, admissions). It does not collect, store, or transmit any information you type or select, and no personal data is processed by any third-party AI model through this widget.
Legal Basis for Processing (GDPR Article 6)
For users in the UK, EU, and EEA, we process your personal data only where we have a valid legal basis. The table below sets out each processing activity, its purpose, and the legal basis we rely on.
| Processing Activity | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Account Registration | Creating and managing your user account | Contract | Until account deletion + 30 days |
| Course Delivery | Providing purchased courses, tracking progress | Contract | Duration of subscription + 6 months |
| Payment Processing | Processing transactions, issuing receipts | Contract | 7 years (legal/financial compliance) |
| Marketing Emails | Sending offers, newsletters, new content alerts | Until consent withdrawn | |
| Analytics Cookies | Understanding site usage, improving UX | Up to 13 months (per cookie) | |
| Marketing Cookies | Traffic source tracking (SourceBuster / sbjs) | Up to 12 months | |
| Fraud Prevention | Detecting abuse, protecting user accounts | Legitimate Interest | 90 days post-detection |
| Security Logging | Server logs, access control, incident response | Legitimate Interest | 90 days |
| Legal Compliance | Responding to court orders, tax records, audits | Legal Obligation | As required by applicable law |
| Grievance Handling | Resolving user complaints and rights requests | Legal Obligation | 3 years from resolution |
Cookie & Tracker Table
Below is a full list of all 22 cookies and trackers used on Animix World, each classified by category. Non-essential cookies (Statistics, Marketing, Preferences) are only activated after you give explicit consent via the cookie banner.
| Cookie Name | Provider | Category | Purpose | Data Sent To | Duration |
|---|---|---|---|---|---|
| amxw_consent | Animix World | Necessary | Stores your cookie consent preference | India (AWS – Mumbai region, ap-south-1) | 1 year |
| wordpress_logged_in_* | Animix World | Necessary | Keeps you logged in securely | India (AWS – Mumbai region, ap-south-1) | Session / 14 days |
| wordpress_sec_* | Animix World | Necessary | WordPress security authentication | India (AWS – Mumbai region, ap-south-1) | Session |
| wfwaf-authcookie-* | Wordfence (Security) | Necessary | Wordfence firewall authentication — verifies admin requests to protect against unauthorised access | India (AWS – Mumbai region, ap-south-1) | Session |
| _ga | Google Analytics | Statistics | Distinguishes unique users for traffic analysis | USA (Google LLC) | 2 years |
| _gid | Google Analytics | Statistics | Distinguishes users within 24 Working Days | USA (Google LLC) | 24 Working Days |
| _gat | Google Analytics | Statistics | Throttles request rate to Google Analytics | USA (Google LLC) | 1 minute |
| _gtm_* | Google Tag Manager | Statistics | Manages analytics and marketing tags | USA (Google LLC) | Session |
| tk_qs | Jetpack / WordPress.com | Statistics | Tracks referral information across subdomains to measure traffic sources — analytics only, no cross-site advertising | USA (Automattic) | Session |
| sbjs_migrations | SourceBuster JS | Marketing | Tracks migration version of traffic attribution data | India (AWS – Mumbai region, ap-south-1) | 1 year |
| sbjs_current_add | SourceBuster JS | Marketing | Records additional data about the current visit source | India (AWS – Mumbai region, ap-south-1) | 1 year |
| sbjs_first_add | SourceBuster JS | Marketing | Records additional data about the first visit source | India (AWS – Mumbai region, ap-south-1) | 1 year |
| sbjs_current | SourceBuster JS | Marketing | Records the current traffic source (UTM parameters) | India (AWS – Mumbai region, ap-south-1) | 1 year |
| sbjs_first | SourceBuster JS | Marketing | Records first-ever traffic source for attribution | India (AWS – Mumbai region, ap-south-1) | 1 year |
| sbjs_session | SourceBuster JS | Marketing | Tracks page views in the current session | India (AWS – Mumbai region, ap-south-1) | Session (30 min) |
| sbjs_udata | SourceBuster JS | Marketing | Stores user device and browser info for attribution | India (AWS – Mumbai region, ap-south-1) | 1 year |
| _fbp | Meta (Facebook) | Marketing | Used by Facebook to deliver and measure ad relevance | USA (Meta Platforms) | 3 months |
| IDE | Google DoubleClick | Marketing | Used for remarketing and targeting ads | USA (Google LLC) | 1 year |
| NID | Marketing | Stores user preferences and personalizes Google ads | USA (Google LLC) | 6 months | |
| __utma / __utmb / __utmz | Google Analytics (legacy) | Marketing | Legacy campaign and session tracking | USA (Google LLC) | Up to 2 years |
| wp-settings-* | Animix World (WordPress) | Preferences | Stores logged-in user interface and layout preferences (e.g. editor mode, admin panel settings) — no cross-site tracking | India (AWS – Mumbai region, ap-south-1) | 1 year |
How We Use & Share Information
- Platform Access — Allow access to services, verify identity, resolve issues, fulfill purchases. (Legal basis: Contract)
- Safety & Improvement — Improve the platform, prevent fraud, detect criminal activity, protect user safety. (Legal basis: Legitimate Interest)
- Communication & Marketing — Send order updates, offers, new product info, respond to inquiries. You may unsubscribe anytime. (Legal basis: Consent / Contract)
- Analytics — Understand how visitors use the Platform to improve content and performance. (Legal basis: Consent)
We do not use Personal Information for automated decision-making or profiling as defined under GDPR Article 22, nor do we sell or exploit it to third parties for their own marketing purposes.
Recipients of Personal Data
To provide, maintain, secure, and improve our services, we may share personal information with the following categories of recipients where necessary and legally permitted:
- Hosting & Infrastructure Providers – Including Amazon Web Services (AWS) and related cloud infrastructure providers.
- Payment Service Providers – Payment gateways, banking partners, and transaction processors used for purchases, subscriptions, refunds, and financial compliance.
- Learning Management & Course Delivery Providers – Systems used to provide courses, certificates, progress tracking, and educational services.
- Analytics Providers – Including Google Analytics and Google Tag Manager used to understand website usage and improve user experience.
- Marketing & Advertising Providers – Including Google Ads, Meta (Facebook), and related advertising technologies where consent has been provided.
- Email & Communication Providers – Providers used to send account notifications, support responses, newsletters, and service-related communications.
- Customer Support & Technical Service Providers – Third parties assisting with troubleshooting, platform maintenance, and customer support.
- Government, Regulatory, Legal & Law Enforcement Authorities – Where disclosure is required by law, legal process, court order, or regulatory obligation.
Your Choices
- Limit Information Provided — Update or delete your information anytime; some features may be restricted.
- Limit Communications — Choose what communication you receive. Legal/security notices cannot be opted out of.
- Cookie Preferences — Use our cookie banner or the Cookie Preferences link in the footer to accept, decline, or customize which cookies are active. Each category (Statistics, Marketing, Preferences) can be toggled independently. You can change this at any time.
- Browser Settings — Adjust your browser to reject cookies; certain services may not be available without necessary cookies.
Your Rights
All Learners have these general rights. Exercise them via the Platform or by writing to our grievance address.
Right to Withdraw Consent
Where we process your personal data based on your consent (e.g. marketing emails, analytics cookies, marketing cookies, preferences cookies), you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of any processing we carried out prior to the withdrawal.
How to withdraw consent:
- Cookies — Click the Cookie Preferences link in the site footer and select “Decline” or uncheck individual categories (Statistics, Marketing, Preferences). Changes take effect immediately on next page load.
- Marketing Emails — Click the “Unsubscribe” link in any email we send, or email us at support@animixworld.com.
- Account Data Processing — Email us at support@animixworld.com with the subject line “Withdraw Consent”.
Protection of Your Information
We take all reasonably necessary measures — including encryption in transit (HTTPS/TLS), access controls, and regular security audits — to protect against unauthorized access, use, alteration, or destruction of Personal Information. Disclosure is strictly limited to:
- Employees, contractors, and affiliates who need it for processing and have signed confidentiality agreements.
- Responses to court orders, government or law enforcement requests.
- Situations necessary to comply with applicable laws, protect safety, or prevent criminal activity.
In the event of a personal data breach that risks your rights and freedoms, we will notify affected users and the relevant supervisory authority within 72 Working Days of becoming aware, as required under GDPR Article 33. This means 72 calendar Working Days — not business or working days.
Third-Party Websites
The Platform may contain links to partner or third-party websites. We do not control these sites and are not responsible for their practices or privacy policies. Browsing any third-party site is governed by its own terms and policies.
Third-party services we use that may process your data independently include: Google LLC, Meta Platforms Inc., Automattic (Jetpack/WordPress.com), and SourceBuster. Each operates under their own privacy policy and data protection terms.
Cross-Border Data Transfer
Your information is primarily stored and processed on Amazon Web Services (AWS) servers in India (Mumbai region). Some data may also be processed by third-party service providers located in the United States (e.g. Google, Meta, Automattic).
Transfers to the United States: The US has not received an EU adequacy decision for all transfers. Where we transfer your data to US-based service providers (Google Analytics, Meta Pixel, Google Tag Manager, DoubleClick, Automattic), we rely on:
- Standard Contractual Clauses (SCCs) — approved by the European Commission under GDPR Article 46(2)(c), incorporated into our agreements with Google LLC, Meta Platforms Inc., and Automattic.
- EU-U.S. Data Privacy Framework — where applicable, for providers certified under the Framework.
Transfers to India: India is not yet recognised as an adequate country by the EU Commission. Where we transfer data to India (our AWS servers, SourceBuster cookies), we rely on:
- Standard Contractual Clauses (SCCs) — incorporated into our agreements with AWS India.
- Your explicit consent — for SourceBuster (sbjs_*) marketing cookies, which is collected via the cookie consent banner before any data is sent to India. You may decline marketing cookies at any time.
Duration of Data Storage
We retain your information for as long as required for the stated purposes. Specific retention periods are set out in the Legal Basis table above. General principles:
- Account data: retained until account deletion, then purged within 30 days.
- Payment records: retained for 7 years for legal and tax compliance.
- Cookie data: retained per individual cookie duration (see Cookie Table).
- Grievance records: retained for 3 years from resolution.
Publicly posted content may not be fully deletable but will be anonymized so you can no longer be identified. Aggregated data will never be disclosed in a way that identifies you.
Country-Specific Additional Rights
Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, Indian residents (“Data Principals”) have the following rights:
Name: Privacy & Grievance Officer, Animix World
Email: support@animixworld.com
Address: Animix World, Bhopal, Madhya Pradesh, India
Response time: We will acknowledge your grievance within 72 Working Days and resolve it within 30 days, as required under IT Rules 2011 and the DPDP Act 2023.
Under the UK/EU GDPR, you have all the rights listed in the Your Rights section above, plus the right to lodge a complaint with your national supervisory authority:
ico.org.uk · 0303 123 1113
bfdi.bund.de
cnil.fr
autoriteitpersoonsgegevens.nl
dataprotection.ie
California residents have the following rights under CCPA / CPRA:
- Access the Personal Information we hold about you.
- Know what categories of Personal Information will be collected before collection.
- Opt in or out of marketing, analytics, and similar activities.
- Receive equal services without discrimination for exercising rights.
- Request deletion of your Personal Information.
- Correct inaccurate Personal Information (CPRA addition).
- Limit use of Sensitive Personal Information (CPRA addition).
Categories collected (last 12 months): Identifiers, California Customer Records, Internet/network activity, Geolocation data, Commercial information, Audio/electronic/visual information, and Inferences.
Personal Information sold or shared for cross-context behavioural advertising: None in the preceding 12 months.
To exercise CCPA rights: Email support@animixworld.com with subject “CCPA Rights Request”. We will respond within 45 days.
Instructor Privacy Policy
This section applies to all registered instructors on Animix World.
Data Collected:
- Personal details: name, email, phone, address, photo
- Professional details: background, bio, course content, expertise
- Payment information: bank account or UPI details
- Platform usage: login activity, analytics, communication logs
Legal Basis: Processing of instructor data is based on the instructor agreement (Contract) and legal obligations (tax/financial compliance).
Data Sharing: Not sold or shared for marketing. May be shared with payment gateways, legal authorities, or technical service providers under appropriate data processing agreements.
Data Retention:
- Payment and tax data retained for up to 7 years for legal/financial compliance.
- Course content retained until 6 months after instructor termination, then permanently deleted.
Instructor Rights:
Modifications to this Policy
We may modify this Policy from time to time. When material changes are made, we will notify you by email (for registered users) and update the “Last Updated” date at the top of this Policy. We encourage you to review this page periodically. For changes that require your consent under applicable law (e.g. new processing purposes), we will seek your consent separately before such changes take effect.
Grievances & Contact
For any questions, privacy concerns, rights requests, or grievances, please reach out with a thorough description. We respond within 30 days.
✉️ support@animixworld.comPrivacy / Grievance Officer
Animix World — Privacy & Grievance Officer
📍 Animix World, Bhopal (M.P.), India
⏱ Acknowledgement: 72 Working Days | Resolution: 30 days
EU/UK users may also contact the supervisory authority in their country — no obligation to contact us first.
Indian users may escalate unresolved grievances to the Data Protection Board of India once operational under the DPDP Act 2023.