Your information deserves care, clarity and protection.

CONCEPTUAL SHEETS operates conceptualsheets.com and provides digital educational resources, including printable workbooks, worksheets, revision material and question banks.

For applicable data-protection purposes, CONCEPTUAL SHEETS acts as the organisation determining why and how personal information is processed. Under the Digital Personal Data Protection Act, 2023, this role may be described as a Data Fiduciary.

This policy covers information processed through our website, customer accounts, WooCommerce store, checkout, Razorpay payments, digital downloads, contact forms, support communications, email marketing, cookies, analytics and connected services.

We collect only information reasonably required to operate the website, deliver purchases, maintain security, communicate with users and comply with applicable obligations.

Personal information may be collected in the following ways:

• Directly from you when you register, update your profile, place an order, subscribe, contact support or send an enquiry.
• Automatically through cookies, analytics tools, server logs, device information and website-security technologies.
• From Razorpay when it returns payment status, transaction reference and related payment or fraud-prevention information.
• From connected service providers, such as hosting, email, analytics, advertising, backup and security providers.
• From public or lawful sources when reasonably required to investigate fraud, misuse, copyright infringement or legal claims.

We process personal information for specified purposes connected with operating our educational platform and providing the services requested by users.

• Create, authenticate and manage customer accounts.
• Process orders, confirm payments and maintain transaction records.
• Provide and restore access to purchased digital downloads.
• Send order confirmations, download notices, password resets and important service communications.
• Answer product, technical, account, order and educational enquiries.
• Prevent fraud, unauthorised sharing, copyright misuse, security incidents and other prohibited activity.
• Measure website performance, diagnose errors and improve products, navigation and customer experience.
• Send newsletters, product information, offers and promotional communications where permitted.
• Comply with accounting, tax, consumer protection, legal, regulatory and dispute resolution requirements.

Depending on the activity and applicable law, processing may be based on your consent, your voluntary provision of information for a specified purpose, the need to provide a requested service, compliance with law, or another use permitted under applicable data-protection law.

Customers must create or use an account to complete a purchase. Guest checkout is not offered. This helps connect orders, downloads, support records and purchase history to the correct customer.

Passwords are handled through WordPress authentication systems and are not intended to be stored or displayed to us in readable form. You are responsible for keeping your password and account access confidential.

We may record login events, password-reset requests, IP addresses and security activity to protect accounts and investigate suspicious access.

WooCommerce is used to manage products, customer accounts, orders, billing information, download permissions and purchase records.

Razorpay is used to process checkout payments. During payment, Razorpay may collect or process payment credentials, contact details, transaction information, device information and fraud-prevention data under its own privacy notice and applicable legal obligations.

CONCEPTUAL SHEETS generally receives the transaction status, transaction reference, amount, payment method category and limited information required to confirm or support the order. We do not require customers to send us complete card details, UPI PINs, banking passwords or OTP codes.

We record download permissions and relevant download activity to provide purchased files, restore access, resolve technical issues and detect unauthorised distribution or misuse.

Our website uses cookies and similar technologies to maintain login sessions, remember cart activity, secure checkout, store preferences, measure performance and support analytics or marketing.

Our configured technology stack may include Google Analytics, Google Tag Manager, Meta Pixel and Microsoft Clarity. These providers may receive identifiers, cookie information, IP address, device data, page activity and interaction information according to their own privacy terms.

You may use available cookie controls or your browser settings to manage non-essential cookies. Blocking essential cookies may prevent login, cart, checkout or account functions from operating correctly.

We may send newsletters, product launches, educational updates, free-resource notices, offers and promotional messages when you have subscribed or when such communication is otherwise permitted.

You can unsubscribe through the link included in a marketing email or by contacting us. We may retain a limited suppression record so that your opt-out is respected.

We do not sell or rent personal information. Information may be disclosed only where reasonably necessary for the purposes described in this policy.

• Hosting and infrastructure providers, including services used to host, secure, back up and deliver the website.
• WordPress and WooCommerce services used for accounts, orders, products and digital downloads.
• Razorpay and connected payment participants used to process, verify and support payments.
• Email and SMTP providers used for transactional, support and marketing communications.
• Analytics and marketing providers, including configured Google, Meta and Microsoft services.
• Security, anti-fraud, logging and backup providers used to protect accounts, orders and website infrastructure.
• Professional advisers, such as legal, accounting, tax or technical consultants where necessary.
• Government, regulatory, judicial or law-enforcement authorities where disclosure is required or permitted by law.
• A successor organisation in connection with a lawful business reorganisation, transfer or acquisition, subject to appropriate protections.

Service providers may process information only for their relevant services and may also be subject to their own legal and privacy responsibilities.

We retain personal information only for as long as reasonably necessary for its stated purpose, account and purchase support, security, fraud prevention, dispute resolution or legal obligations.

Information may be retained longer where required by law, a court or authority, an active dispute, fraud investigation, security incident or legal claim. It may be deleted, anonymised or aggregated when it is no longer required.

We use reasonable technical and organisational safeguards designed to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.

• HTTPS-encrypted website connections.
• Restricted administrative access.
• Password and authentication controls.
• Software, theme and plugin maintenance.
• Security monitoring and access logs.
• Backups and recovery procedures.
• Malware, abuse and fraud-prevention measures.
• Limited access according to operational need.

No online service, storage system or method of transmission can be guaranteed to be completely secure. Users should maintain strong passwords and protect their devices and email accounts.

If a personal-data breach occurs, we will investigate, limit the impact and take response or notification steps required by applicable law.

Many educational resources are suitable for school students. Under India’s Digital Personal Data Protection framework, a child is generally an individual below 18 years of age.

Users below 18 should use account, purchasing, payment and support features with the involvement and permission of a parent or lawful guardian. Where legally required, we may seek verifiable parental or guardian consent before processing a child’s personal data.

We do not intentionally request unnecessary information about children. We do not knowingly use children’s personal data for behavioural monitoring or targeted advertising in a manner prohibited by applicable law.

A parent or guardian may contact us to ask about, correct or request deletion of a child’s information, subject to identity, authority and legal verification.

Subject to applicable law, identity verification and relevant exceptions, you may request:

We may ask for information reasonably needed to verify your identity, account ownership or authority before completing a request. We may refuse, restrict or extend a request where permitted or required by law.

Some hosting, cloud, email, analytics, advertising, security or technical service providers may process or store information using infrastructure located outside India.

Where cross-border processing occurs, we will take reasonable steps to use reputable providers and comply with restrictions, safeguards or requirements applicable to such processing.

Our website may link to third-party websites, payment pages, platforms or services. Their collection and use of information are governed by their own policies and practices.

CONCEPTUAL SHEETS is not responsible for the content, security or privacy practices of an external website that we do not control. Review the relevant third-party policy before submitting personal information.

We may update this Privacy Policy when our services, technology, providers, business practices or legal obligations change.

The “Last updated” date at the top of the page will be revised. Material changes may also be communicated through the website, account notice or email where appropriate.

The updated policy will apply from the date stated on the page unless a different effective date is specified.