Privacy
Policy

1. Introduction & DPDP Act Compliance

This Privacy Policy describes how IMERGENE (doing business as "Blue By Imergene", "Blue Portal") and its corporate entities (collectively "IMERGENE", "we", "our", "us") act as a Data Fiduciary in collecting, processing, storing, and protecting your personal data when you access our Platform at https://blue-by-imergene.vercel.app. We strictly comply with the Digital Personal Data Protection (DPDP) Act, 2023 of India, the Information Technology Act, 2000, and rules framed thereunder.

2. Notice & Consent at Point of Collection

Before or at the time of collecting your personal data (e.g. hackathon registrations, internship applications, contact queries, or account creation), we provide a clear, itemized notice specifying:

• The precise categories of personal data being collected (name, email, phone number, academic records, payment details).
• The specific specified purpose for which the data will be processed.
• The manner in which you may exercise your rights as a Data Principal or withdraw your consent.

3. Data Processors & Third-Party Services

We process data directly or engage contractually bound Data Processors who handle data strictly under our instructions and maintaining reasonable security standards. Third parties include:

4. Protection of Children & Minors

In accordance with Section 9 of the DPDP Act 2023, we do not knowingly collect or process personal data of individuals under the age of 18 without obtaining verifiable consent from their parent or lawful guardian. If you are under 18 years of age, you must have a parent or guardian review and approve your registration before submitting any personal data on this Platform.

5. Rights of Data Principals

As a Data Principal under the DPDP Act 2023, you have the following rights:

6. Data Retention & Erasure

We retain personal data only for as long as necessary to satisfy the purpose for which it was collected, or to comply with statutory legal, accounting, and audit requirements under Indian law. When data is no longer required or upon valid consent withdrawal/erasure request, personal data is permanently deleted or anonymized.

7. Security & Confidentiality

We implement robust technical and organizational security measures, including SSL/TLS encryption, secure database access tokens, and access controls to prevent personal data breaches, loss, or unauthorized access.