Privacy
What we collect, why we collect it, and what you can ask us to do with it.
Most families who write to us are giving us a child's name, a school, and a phone number before they have met anyone here. This page says exactly where that goes.
Last updated 3 September 2026 · Effective 3 September 2026
1. Who we are
Blue Ocean Education Consulting is an admissions advisory registered in New Delhi, India. This policy covers blueoceanedu.com, the landing pages we run on our own subdomains for advertising, and the email, phone and WhatsApp conversations that follow from them. In this policy, we and us mean Blue Ocean Education Consulting, and you means anyone who visits the site or writes to us, whether that is a parent, a student, or someone else.
Under the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the information described here, and you are the Data Principal. That means the decisions about what is collected and why are ours, and the rights over that information are yours. Section 15 of this policy names the person you can hold to that.
You are never required to give us anything. Reading the site takes no form. If you would rather we did not hold your details, do not fill the form, and write to us at the address in section 15 if you already have.
2. What we collect
What you type into the form
Our enquiry form asks for a small, fixed set of fields, and there is no free-text box on it. When you submit it we receive:
- Whether you are a parent or the student
- First name and last name
- Email address and a ten-digit Indian mobile number
- The student's current grade
- School city, school name, and examination board
- Your residence pincode, which we use only to work out a sensible time to call
- Up to three countries the student is considering, in order
- How much scholarship funding would be needed to cover tuition abroad
One field is worked out rather than typed. When you pick a school, our site looks that school up in a reference list of published Indian school fees and records an estimated annual fee band alongside your enquiry. It is an estimate drawn from public information about the school, it is not a statement about your family, and it exists so an advisor knows roughly what a family is planning around before the first call.
What you send us afterwards
If the introduction call goes well and a student joins us, the file grows. Depending on the work, it can hold report cards and transcripts, test scores, psychometric assessment results, essay drafts, project material, recommendation details, university lists, and correspondence about all of it. Some of that is sensitive. It is held for the student's application and for nothing else.
If you subscribe to our mailing list after booking a call, we hold the first name and email address you gave there.
What your browser tells us
Every visit to the site leaves an ordinary technical record. That includes your IP address, the rough location it implies, your browser and operating system, the device you are on, the pages you opened and how long you stayed, the page that sent you to us, and any campaign tags on the link you followed.
We also record anonymised replays of site sessions. Every form field in those recordings is masked before it leaves your browser. The replay shows that a field was filled, never what was typed into it. Section 11 explains the tools that do this and how to switch them off.
What we do not collect
We do not ask for and do not want your Aadhaar number, PAN, passport number, bank details, card numbers, caste, religion, health records, or biometric data. Nothing on this website takes a payment. If a page ever asks you for any of that, it is not ours.
3. How we collect it
There are three routes and no others.
- You give it to us. The enquiry form, the mailing list form, the booking page, an email, a phone call, or a WhatsApp message.
- Your browser reports it. The analytics described in section 11, which run on every page.
- Someone introduces you. A school, an existing client family, or an event organiser occasionally passes on a name and a phone number. When that happens we say who sent us on the first contact, and if you ask us to delete the record we do it that day.
We do not buy lead lists, and we do not scrape names from schools, forums, or social media.
4. Why we use it
Each purpose below is a real thing that happens, in the order it usually happens.
- To call you back. The name, phone number and email go to the advisor who runs the introduction call.
- To prepare for that call. Grade, school, board, country preferences and funding need tell an advisor what the conversation is about before it starts, so the half hour is spent on the student rather than on questions a form already answered.
- To decide whether we are the right team for the student, and to tell you honestly either way.
- To do the work, once a student joins us. Building a profile, planning courses and testing, guiding original work, and preparing applications.
- To submit applications and supporting material to universities and testing bodies, at the family's instruction.
- To write to you about the student's progress, about deadlines, and about our essays and events, if you asked for those.
- To understand how the website is used, so we can fix what is confusing and stop paying for advertising that brings the wrong families.
- To keep our records straight, including invoices, engagement letters, and tax filings.
- To answer the law, where a court, a regulator or a statute requires it.
We use your details for these purposes and for nothing further. If we ever want to use them for something new, we will ask first.
5. The legal ground
Indian law requires us to name the ground we rely on. There are four.
- Your consent. Submitting the enquiry form, subscribing to the mailing list, and allowing analytics cookies are all consented acts, and each can be withdrawn.
- The purpose you volunteered the information for. Section 7 of the Digital Personal Data Protection Act, 2023 treats information you hand over for a stated purpose as usable for that purpose. You give us a phone number so that we call you, so we call you.
- Performing our agreement with you, once a family has signed one.
- Legal obligation, including the Information Technology Act, 2000 and the rules under it, tax and company law, and any lawful order we are served with.
When you fill our form you also agree that we may call, message or email you on the number and address you gave, including a number listed on the National Do Not Call registry, because you asked us to contact you about your own enquiry. Tell us to stop and we stop.
7. Where it is stored
Our own working records sit in Google Workspace. The service providers named in section 6 are companies based outside India, and their systems store and process data on servers outside India, including in the United States and Europe. Sending your details through our form therefore involves a transfer out of the country.
The Digital Personal Data Protection Act, 2023 permits those transfers except to countries the Central Government has restricted. We do not transfer personal information to any restricted country, and we will change providers rather than continue a transfer that stops being lawful.
8. How long we keep it
We do not keep records forever, and a record we no longer have a reason to hold is deleted.
- An enquiry that does not become a client file is kept for 24 months from your last contact with us, then deleted. Families often write in Grade 9 and join in Grade 11, which is the reason it is not shorter.
- A client file is kept for three years after the student's final application cycle closes, so we can answer a question about an application we filed.
- Financial and tax records are kept for as long as Indian tax and company law requires, which is longer than either period above.
- Mailing list details are kept until you unsubscribe.
- Website analytics are kept for at most 14 months, and session replays for at most 30 days.
Asking us to delete something earlier is your right, and section 9 says how.
9. Your rights
The Digital Personal Data Protection Act, 2023 gives you the following rights over information we hold about you. Write to the Grievance Officer in section 15 to use any of them.
- The right to know. Ask for a summary of the personal data we hold about you, what we are doing with it, and who we have shared it with.
- The right to correction and completion. If a record is wrong or out of date, we correct it. A misspelt school or an old phone number takes one email.
- The right to erasure. Ask us to delete what we hold, and we do, unless a law requires us to keep a particular record. We will tell you if anything is held back and why.
- The right to withdraw consent. Withdrawing is as easy as giving it was. It does not make our earlier use of the information unlawful, and it may mean we can no longer do the work.
- The right to nominate. You may name another person to exercise these rights on your behalf if you die or become unable to act.
- The right to be heard. A grievance goes to a named person here first, and to the Data Protection Board of India if we do not resolve it.
We answer requests within 30 days. To protect the family whose records are being asked about, we will check that you are who you say you are before we act, usually by writing back to the email address or phone number already on the record. That check is used for nothing else.
Marketing email is separate and needs no formal request. Every message we send carries an unsubscribe link, and one click ends it. We will still reply to you about your own enquiry.
Making any of these requests costs nothing, and we will not treat you differently for making one.
10. Students under 18
Almost every student we work with is a minor when the family first writes to us, so this section matters more here than it does on most websites.
Indian law treats anyone under 18 as a child and requires a parent or legal guardian to consent before a child's personal data is processed. Our forms are written to be filled in by a parent or guardian. Where a student under 18 fills one in, we treat the submission as incomplete until we have spoken to a parent or guardian, and we ask for that consent on the first call.
The same law forbids behavioural tracking of children and advertising targeted at them. We do not build advertising audiences from students, we do not target advertising at anyone under 18, and the profile we build for a student is an academic one held for their application.
If you believe we hold information about a child without a parent or guardian's consent, write to the Grievance Officer in section 15. We will delete it.
12. How we protect it
The site is served only over HTTPS, so what you type into the form is encrypted between your browser and us. Records are held in Google Workspace accounts protected by two-factor authentication, and access is limited to the people working on that student. Advisors are under a written duty of confidence. We review who holds access when someone joins or leaves.
These are the reasonable security practices the Information Technology Act, 2000 and its rules require of us. No system is beyond attack, and we do not claim ours is. If a breach ever affects your information, we will tell you and the Data Protection Board of India, as the law requires, and we will say plainly what happened and what we are doing about it.
13. Other websites
We link out to universities, scholarship programmes, newspapers that have covered us, and our own profiles on other platforms. Those sites are run by other people under their own privacy terms, and this policy stops at our edge. Read theirs before you give them anything.
Several unrelated businesses trade under some form of the name Blue Ocean, including at least one study-abroad agency abroad. This policy covers blueoceanedu.com and nothing else. If you gave your details to a site with a similar name, it was not us, and we cannot delete what we never held.
14. Changes to this policy
We update this page when what we do changes, and the date at the top of the page is the date of the last change. When a change is significant, such as a new purpose or a new company handling your information, we will say so by email to the families on our records before it takes effect.
15. Grievance Officer
Every question, correction, deletion request and complaint about this policy goes to one person, named here as the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 require.
Dr. Sanjay Kumar
Grievance Officer, Blue Ocean Education Consulting
[email protected]
+91 98211 18128
6, School Lane, Connaught Place, New Delhi 110001, India
Monday to Saturday, 10am to 7pm IST
We acknowledge every message within 72 hours and resolve it within 30 days. Write Privacy in the subject line so it reaches the right desk quickly.
If we do not resolve your grievance, you may take it to the Data Protection Board of India under the Digital Personal Data Protection Act, 2023.