GDPR & UK Privacy Notice

01 Applicability and controller

This supplement applies only where the EU GDPR or UK data-protection law applies to the relevant processing. Accessing an Indian website from abroad does not by itself determine territorial applicability. Skillvelop Ventures Private Limited is the platform operator and, where applicable, controller of family account and assessment information. Contact hello@skillvelop.com. Naveen Samala is the Grievance Officer, not a claimed statutory Data Protection Officer or appointed European representative.

02 Purposes and lawful bases

For adult account administration and a requested service, the relevant basis may be performance of a contract. Security and proportionate fraud prevention may rely on legitimate interests after balancing affected rights, especially children’s rights. Required disclosures or retention may rely on an applicable legal obligation. A parent’s contract is not automatically a basis for every use of a child’s information.

Where consent is the applicable basis for a child’s assessment processing or an optional use, it must be valid, informed and appropriately authorised. It can be withdrawn without affecting earlier lawful processing. Optional marketing requires an appropriate lawful basis and any required consent. Special-category data is not requested and must not be supplied in ordinary assessment fields.

03 Rights and requests

Subject to applicable conditions, you may request access, correction, erasure, restriction and portability, object to processing based on legitimate interests and withdraw consent. You may object to direct marketing. Children hold their own rights; parental representation depends on authority, the child’s capacity and applicable law.

Email hello@skillvelop.com with the request. We may seek proportionate identity confirmation. Where EU GDPR applies, requests are generally answered within one month, with any lawful extension and reasons notified as required. UK requests are handled under the applicable UK rules. A refusal must explain its grounds and available remedies. You may complain to your competent supervisory authority, including the UK Information Commissioner where appropriate, without first completing our internal grievance process.

04 Profiling and international transfers

The platform creates an educational profile from responses and reflections. It is intended as guidance and must not be used for solely automated decisions producing legal or similarly significant effects. Request human review of a disputed recommendation.

Recipients and international processing are described in the Privacy Policy. Any transfer requiring a GDPR safeguard must use an applicable lawful mechanism, such as an adequacy decision or appropriate contractual safeguards with the required assessment. Ask us for recipient information and a copy or explanation of applicable safeguards, subject to lawful redactions. This notice does not assert that India or every configured AI destination has an adequacy decision.

05 Other disclosures and regulatory context

See the Privacy Policy for categories, sources, recipients and choices; the Child Privacy Policy for parental participation; and the Data Retention Policy for current retention limitations. Providing necessary account information is a service requirement, not a general statutory obligation.

Indian legislation has its own commencement schedule and does not replace applicable European or UK duties. This notice does not constitute certification under any privacy framework. Guidance: European Commission privacy information and UK Information Commissioner.