GDPR Compliance

For schools using GyanMul, the school is the data controller and Nepfex Pvt. Ltd. acts as the data processor, as set out in our Data Processing Agreement. GyanMul processes personal data only on the documented instructions of the controlling school.

• Performance of a contract — processing needed to provide the Service a school has subscribed to
• Legitimate interests — such as maintaining platform security and reliability
• Consent — where a school or individual has given specific consent for a particular use (e.g. optional communications)
• Legal obligation — where processing is required to comply with applicable law

If GDPR applies to you, you have the right to:

• Be informed about how your data is processed (this page and our Privacy Policy)
• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten"), subject to legal retention requirements
• Restrict or object to certain processing
• Data portability — receive your data in a structured, commonly used format
• Not be subject to solely automated decision-making with legal or similarly significant effects — Gurubaa features always require human confirmation before taking action, as described in our Privacy Policy

Requests should generally be directed to your school first, since the school is the data controller. If that is not possible, contact us directly using the details below.

Where personal data of an EEA/UK individual is processed outside the EEA/UK, we rely on our infrastructure providers' own compliance safeguards and take reasonable steps to ensure an equivalent level of protection, consistent with Section 9 of our Data Processing Agreement.

For GDPR-related inquiries, contact info@gyanmul.com. We aim to respond to legitimate requests within 30 days, as required by the GDPR.

If you believe your GDPR rights have not been respected, you have the right to lodge a complaint with your local data protection supervisory authority, in addition to contacting us directly.