Privacy and data use

Privacy Notice

Understand what we collect when you browse or enquire, why we use it, who may receive it and how to exercise your choices.

Version platform-2026-08-17Published 17 August 2026Applies to the main site, microsites and campaign pages

Who this notice covers

This Privacy Notice explains how Executive Programs Online (“EPO”, “we”, “our” or “us”) collects, uses, shares, retains and protects personal data when you visit our website, submit programme enquiries, communicate with counsellors, or interact with us through messaging channels.

Executive Programs Online (EPO) is operated jointly by Study2Win Private Limited and Onyx Ventures Private Limited (“Operating Entities”). Both companies list and support their respective executive education programmes and authorized provider relationships through this platform. The applicable programme page identifies the responsible entity, education/programme provider and intended recipients of an enquiry before submission.

Programme-specific notice controls. If a programme form names a provider or recipient, that notice explains the specific routing for that enquiry. It supplements this platform-wide notice.

Information we process

Information you provide

Name, mobile or WhatsApp number, email address, educational qualifications, work experience, programme interest, consent choices and any information or attachments you voluntarily share with a counsellor.

WhatsApp and messaging data

WhatsApp/mobile number, WhatsApp profile information made available to us, message content and attachments voluntarily sent, message timestamps, delivery and read status, conversation identifiers and technical delivery logs.

Technical and attribution data

Requested page, host or microsite, referral URL, UTM parameters and advertising click identifiers submitted with an enquiry, timestamp, IP and security logs, and message or enquiry delivery status.

Do not send identity documents (such as Aadhaar or passport), financial or bank information, academic certificates or other sensitive records through a general enquiry form or ordinary messaging. If documents are required later, use only the secure route identified by the responsible provider or institution.

Why we use information

  • Respond to programme enquiries and WhatsApp requests; provide counselling and admissions support.
  • Send the enquiry to the recipients disclosed on that programme page.
  • Send requested service, admissions or transactional communications.
  • Maintain consent, delivery, communication and opt-out or suppression records.
  • Measure campaign sources and improve programme information.
  • Troubleshoot message delivery and secure business-messaging integrations.
  • Prevent spam, fraud and misuse; secure and troubleshoot our services.
  • Comply with applicable law and establish, exercise or defend legal claims.

WhatsApp and business messaging

Where you communicate with us through WhatsApp, or where we use the WhatsApp Business Platform or related Meta business-messaging APIs to provide requested information, counselling, admissions support, service communications or customer support, we may process information associated with those communications.

This may include your mobile or WhatsApp number, WhatsApp profile information made available to us, message content, attachments you voluntarily send, message timestamps, message status such as sent, delivered or read status, conversation identifiers and related technical or communication metadata.

We use this information to respond to enquiries, provide requested counselling or admissions support, maintain communication and consent records, manage opt-out or suppression requests, route enquiries where applicable, troubleshoot message delivery, prevent misuse, secure our services and comply with applicable legal obligations.

WhatsApp communications may be transmitted and processed through services provided by Meta Platforms and its affiliates as part of the WhatsApp Business Platform. Where we use authorised technology, hosting, CRM, communications or service providers to operate business messaging, those providers may process relevant information only for the purposes of providing those services to us and subject to applicable contractual and legal requirements.

We do not sell WhatsApp message content or WhatsApp contact information as a standalone product.

Users may request that promotional WhatsApp communications stop at any time. Transactional, service, consent, suppression, security or legally required records may still be retained where necessary.

Who receives information

Recipients may include the responsible EPO operating entity (Study2Win Private Limited or Onyx Ventures Private Limited), the selected programme’s education-technology or delivery provider, the academic institution where necessary, their authorised admissions representatives, and vendors that host, secure or deliver the service under appropriate instructions.

Where WhatsApp or Meta business-messaging services are used, relevant communication and technical data may also be processed by Meta Platforms and its affiliates as the provider of the WhatsApp Business Platform. Relevant data may also be processed by authorised hosting, CRM, communications, technology or support providers acting on our instructions where required to operate the service.

We do not sell personal data as a standalone product. We do not broadcast or send an enquiry to every provider on the platform. The selected programme determines the applicable routing.

When a provider receives your enquiry, its own privacy notice may also apply to its subsequent processing. A relevant provider privacy link is shown on applicable programme pages.

Retention and security

We retain active enquiry, communication and WhatsApp messaging records while needed for the requested support, reasonable operational follow-up, maintaining consent and suppression or opt-out records, dispute resolution, fraud prevention and security purposes, and where required by law. Records should then be deleted or de-identified when the purpose and applicable retention need end.

Controls include role-based administrative access, restricted contract access, consent and delivery logs, secure session settings and reasonable organisational and technical safeguards. No internet transmission or storage can promise absolute security.

Cookies and measurement

Cookies and similar technologies used on this website are described in our separate Cookie Notice. The Cookie Notice contains the current technology inventory, including essential session cookies, campaign/referral attribution practices and any future analytics or advertising technologies.

Your choices and requests

  • Ask what personal data we hold about your enquiry or messaging records.
  • Request correction or erasure where applicable.
  • Withdraw consent or opt out of future promotional communications (including marketing calls, SMS, email or promotional WhatsApp messages).
  • Raise a concern about the use, sharing or security of your data.
  • Ask us to identify the provider or recipient connected with your enquiry.

Withdrawal does not invalidate processing already carried out and may not require deletion of records that must be retained for legal, fraud-prevention, security, dispute or suppression purposes.

Privacy contact

For the request process and expected response steps, see Grievance and privacy requests.