Privacy Policy

Welcome to NORG ("we", "our", or "us"). We operate the website NORG.com and provide online exam preparation services including mock tests, practice questions, study articles, and performance analytics. We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, create an account, take mock tests, purchase subscriptions, or interact with our platform in any way. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site and services.

1. Information We Collect

1.1 Personal Information You Provide

We collect personal information that you voluntarily provide when you register on our platform, purchase a subscription, take mock tests, or contact us. This includes:

• Account Registration: Full name, email address, phone number, and password when you create an account on NORG.
• Payment Information: Billing name, billing address, and payment details when you purchase a subscription or exam package. Note: We do not store your complete credit/debit card numbers. Payment processing is handled securely by our third-party payment gateway (PayU).
• Exam Activity: Your test attempts, answers submitted, scores, time spent on questions, and performance data generated when you take mock tests on our platform.
• Contact Information: Name, email address, phone number, and message content when you use our contact form or reach out to our support team.
• Newsletter Subscription: Email address if you subscribe to our newsletter for exam updates and study tips.
• Profile Information: Any additional information you choose to add to your profile, such as your target exam, preparation stage, or educational background.

1.2 Information Collected Automatically

When you access our website, certain information is collected automatically through cookies and similar technologies:

• Device Information: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), and screen resolution.
• Usage Data: Pages visited, time spent on each page, links clicked, referring URLs, and navigation patterns within our platform.
• Exam Analytics: Time taken per question, section-wise performance patterns, login frequency, and study session duration.
• Location Data: Approximate geographic location based on your IP address (country and city level only).

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Account Management and Service Delivery

• Create and manage your user account on NORG
• Authenticate your identity when you log in
• Deliver mock tests, practice questions, and study materials
• Track your exam attempts and generate performance reports
• Provide personalized recommendations based on your performance
• Manage your subscription status and access permissions

2.2 Payment Processing

• Process subscription payments and exam package purchases through PayU payment gateway
• Generate payment receipts and transaction records
• Handle refund requests where applicable
• Prevent fraudulent transactions and unauthorized access

2.3 Communication

• Send transactional emails (account verification, password resets, payment confirmations)
• Respond to your inquiries and support requests
• Send exam reminders and study tips (if you opted in)
• Notify you about changes to our services, terms, or policies
• Send newsletter updates about new mock tests and exam notifications (only if subscribed)

2.4 Platform Improvement

• Analyze usage patterns to improve our website and user experience
• Identify and fix technical issues and bugs
• Develop new features and exam categories based on user demand
• Conduct internal research and analytics to enhance our question quality

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on NORG. Here is a detailed breakdown of the cookies we use:

3.1 Essential Cookies

These cookies are necessary for the website to function properly. They enable core functionality such as user authentication, session management, and security features. You cannot opt out of essential cookies as the platform will not work without them.

3.2 Analytics Cookies (Google Analytics)

We use Google Analytics to understand how visitors interact with our website. Google Analytics collects information such as pages visited, time on site, bounce rate, and traffic sources. This data is aggregated and anonymized. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

3.3 Advertising Cookies (Google AdSense)

We use Google AdSense to display advertisements on our platform. Google AdSense uses cookies to serve ads based on your prior visits to our website and other websites on the internet. These cookies allow Google and its partners to serve relevant advertisements to you. Specifically:

• Google uses the DoubleClick cookie to serve ads based on your browsing history
• Third-party vendors may use cookies to serve ads based on your interests
• You can opt out of personalized advertising by visiting Google Ads Settings
• You can also opt out of third-party vendor cookies at www.aboutads.info/choices

3.4 Preference Cookies

These cookies remember your preferences such as language settings, theme preferences, and display options to provide a more personalized experience.

3.5 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. However, please note that disabling certain cookies may affect the functionality of our platform, particularly features that require you to be logged in.

4. Third-Party Services

We work with trusted third-party service providers to operate our platform effectively. These services may have access to your personal information only to perform specific tasks on our behalf:

4.1 Google AdSense (Advertising)

We use Google AdSense to display advertisements. Google may collect and use data about your visits to this and other websites to provide targeted advertisements. Google's use of advertising cookies enables it and its partners to serve ads based on your browsing patterns. For more information, please review Google's Privacy Policy.

4.2 PayU Payment Gateway

We use PayU as our payment processing partner for handling subscription payments and exam package purchases. When you make a payment, your payment information is transmitted directly to PayU's secure servers. We do not store your complete card details on our servers. PayU's privacy practices are governed by their own privacy policy available at payu.in/privacy-policy.

4.3 Google Analytics

We use Google Analytics to analyze website traffic and user behavior patterns. The data collected helps us understand how students use our platform and identify areas for improvement. Google Analytics data is processed in accordance with Google's Privacy Policy.

4.4 Email Service Providers

We use email service providers to send transactional emails, newsletters, and exam notifications. Your email address is shared with these providers solely for the purpose of delivering communications you have requested or that are necessary for your account.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties for marketing purposes. We may share your data only in the following circumstances:

• Service Providers: With trusted third-party companies that assist us in operating our platform (hosting, payment processing, analytics, email delivery) under strict confidentiality agreements.
• Legal Requirements: When required by law, court order, subpoena, or government authority to disclose your information.
• Safety and Security: To protect the rights, property, or safety of NORG, our users, or the public when we believe disclosure is necessary.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction. We will notify you of any such change.
• With Your Consent: We may share your information for any other purpose with your explicit consent.

6. Data Security

We take the security of your personal information seriously and implement industry-standard measures to protect it:

• Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS (HTTPS) protocol.
• Password Security: User passwords are stored using bcrypt hashing algorithm and are never stored in plain text.
• Access Controls: Access to personal data is restricted to authorized personnel only, with role-based access controls in place.
• Regular Backups: We maintain regular backups of our database to prevent data loss.
• Security Monitoring: We monitor our systems for unauthorized access attempts and suspicious activities.
• Payment Security: Payment processing is handled by PCI-DSS compliant payment gateways. We never store complete card numbers on our servers.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to implementing best practices to minimize risks.

7. Data Retention

We retain your personal data for as long as necessary to provide our services and fulfill the purposes described in this policy:

• Account Data: Retained as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.
• Exam Performance Data: Retained as long as your account is active to provide historical performance analytics and progress tracking.
• Payment Records: Retained for 7 years as required by Indian tax and accounting regulations.
• Communication Records: Contact form submissions and support tickets are retained for 2 years for quality assurance purposes.
• Analytics Data: Aggregated and anonymized analytics data may be retained indefinitely for research and platform improvement.

8. Your Rights (GDPR Compliance)

As a user of NORG, you have the following rights regarding your personal data, in compliance with GDPR and applicable data protection laws:

• Right to Access: You can request a copy of the personal data we hold about you at any time by contacting us.
• Right to Correction: You can update or correct your personal information through your account settings or by contacting our support team.
• Right to Deletion (Right to be Forgotten): You can request deletion of your account and associated personal data. Please note that some data may be retained as required by law.
• Right to Opt-Out: You can unsubscribe from marketing emails at any time using the unsubscribe link in our emails or through your account settings.
• Right to Data Portability: You can request your exam performance data in a machine-readable format.
• Right to Restrict Processing: You can request that we limit the processing of your personal data in certain circumstances.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection authority if you believe your privacy rights have been violated.

To exercise any of these rights, please contact us at support@norg.in with your request. We will respond within 30 days.

9. Children's Privacy

NORG is designed for students aged 13 years and above. We do not knowingly collect personal information from children under the age of 13. If you are under 13, please do not create an account or provide any personal information on our platform.

If we become aware that we have inadvertently collected personal information from a child under 13, we will take immediate steps to delete that information from our servers. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately at support@norg.in.

For users between 13 and 18 years of age, we recommend that parents or guardians review this Privacy Policy and supervise their child's use of our platform. Parental consent may be required for certain features such as payment processing.

10. International Users

NORG is operated from India and our servers are located in India. If you are accessing our platform from outside India, please be aware that your information will be transferred to, stored, and processed in India. By using our services, you consent to the transfer of your information to India, where data protection laws may differ from those in your country of residence.

For users in the European Economic Area (EEA), we process your data based on legitimate interests, contractual necessity, and your consent where applicable. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this page
• Post a notice on our website homepage for a reasonable period
• Send an email notification to registered users for material changes

We encourage you to review this Privacy Policy periodically. Your continued use of NORG after any changes indicates your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through any of the following channels:

• Email: support@norg.in
• Contact Form: NORG.com/contact
• Subject Line: Please include "Privacy Inquiry" in your email subject for faster processing.

We aim to respond to all privacy-related inquiries within 7 business days. For data access or deletion requests, we will process your request within 30 days of verification.