Privacy and data use

Privacy Notice

Understand what we collect when you browse or enquire, why we use it, who may receive it and how to exercise your choices.

Version platform-2026-07-29Published 29 Jul 2026Applies to the main site, microsites and campaign pages

Who this notice covers

Executive Programs Online is owned by Study2Win Private Limited. Depending on the selected programme, Study2Win Private Limited or Onyx Ventures Private Limited may operate the promotion or counselling service. The programme page identifies the responsible entity, provider and intended enquiry recipients before submission.

Executive Programs Online is owned by Study2Win Private Limited. Depending on the selected programme, Study2Win Private Limited or Onyx Ventures Private Limited may operate the promotion or counselling service. The applicable programme page identifies the responsible entity, education provider and intended enquiry recipients before submission.

Programme-specific notice controls. If a programme form names a provider or recipient, that notice explains the specific routing for that enquiry. It supplements this platform-wide notice.

Information we process

We process information you provide, including name, mobile number, email address, qualification, work experience, programme interest, consent choice and voluntary communications. We may also process the requested page, microsite host, referral URL, UTM parameters, advertising click identifiers submitted with an enquiry, timestamp, security logs and delivery status.

Information you provide

Name, mobile number, email address, qualification, work experience, programme interest, consent choice and any information you voluntarily share with a counsellor.

Technical and attribution data

Requested page, host or microsite, referral URL, UTM parameters and advertising click identifiers submitted with an enquiry, timestamp, IP/security logs and delivery status.

Do not send identity documents, financial information or other sensitive records through a general enquiry form. If documents are required later, use only the secure route identified by the responsible provider or institution.

Why we use information

We use information to answer programme requests, provide counselling and admissions support, route an enquiry to the recipients disclosed for that programme, maintain consent and suppression records, measure campaign sources, improve programme information, prevent misuse, secure the service and meet legal obligations.

  • Respond to the programme request and provide counselling or admissions support.
  • Send the enquiry to the recipients disclosed on that programme page.
  • Maintain consent, delivery, suppression and communication records.
  • Measure campaign sources and improve programme information.
  • Prevent spam, fraud and misuse; secure and troubleshoot the service.
  • Comply with law and establish, exercise or defend legal claims.

Who receives information

Information may be shared with the responsible EPO operating entity, the selected programme provider, the academic institution where necessary, their authorised admissions representatives, and vendors that host, secure or deliver the service under appropriate instructions. We do not send an enquiry to every provider on the platform or sell personal data as a standalone product.

Recipients may include the responsible EPO operating entity, the selected programme’s education-technology or delivery provider, the academic institution where necessary, their authorised admissions representatives, and vendors that host, secure or deliver the service under appropriate instructions.

We do not sell personal data as a standalone product. We do not send an enquiry to every provider on the platform. The selected programme determines the applicable routing.

When a provider receives your enquiry, its own privacy notice may also apply to its subsequent processing. A relevant provider privacy link is shown on applicable programme pages.

Retention and security

We retain active enquiry and communication records while needed for the requested support, operational follow-up, suppression of unwanted communications, dispute handling and legal obligations. Records should then be deleted or de-identified when the purpose and applicable retention need end. Safeguards include role-based access, restricted contract access, consent and delivery logs, secure session settings and reasonable organisational and technical controls.

We retain active enquiry and communication records while needed for the requested support, operational follow-up, suppression of unwanted communications, dispute handling and legal obligations. Records should then be deleted or de-identified when the purpose and applicable retention need end.

Controls include role-based administrative access, restricted contract access, consent and delivery logs, secure session settings and reasonable organisational and technical safeguards. No internet service can promise absolute security.

Cookies and measurement

The public site currently uses an essential session cookie. No active Google Analytics, advertising pixel, affiliate-cookie or social-plugin tracking code was detected in the application audit. Campaign parameters may be recorded when an enquiry is submitted. The Cookie Notice contains the current inventory.

At present, the public site uses an essential session cookie. We found no active Google Analytics, advertising pixel, affiliate-tracking or social-plugin code in the application. Campaign parameters may be recorded only when an enquiry is submitted. See the Cookie Notice for the current inventory.

Your choices and requests

You may ask what personal data we hold about your enquiry, request correction or erasure where applicable, withdraw consent, opt out of future promotional communications, raise a processing or security concern, and ask us to identify the provider or recipient connected with your enquiry. Requests use the grievance and privacy process published on this website.

  • Ask what personal data we hold about your enquiry.
  • Request correction or erasure where applicable.
  • Withdraw consent or opt out of future promotional communications.
  • Raise a concern about use, sharing or security of your data.
  • Ask us to identify the provider or recipient connected with your enquiry.

Withdrawal does not invalidate processing already carried out and may not require deletion of records that must be retained for legal, fraud-prevention, dispute or suppression purposes.

Privacy contact

For the request process and expected response steps, see Grievance and privacy requests.