Last updated 10 August 2026
Bhattanagar Jyotish Chandra Pal Foundation — “JCP Foundation”, “we” or “us” — runs JCP Academy at Bhattanagar, Liluah, Howrah. This notice explains what personal data this website collects, why we collect it, who else sees it, how long we keep it, and what you can ask us to do about it.
It is written to the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, alongside the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Under that Act we are the Data Fiduciary — the organisation that decides why and how your data is handled — and you are the Data Principal, the person the data is about.
We have described what this website actually does, rather than what a template says a website might do. If anything here does not match your experience of the site, tell us and we will correct it.
What we collect, and why
When you write to us through the contact form
The form on our Contact page asks for four things, all of them required: your full name, your email address, a subject, and your message. We use them for one purpose — to read your enquiry and reply to it.
The form saves nothing into this website. When you press Submit, those four fields are sent as a single email to [email protected] and are not written to our database. That email is the only copy we hold. We do not record your IP address or your browser’s user-agent alongside your message.
Before the form is accepted, Cloudflare Turnstile checks that the submission is not automated. Turnstile does not ask you to solve a puzzle; it reaches that judgement from signals your browser sends and from your IP address.
When you simply read the site
Every request to jcpfoundation.org passes through Cloudflare’s network before it reaches our server, so Cloudflare handles your IP address in order to deliver the page and to block attacks.
Our web server records each request in an access log: your IP address, the time, the page requested, and your browser’s user-agent. That log is a rolling buffer capped at 100 MB — once it is full, the oldest entries are overwritten and are gone. We read it only to diagnose faults.
We use Google Analytics 4 to count visits and see which pages are read. It is loaded through the Site Kit plugin as Google tag GT-TXHNSL2P, and it records an approximate location derived from your IP address (Google does not pass your IP address on to us), your device and browser type, and the pages you view. Signed-in administrators of this site are excluded from it.
We do not use advertising, remarketing or cross-site tracking, and we do not sell, rent or trade anything about you.
Cookies
This site sets no cookies of its own for ordinary visitors; WordPress sets one only when an administrator signs in. The cookies you may receive come from Google Analytics, whose names begin _ga, and from Cloudflare if its security check runs.
There is no cookie consent banner on this site at present. If you would rather not be measured, most browsers can block third-party cookies, and Google publishes a browser add-on that opts you out of Google Analytics on every site.
Photographs and achievements of our students
We publish news about JCP Academy students, including names, photographs and examination results. Where a student is under 18, the Act treats this as a child’s personal data and requires the verifiable consent of a parent or lawful guardian before it is processed.
If your child appears anywhere on this site and you have not given that consent — or you gave it and now wish to withdraw it — write to the Grievance Officer named below and we will remove the material. You do not need to give a reason.
The Act also forbids tracking or behaviourally monitoring children, and advertising directed at them. We carry no advertising of any kind. The Google Analytics measurement described above identifies nobody individually and does not follow visitors to other websites, but it does count every visitor to this site and we cannot tell which of them are under 18. If you would prefer your child were not counted, the opt-out above applies.
Who else sees your data
We use a small number of service providers. Each handles your data only to run the service we have asked it for.
- Hetzner Online GmbH (Germany) — hosts this website and its database.
- Cloudflare, Inc. (United States) — carries and protects all traffic to the site, runs the Turnstile check on the contact form, and forwards mail addressed to [email protected].
- Resend, Inc. (United States) — delivers the notification email that carries your enquiry.
- Google LLC (United States) — provides Google Analytics, and hosts the mailbox that finally receives your enquiry.
We share personal data with nobody else, and we disclose it otherwise only where the law requires us to.
Because these providers operate outside India, your data may be handled abroad. The Act permits this except to any country the Central Government restricts by notification.
How long we keep it
- Your enquiry email — until your enquiry has been dealt with, and then for a further six months, after which it is deleted.
- Server access logs — until the 100 MB buffer overwrites them, which in practice is a matter of weeks.
- Google Analytics records — held by Google for the retention period set on our Analytics property. We hold no copy of them that can be traced to an individual.
- News about students — published while it remains current, and removed on request.
Your rights
Under sections 11 to 14 of the Act you may:
- Ask what we hold. Request a summary of the personal data we hold about you, what we have done with it, and who else received it.
- Have it corrected. Ask us to correct, complete or update anything inaccurate.
- Have it erased. Ask us to delete it, unless a law requires us to keep it.
- Withdraw your consent. Withdraw at any time, as easily as you gave it. Withdrawing does not undo what was lawfully done beforehand.
- Nominate someone. Name another person to exercise these rights for you if you die or become unable to act.
- Raise a grievance. Complain to us about how we have handled your data, whether or not you have exercised any other right first.
How to exercise them. Email the Grievance Officer at [email protected], or write to the postal address below. Please quote the email address you used when you contacted us: for most people that is the only identifier we hold, and without it we can neither find your data nor be confident we are handing it to the right person.
How long we take. We answer every request and every grievance within ninety days, and usually far sooner.
If our answer does not satisfy you, you may complain to the Data Protection Board of India.
Grievance Officer
Tarun K Pal
Grievance Officer, Bhattanagar Jyotish Chandra Pal Foundation
Bhattanagar, Liluah, Howrah, West Bengal – 711203, India
[email protected]
+91-9619480264
How we protect your data
- The site is served only over HTTPS, so what you type into the contact form is encrypted in transit.
- Our server accepts web traffic only from Cloudflare’s network. It cannot be reached directly from the open internet.
- The contact form stores nothing, so there is no database of enquiries to lose.
- Administrator accounts are limited to the few people who maintain the site.
- The site’s database and files are backed up nightly, and those backups are held on the same server.
No system is perfectly secure and we do not claim otherwise. Should we ever suffer a personal data breach, we will notify you and the Data Protection Board of India as the Act requires.
Changes to this notice
We will update this page whenever the site changes in a way that affects your data, and we will change the date at the top when we do.