AntryXspace.com – Privacy, Security & Cookies Policy

Effective Date: January 1, 2026. Last Updated: September 14, 2026

1. Introduction & Scope of Policy

AntryXSpace Academy ("AXSA," "we," "us," or "our") operates AntryXspace.com and its associated digital educational platforms. Our core mission is to democratize space learning globally by providing accessible STEM education resources, free digital certifications, and physical educational merchandise.

This Privacy, Security & Cookies Policy ("Policy") outlines how we collect, process, store, disclose, and safeguard the personal data of our global visitors, learners, and customers. By accessing or using our platform, you acknowledge that you have read and understood the practices described in this Policy.

Contact Information

Official Website: https://antryxspace.com
General & Privacy Enquiries: team@antryxspace.com | antryxspace@gmail.com
Grievance Redressal Officer: team@antryxspace.com

2. Global Legal Framework & Regional Compliance

As a global educational entity, AXSA adheres to international data protection principles including lawfulness, purpose limitation, data minimization, accuracy, storage limitation, integrity, and accountability.

JurisdictionApplicable RegulationsKey Compliance PrinciplesIndiaDigital Personal Data Protection (DPDP) Act, 2023 & DPDP Rules 2025Verifiable parental consent for under-18s; explicit prohibition of behavioral tracking/targeted ads for children; RBI-compliant payment processing.European Union & UKEU GDPR & UK GDPRLawful basis for processing; strict 72-hour breach notification; Standard Contractual Clauses (SCCs) for cross-border data transfers.United StatesCOPPA 2.0 (Children’s Online Privacy Protection Act)Verifiable parental consent for children under 13; strict written children's data security protocols; separate consent for third-party disclosures.Rest of WorldISO/IEC 27001 & Universal Privacy GuidelinesData encryption in transit and at rest; strict consumer data rights access and deletion workflows.

3. Data Collection & Purpose Specification

A. Categories of Data We Collect

Personal Data Provided Directly: Name, email address, physical shipping address, phone number, and country.
Minors' & Student Data: Student name, age, grade level, and parent/guardian contact details submitted for digital/printed certificate generation.
E-Commerce Transaction Data: Order details, shipping address, and payment confirmation tokens for printed certificates, T-shirts, caps, and badges. (Note: Complete financial card numbers are processed directly by payment gateways and are never stored on AXSA servers).
Automatically Collected Technical Data: Device IP address, browser type, operating system, referring URL, time zone, and session interaction metrics collected via essential cookies.
Media & Submissions: Student project files, essays, artwork, and photos voluntarily submitted for space competition showcases or certificate validation.

B. Legal Bases for Processing

Data CategoryLawful Basis (GDPR / Global)Lawful Ground (India DPDP Act)Free Digital Certificate IssuancePerformance of Contract / ServiceConsent / Voluntarily Provided DataMerchandise & Print DispatchPerformance of ContractLegitimate Use (Fulfillment of Transaction)Minors' Participation (Under 18)Verifiable Parental ConsentVerifiable Parental/Guardian ConsentSite Security & Anti-FraudLegitimate InterestLegitimate UseEmail Newsletters / MarketingExplicit Opt-In ConsentExplicit Consent

4. Children’s Privacy Safeguards & Parental Rights

AXSA provides educational programs for young space enthusiasts aged 6 to 17. We enforce specialized protections under DPDP Act 2023, COPPA 2.0, and GDPR Article 8:

Verifiable Parental Consent: For learners defined as minors under local law (under 18 in India; under 13 in the US; under 13–16 in the EU/UK), registration, project submission, and order placements must be submitted by or with verified consent from a parent or legal guardian.
Prohibition of Behavioral Tracking & Ads: AXSA strictly prohibits behavioral tracking, targeted advertising, or profile-building directed at children across all services.
Data Minimization for Minors: We collect only the minimum personal details strictly necessary to generate certificates and ship requested physical items.
Parental Rights: Parents and legal guardians retain the absolute right to:
1. Review the personal information and project submissions of their child.
2. Request correction or total deletion of their child's data from our databases.
3. Refuse further collection or processing of their child's data.
Requests can be submitted directly to contact@antryxspace.com.

5. Media Release & Public Project Showcase

When a student or parent submits project work, artwork, or videos for AXSA competitions or showcases:

Display Rights: You grant AXSA a non-exclusive license to feature the submitted project work on AntryXspace.com, our official educational social media handles, and educational newsletters.
Privacy Protection: Public displays are limited to minimal identifying details (e.g., "Aarav, Age 9, India" or "Elena, Grade 5, UK"). Direct contact information of minors is never made public.
Revocation: Parents or guardians may request the removal of showcased media at any time by contacting support.

6. Payment Processing & Financial Security

For paid purchases (such as printed certificates and AXSA merchandise):

Third-Party Payment Gateways: Payments are routed securely through PCI-DSS Level 1 compliant processors (such as Razorpay, PayU, Stripe, or PayPal) in full accordance with Reserve Bank of India (RBI) guidelines and international security standards.
Zero Financial Data Storage: ANtryXspace.com does not collect, store, or process raw credit card numbers, debit card PINs, UPI PINs, or net banking credentials on its local servers.

7. Data Sharing, Transfers & Safeguards

A. Third-Party Service Providers

We do not sell, rent, or monetize your personal data to third parties or advertisers. Data is shared exclusively with bound service partners necessary for platform operations:

Logistics Partners: Shipping and postal carriers (e.g., India Post, international express couriers) strictly for delivering printed products.
Cloud & Infrastructure: Secure cloud servers (AWS, Google Cloud) operating with end-to-end encryption.
Analytics: Privacy-compliant web analytics tools to ensure site integrity and performance.

B. International Data Transfers

When transferring data across international borders (e.g., outside the EEA, UK, or India), we apply EU Standard Contractual Clauses (SCCs) and compliant cross-border data protection frameworks to safeguard your information.

C. Technical & Security Safeguards

Encryption: SSL/TLS (HTTPS) encryption for all data in transit, combined with AES-256 bit encryption at rest.
Access Control: Role-based strict access control limited to authorized personnel.
Breach Notification: In the event of a security incident affecting personal data, AXSA will notify relevant regulatory authorities (such as the Data Protection Board of India or EU DPAs) and affected users within regulatory deadlines (e.g., within 72 hours under GDPR).

8. User Rights & Data Subject Requests

Depending on your jurisdiction, you hold specific rights regarding your personal information:

User RightDescription of ActionRight to AccessObtain confirmation and copies of personal data held about you.Right to RectificationRequest correction of inaccurate or incomplete details (e.g., name spelling on certificates).Right to Erasure ("Right to be Forgotten")Request permanent deletion of personal data from our active databases.Right to Withdraw ConsentRevoke previously granted consent for marketing communications or media publication.Right to Nominate (India DPDP)Nominate another individual to exercise your data rights in the event of incapacity.

To exercise your rights: Send an email to contact@antryxspace.com with the subject line "Data Subject Request". We respond to and process all verified requests within 30 days free of charge.

9. Cookies & Tracking Technologies Policy

AntryXspace.com uses essential and functional cookies to ensure proper website operation and enhance user experience.

Cookie CategoryFunctionalityConsent RequirementStrictly Necessary CookiesEssential for website navigation, checkout security, and form submissions.Always Active (No Consent Required)Performance & AnalyticsHelps us understand aggregate site traffic and operational errors.Explicit Opt-In Banner ConsentFunctional CookiesRemembers user preferences such as region and language settings.Explicit Opt-In Banner Consent

Managing Cookies: Visitors can modify, block, or clear cookies at any time through their individual web browser settings or via our site cookie consent banner.

10. Updates to This Policy

We may update this Policy periodically to maintain compliance with evolving global laws and operational changes. Any material modifications will be announced via a prominent notice on AntryXspace.com or emailed to registered account holders at least 30 days prior to implementation.