Legal

Privacy Policy

Last updated: 7 May 2026

1. Who we are

NASCA ("we", "us", "our") is an AI-native STEAM education company operating in India, the United Arab Emirates, the Kingdom of Saudi Arabia, the United States and partner regions. Our registered contact is info@nasca.edu.in.

2. What we collect

  • Contact data — name, email, phone, school/region when you submit a form.
  • Newsletter data — email address and source page when you subscribe.
  • Usage data — anonymous page-view counts, referrer, device class.
  • Cookies — strictly-necessary session cookies only. We do not run ad trackers.

3. Why we collect it

To respond to enquiries, deliver the programmes you request, send the weekly NASCA Journal if you opt in, and improve our editorial work. We never sell personal data.

4. Legal bases

Consent (newsletter), contract (programme delivery), and legitimate interest (responding to a school enquiry). Under GDPR, India's DPDP Act, and KSA PDPL, you may withdraw consent at any time by emailing us.

5. Where data lives

On managed infrastructure inside the EU and US. Encrypted in transit (TLS 1.3) and at rest. Access is limited to NASCA staff who need it to do their job.

6. Retention

Lead enquiries: 24 months. Newsletter subscribers: until you unsubscribe. Aggregated analytics: indefinite, in non-identifiable form.

7. Your rights

Access, correction, deletion, portability, and objection. Email info@nasca.edu.in and we'll respond within 30 days.

8. Children

We work with schools, not directly with children. Any classroom artefact shared with us is anonymised before publication and never used for ad targeting.

9. Changes

We will post the new effective date at the top of this page and, for material changes, notify newsletter subscribers by email.