Rebel School, operating rebelschool.in (“Rebel School”, “we”, “us”), respects your privacy. This policy explains what personal data we collect, why we collect it, how we use and protect it, who we share it with, and what rights you have. It is issued in accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
Data Fiduciary: Rebel School, Block No. A-1, Flat No. 606, Shubham Green, Near Treasure Fantasy, Cat Road, Indore, Madhya Pradesh 453331, India.
Information you give us:
Information collected automatically:
Information we do not collect: We never receive or store your full card number, CVV, card expiry, UPI PIN, or net banking password. These are captured directly by Razorpay on its own PCI-DSS compliant systems. We receive only a transaction reference, the amount, the status, and a masked identifier of the instrument used
| What we use it for | Legal basis |
|---|---|
| Creating and managing your account | Performance of contract |
| Delivering the courses and products you purchase | Performance of contract |
| Processing payments and issuing receipts | Performance of contract / legal obligation |
| Tracking course progress and issuing certificates | Performance of contract |
| Providing customer support | Performance of contract |
| Operating the referral programme and calculating commissions | Performance of contract |
| Sending transactional emails (order confirmations, access details, password resets) | Performance of contract |
| Sending marketing emails or messages about new courses and offers | Your consent — withdrawable at any time |
| Detecting fraud, chargeback abuse, and unauthorised content sharing | Legitimate use / legal obligation |
| Meeting tax, accounting, and regulatory obligations | Legal obligation |
We do not sell your personal data to anyone, and we do not share it with third parties for
their own independent marketing.
We share personal data only with service providers who help us run Rebel School, and only to the extent they need it:
Each of these providers is bound to use your data only for the purpose we engage them for.
We keep account and course access data for as long as your account remains active. Transaction and invoice records are retained for eight years, as required under Indian tax law. Support correspondence is kept for three years. Marketing consent records are kept until you withdraw consent, plus one year.
When data is no longer needed, we delete it or irreversibly anonymise it.
We apply reasonable technical and organisational safeguards including HTTPS/TLS encryption in transit, hashed password storage, access controls limiting staff access to what is necessary, and regular software updates. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a personal data breach, we will notify affected users and the Data Protection Board of India as required by law.
We use cookies to keep you signed in, remember your preferences, track referral attribution, and understand how the website is used. Essential cookies are required for the site to function. You can block or delete cookies through your browser settings, but doing so may prevent you from logging in or accessing purchased content.
Rebel School is intended for users aged 18 and above. We do not knowingly collect personal data from anyone under 18 without verifiable parental or guardian consent, as required by the Digital Personal Data Protection Act, 2023. We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children. If you believe a person under 18 has provided us with personal data without such consent, contact us at support@rebelschool.in and we will delete it.
Subject to applicable law, you may:
• Access — request a summary of the personal data we hold about you and how it is processed
• Correct — ask us to correct inaccurate or incomplete data, or complete data that is out of date
• Erase — ask us to delete your data where it is no longer needed for the purpose it was collected
• Withdraw consent — stop marketing communications at any time, using the unsubscribe link or by writing to us
• Nominate — nominate another individual to exercise your rights in the event of your death or incapacity
• Grieve — raise a complaint with our Grievance Officer, and escalate to the Data Protection Board of India if unsatisfied
To exercise any right, email support@rebelschool.in. We will respond within 30 days. We may ask you to verify your identity before acting on a request.
In accordance with the Information Technology Act, 2000 and the rules made under it:
Name: Rebel School — Grievance Cell
Email: support@rebelschool.in
Address: Block No. A-1, Flat No. 606, Shubham Green, Near Treasure Fantasy, Cat Road, Indore, Madhya Pradesh 453331, India
Response time: Acknowledgement within 24 hours; resolution within 15 days.
We may update this Privacy Policy. Material changes will be notified by email or a prominent notice on the website. The “Last Updated” date at the top always reflects the current version.
Rebel School · Block No. A-1, Flat No. 606, Shubham Green, Near Treasure Fantasy, Cat Road, Indore, Madhya Pradesh 453331, India · Email: support@rebelschool.in · Phone: +916266365032
Effective Date: 5 August 2026
Last Updated: 5 August 2026
