Last Updated: January 2026 · Effective: January 2026
Your privacy matters to us. This Privacy Policy explains how GIBMS Business School (Global Institute of Business Management and Studies Business School OPC Pvt. Ltd.) collects and uses your personal information when you visit our website, enquire about our programmes, apply for admission, or enrol as a student. By using our website or services, you agree to the practices described in this policy.
01
Who We Are
GIBMS Business School is operated by Global Institute of Business Management and Studies Business School OPC Pvt. Ltd., a company incorporated under the Companies Act, 2013, registered with the Ministry of Corporate Affairs, Government of India.
- Registered Name: GIBMS Business School OPC Pvt. Ltd.
- CIN: U85499MH2023OPC404188
- GSTIN: 27AAKCG5152C1ZR
- Registered Office: C-20, G Block Rd, Bandra Kurla Complex, Bandra East, Mumbai – 400051, Maharashtra, India
- Website: gibms.co.in
For the purposes of this policy, "GIBMS", "we", "us" and "our" refer to the above entity. "You" refers to any individual who visits our website, enquires about our programmes, applies for admission, or uses our services in any capacity.
02
Information We Collect
We collect personal information that you provide directly to us and information that is collected automatically when you use our website.
Information you provide directly:
- Full name, email address, phone number and date of birth when you enquire, apply or register
- Academic qualifications — marksheets, certificates and transcripts submitted during the admission process
- Work experience details and employment history (where required for programme eligibility)
- Government-issued identity documents — Aadhaar Card, PAN Card, Passport, Driving Licence or Ration Card
- Photographs submitted as part of the admission process
- Payment information — transaction references and bank details (we do not store card numbers)
- Communication records — emails, WhatsApp messages and form submissions sent to us
- Feedback, complaints or queries you submit through our website or helpline
Information collected automatically:
- IP address, browser type, device type and operating system
- Pages visited, time spent on each page and referring URLs
- Cookies and similar tracking technologies (see Section 6)
- Location data at the city or region level (not precise GPS location)
03
How We Use Your Information
We use the information we collect for the following purposes:
- Admission processing — to evaluate your application, verify eligibility and issue offer letters
- Student records — to maintain your enrolment records, academic progress and fee payment history
- Communication — to respond to your enquiries, provide programme updates, exam schedules and important notices
- Degree and certification — to prepare, issue and dispatch your marksheet, degree certificate and related documents
- Payment processing — to process fee payments, generate invoices and maintain financial records
- Placement support — to share your profile with potential employers if you have opted for placement assistance
- Legal compliance — to fulfil our obligations under applicable Indian laws including the Companies Act, Income Tax Act and IT Act
- Website improvement — to analyse usage patterns and improve the functionality and content of our website
- Marketing — to send you information about new programmes, events and offers (you can opt out at any time)
Legal basis: We process your personal data on the basis of your consent (when you submit an enquiry or apply), contractual necessity (when you enrol as a student), and our legitimate interests (when we maintain records and communicate about your programme).
04
How We Share Your Information
We do not sell, rent or trade your personal information to any third party. We share your information only in the following limited circumstances:
- Accreditation bodies — ITC USA, ICDE Norway, ISO certification body and UN PRME, where required for institutional reporting
- Courier and logistics partners — for dispatching hard-copy certificates and marksheets to your registered address
- Payment processors — Razorpay and ICICI Bank for processing fee transactions (subject to their own privacy policies)
- Placement partners — only if you have opted for placement assistance; your profile will only be shared with your prior knowledge
- Government and regulatory authorities — where legally required under Indian law, court order or regulatory directive
- Technology service providers — cloud hosting, email delivery and analytics services operating under strict data processing agreements
All third parties with whom we share data are contractually required to handle it securely and only for the specified purpose.
05
Data Storage & Security
Your data is stored on secure servers located in India. We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. These measures include:
- SSL/TLS encryption for all data transmitted through our website
- Password-protected access controls with role-based permissions for staff
- Regular security reviews of our systems and processes
- Secure physical storage for any paper-based records
Retention period: We retain student records, academic documents and financial records for a minimum of 7 years after the end of the enrolment period, or longer if required by law. Enquiry data from non-enrolled individuals is retained for up to 2 years.
Important: While we take every reasonable precaution, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your information transmitted to or stored on our systems.
06
Cookies & Tracking Technologies
Our website uses cookies and similar technologies to improve your browsing experience and understand how our site is used. The types of cookies we use include:
- Essential cookies — required for the website to function correctly; cannot be disabled
- Analytics cookies — used to understand how visitors interact with our website (e.g. Google Analytics)
- Marketing cookies — used to show relevant advertisements and measure their effectiveness
- Preference cookies — used to remember your settings and preferences
You can control cookie settings through your browser preferences. Disabling certain cookies may affect the functionality of some parts of our website. Most browsers allow you to refuse cookies and to delete existing cookies at any time.
07
Your Rights
Subject to applicable Indian data protection laws, you have the following rights regarding your personal information:
- Right to access — request a copy of the personal information we hold about you
- Right to correction — request that we correct any inaccurate or incomplete information
- Right to deletion — request deletion of your personal data, subject to our legal and contractual obligations
- Right to withdraw consent — withdraw consent for marketing communications at any time
- Right to data portability — request your data in a structured, machine-readable format where technically feasible
- Right to object — object to the processing of your personal data for direct marketing purposes
To exercise any of these rights, please write to us at info@gibms.co.in with the subject line "Data Privacy Request". We will respond within 30 working days. Please note that certain rights may be limited where we are legally required to retain your data.
Opt out of marketing communications: You can unsubscribe from our marketing emails at any time by clicking the unsubscribe link in any email we send, or by writing to info@gibms.co.in. Note that we will continue to send transactional communications related to your active enrolment.
08
Children's Privacy
Our programmes are designed for individuals who are at minimum 10th Standard pass. We do not knowingly collect personal information from children under the age of 13 without verified parental consent.
If you are under 18, you confirm that you have obtained consent from a parent or legal guardian before submitting any personal information to us. If we become aware that we have collected personal information from a child under 13 without appropriate consent, we will take steps to delete that information promptly.
09
Third-Party Links
Our website may contain links to external websites — including accreditation bodies, payment processors, government portals and social media platforms. These external sites are not operated or controlled by GIBMS and have their own privacy policies.
We are not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policy of every external website you visit. The inclusion of any link does not imply our endorsement of that website or its content.
10
Payment Information
All fee payments are processed through secure third-party payment gateways — primarily Razorpay and ICICI Bank. We do not store your credit card, debit card or net banking credentials on our servers.
- Payment transactions are encrypted using industry-standard SSL/TLS protocols
- We store only the transaction reference number and amount for our financial records
- UPI payments are processed directly through your bank — we do not have access to your UPI PIN or bank account credentials
- Razorpay's processing of your payment data is governed by Razorpay's Privacy Policy
Fee refund policy: All fees paid to GIBMS are non-refundable under any circumstances, as stated in our Terms & Conditions and the admission agreement. This policy applies regardless of the payment method used.
11
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law or the services we provide. When we make material changes, we will update the "Last Updated" date at the top of this page.
We encourage you to review this Privacy Policy periodically. Your continued use of our website or services following the posting of changes constitutes your acceptance of the updated policy. If you object to any changes, you should stop using our services and may request deletion of your personal data as described in Section 7.
12
Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy or the handling of your personal data, please contact us through any of the following channels. We aim to respond to all privacy-related queries within 30 working days.