Effective date: 7 September 2026  |  Last updated: 7 September 2026

This Privacy Policy explains how Oe collects, uses, shares, stores, and protects personal data when people visit, register for, donate through, or use Oe at https://ontheinternet.in/oe. Oe is a project of Onnet and is owned and operated by Bikash Saha as an individual (“Oe”, “we”, “us” or “our”).

1. Who is responsible for personal data

For personal data processed through Oe, Bikash Saha is the Data Fiduciary/data controller responsible for deciding why and how the data is processed.

Address: Gauripur Ward No. 1/2, P.O. and P.S. Gauripur, District Dhubri, Assam 783331, India

Privacy and grievance email: oe@ontheinternet.in

2. Who may use Oe

Oe is available to users worldwide but is restricted to people aged 18 or older. Oe is not intended for children, and we do not knowingly permit a person under 18 to create or use an account.

If we learn that a person under 18 has provided personal data, we may suspend or delete the account and erase the associated data, subject to any limited information that must be retained for security, fraud prevention, dispute resolution, or legal compliance. A parent or guardian who believes a person under 18 has provided data should contact oe@ontheinternet.in.

3. Personal data we collect

3.1 Information you provide

• name, email address, country, date of birth, and selected user type;
• password credentials stored in protected/hashed form by the website system, or information received through Google Sign-In;
• profile photograph and account preferences;
• optional donation amount, transaction or UTR/reference number, donation status, and any payment evidence you choose to submit; and
• messages, support requests, privacy requests, and grievance correspondence.

3.2 Learning and account information

• eCourse enrolments, learning status, progress, completion, downloads, and activity;
• assessment answers, scores, results, and final-project information submitted through Oe;
• certificates issued; and
• account settings and communication choices.

3.3 Technical information

Oe, its hosting provider, WordPress, plugins, security tools, and similar services may automatically process technical information such as IP address, browser or device information, timestamps, login records, error logs, security events, and essential cookie identifiers. If Oe introduces non-essential analytics, advertising, or marketing technologies, we will provide any notice and consent choices required by applicable law.

4. How we use personal data

• create, authenticate, secure, and administer Oe accounts;
• provide eCourse access, downloads, assessments, progress tracking, and certificates;
• process, verify, record, acknowledge, and account for optional donations;
• send verification, password-reset, learning, certificate, security, service, and policy messages;
• send marketing emails or newsletters where permitted and honour opt-out requests;
• respond to support requests, grievances, access requests, corrections, downloads, and deletion requests;
• protect Oe, prevent fraud, investigate misuse, and enforce the Terms;
• maintain backups, troubleshoot errors, understand service performance, and improve Oe; and
• comply with legal obligations and lawful requests.

5. Legal grounds for processing

Depending on the country and context, we process personal data with consent; to provide the service requested when a user creates and operates an account; for legitimate interests such as security, support, fraud prevention, service administration, and improvement; and to comply with legal obligations. We use only a legal ground available under the law that applies to the processing.

Where processing depends on consent, users may withdraw that consent. Withdrawal does not affect processing lawfully carried out beforehand. If data is necessary for an Oe account or feature, withdrawing consent or requesting deletion may mean that the account or feature can no longer be provided.

6. How we share personal data

We do not sell personal data. We may share data or allow limited processing only as reasonably necessary with:

• Google, when a user chooses Google Sign-In;
• WordPress, website plugins, and technical service components;
• Namecheap or another hosting or infrastructure provider;
• WP Mail SMTP and the configured email-delivery provider;
• banks, UPI applications, and payment-system participants involved in an optional donation;
• analytics providers if introduced with appropriate notice and consent where required;
• cloud backup, security, and spam-prevention providers;
• professional advisers or contractors subject to suitable confidentiality obligations; and
• government authorities, courts, regulators, or law-enforcement bodies where disclosure is legally required.

Provider names and technical arrangements may change. Material changes will be reflected in this Policy where appropriate.

7. International data transfers

Because Oe is available worldwide and uses online service providers, personal data may be processed in India or in other countries where Oe’s providers operate. Those countries may have different data-protection laws. Where applicable law requires safeguards for an international transfer, we will use a legally recognised transfer mechanism or other appropriate safeguards.

8. Cookies and similar technologies

Oe may use essential cookies or similar technologies for login, account security, session management, preferences, and core WordPress functionality. Blocking essential cookies may prevent account or learning features from working. Before using optional analytics, advertising, or marketing cookies, Oe will provide any additional notice and consent controls required by applicable law.

9. Data retention

We generally retain account and learning information while an account remains active and for only as long afterward as reasonably necessary for the purposes described in this Policy. Users may delete their account using the available feature or submit a request to us.

We may retain limited donation, tax, accounting, consent, security, fraud-prevention, dispute, and legal-claim records for the period required or permitted by applicable law. Some information may remain temporarily in secure backups until overwritten under normal backup cycles. When data is no longer needed and no valid reason requires retention, we will delete or anonymise it using reasonable procedures.

10. Security

We use reasonable administrative, technical, and organisational safeguards appropriate to Oe, including access controls, authentication measures, trusted service providers, updates, backups, and security or spam-prevention tools. Passwords are intended to be stored through the website’s secure hashing system rather than as readable text. No online system can guarantee absolute security, so users should use a strong, unique password and promptly report suspicious activity.

If a personal-data breach occurs, Oe will take reasonable steps to contain and assess it and will provide notifications required by applicable law.

11. Your privacy rights

Depending on the law applicable to the user and the processing, users may have rights to:

• access information about their personal data and obtain a copy;
• correct or update inaccurate or incomplete personal data;
• download available personal and Oe account data;
• request deletion of their account and personal data;
• withdraw consent for optional processing, including marketing;
• object to or request restriction of certain processing;
• request portability of eligible personal data;
• ask how personal data has been used or shared;
• raise a privacy grievance or complain to a competent data-protection authority; and
• exercise any additional right provided by applicable law.

Some rights are subject to legal conditions and exceptions. Account deletion may permanently remove learning progress, assessment history, certificates, and other Oe data. Certain records cannot always be deleted immediately where retention is legally required or reasonably necessary for security, fraud prevention, donation accounting, dispute resolution, or legal claims.

Users may use the available Account & Personal Data controls or contact oe@ontheinternet.in from their registered email address. We may request information reasonably necessary to verify identity. We will respond within the period required by applicable law.

12. Marketing communications

Where Oe sends marketing emails or newsletters, it will do so according to the user’s communication choice and applicable law. Users may opt out using an unsubscribe option, an available account setting, or by emailing oe@ontheinternet.in. Users may still receive essential account, security, learning-service, donation, and policy communications.

13. Third-party links

eCourses may contain links to third-party websites, platforms, or tools. Their privacy practices are controlled by those third parties, not Oe. Users should review the privacy information of any external service they choose to use.

14. Changes to this Privacy Policy

We may update this Policy to reflect changes in Oe, law, providers, cookies, or data practices. The updated version will display a revised date. We will give reasonable notice of material changes through Oe, email, or both, and obtain fresh consent where applicable law requires it.

15. Privacy grievances and contact

For privacy questions, rights requests, account deletion, or grievances, contact:

Bikash Saha — Oe, A Project of Onnet
Gauripur Ward No. 1/2, P.O. and P.S. Gauripur
District Dhubri, Assam 783331, India
Email: oe@ontheinternet.in
Website: https://ontheinternet.in/oe

Please describe the request or concern clearly and include the registered email address. We will review it and respond within a reasonable period and within any timeframe required by applicable law. If a concern is not resolved, the user may pursue available remedies or contact the competent data-protection or regulatory authority.