Privacy & Data Protection

Last updated 14 June 2026

Who we are

INSEAD Alumni Association India (“the NAA”, “we”) is the national alumni association of INSEAD in India — a Section 8 (not-for-profit) company (CIN U74130MH1996NPL100618), with its registered office at B2, 402B, Marathon Innovo, 4th Floor, Off. Ganpatrao Kadam Marg, Lower Parel, Mumbai, Maharashtra 400013, India. We are the data fiduciary (controller) responsible for the personal data described here.

What we collect and why

We only collect data tied to something you choose to do:

• Membership — your name, email and payment confirmation when you join. Payment itself is handled by our payment processor; we never see your card details. We keep a minimal membership roster to manage your membership.
• Events — your name and email if you RSVP, used only to manage that event.
• Mailing list — your email, only if you opt in, to send chapter and alumni news. Every email has an unsubscribe link.
• Contact & the assistant — anything you send us, or type into the “Ask the NAA” assistant, to answer you. Please don’t enter sensitive personal details into the assistant.
• Committee admin — sign-in details for committee members who manage the site.

We do not sell your data, and we do not use it for advertising or profiling.

Consent and your choices

Where we rely on your consent — the mailing list, optional cookies, and similar — it is always a clear opt-in, and you can withdraw it as easily as you gave it (unsubscribe links, the cookie controls below, or by emailing us). Withdrawing consent doesn’t affect anything we already did lawfully before you withdrew it.

Who we share data with

We share data only with service providers who help us run the NAA, under contract and only for that purpose:

• Razorpay — to process membership payments securely.
• Resend — to send transactional and newsletter email.
• Anthropic — to generate answers in the “Ask the NAA” assistant. Your questions are processed to produce a reply and are not used to train their models.
• Our hosting and database providers — to run the website and store content.

For INSEAD’s own platforms (MyINSEAD, iLink) we link out to INSEAD — those services are governed by INSEAD’s own privacy notice.

Where your data is stored

Our database is hosted in an India region (Mumbai). Some service providers above may process limited data outside India under appropriate safeguards; we keep such transfers to the minimum needed to provide the service.

How long we keep it

We keep personal data only as long as needed for the purpose it was collected, or as required by law — membership records for the life of your membership and applicable statutory periods; mailing-list data until you unsubscribe; event RSVPs until shortly after the event.

Your rights

Under the DPDP Act you can:

• access a summary of the personal data we hold about you;
• have it corrected, completed or updated;
• have it erased when it’s no longer needed;
• withdraw consent at any time; and
• raise a grievance with us (see below).

If you are in the EU/EEA, you also have GDPR rights to restriction, data portability, objection, and to lodge a complaint with your supervisory authority.

Contact & grievances

For any privacy question, to exercise a right, or to raise a grievance, contact our data protection point of contact at hello@inseadindia.org. We aim to respond within a reasonable time and, in any case, within the periods required by law.