MINP
MRSPTU INTEGRATED NCC PORTAL
EFFECTIVE DATE: June 25, 2026
This Privacy Policy and Data Handling Agreement (the "Policy", "Privacy Agreement", or "Data Framework") establishes the legal framework governing the collection, processing, retention, and digital protection of personal and operational data within the National Cadet Corps Cadet Management System for Maharaja Ranjit Singh Punjab Technical Univeristy (MRSPTU) and its constituent college Giani Zail Singh Campus College of Engineering & Technology (GZSCCET) only (hereinafter referred to as "the System", "we", "our", or "us"). This Policy applies to all natural persons, legal entities, automated systems, and individuals ("Users", "Data Subjects", or "you") who access, interact with, authenticate into, or are registered within the System. By accessing any endpoint of the System, you grant informed and voluntary consent to the data processing methodologies described herein. MILITARY AFFILIATION & SOVEREIGN DISCLAIMER: The Platform operates as a privately-developed, localized administrative tool. It is NOT an official organ, branch, or sovereign department of the Ministry of Defence, Government of India, or the national NCC Directorate. The User acknowledges that the System is an independent institutional utility, and not a classified or federally-sanctioned national military database.
In order to facilitate the operational, administrative, and logistical requirements of the National Cadet Corps, the System collects, parses, stores, and processes the following categories of data parameters:
The processing, aggregation, and synthesis of the aforementioned data is legally predicated upon the necessity to fulfill our contractual, regulatory, and operational obligations in managing the NCC units within Maharaja Ranjit Singh Punjab Technical Univeristy (MRSPTU) and its constituent college Giani Zail Singh Campus College of Engineering & Technology (GZSCCET) only. Under the Digital Personal Data Protection Act, you (the Cadet) are legally recognized as the "Data Principal," while SharkGrid acts as a "Data Processor" executing the operational directives of the institutional authorities. You assume responsibility for data accuracy regarding your own submissions. Personal data shall be utilized for the purpose of operating the System. The authorized purposes are defined as:
SharkGrid adheres to the doctrine of data minimization. The System is designed to request, process, and retain only the specific data fields that are necessary to achieve the operational purposes outlined in Section 3. No supplementary, extraneous, or non-operational personal data is collected or processed at any time. MEDICAL DATA DISCLAIMER: Any medical certificates or health-related documents submitted by the Cadet to a Senior Cadet, whether in physical hard copy or digital soft copy, for the purpose of attendance exemptions or operational leaves, are processed strictly for administrative validation. The Platform does not act as a healthcare provider, and these documents are NOT classified as Electronic Health Records (EHR). SharkGrid, MRSPTU, and GZSCCET assume no liability or legal responsibility for the security, processing, or healthcare data compliance regarding such documents.
We operate under a policy of data confidentiality. Personal data collected by the System will not be sold, leased, traded, or auctioned to unauthorized third-party commercial entities, marketing firms, or data brokers. Disclosure of personal data is limited to the following scenarios:
The System employs security architectures specifically engineered to prevent data breaches, unauthorized lateral movement, accidental loss, malicious alteration, or catastrophic destruction of personal data. All data transmitted between the User's device and our server clusters is secured utilizing mandatory Transport Layer Security (TLS 1.3 or higher) protocols. Access to the underlying database is protected by Row Level Security (RLS) policies, ensuring that Users may only access data authorized by their rank and unit tokens. Any attempt by a User or external entity to bypass these protocols will result in immediate termination of access and logging of the attempt.
Personal data shall be retained only for the duration legally and operationally required to satisfy the purposes for which it was originally collected. Upon a User's formal transition to alumni status, or upon honorable/dishonorable discharge from the unit, operational records may be archived within the System for historical tracking, auditing, and institutional memory purposes. Archival data is maintained under the same security protocols as active live data. When data reaches the end of its legally mandated retention lifecycle, it is subjected to deletion. SharkGrid holds no administrative control over institutional backups and bears no liability for any residual, archival, or undeleted personal data left residing in the database after the Cadet's discharge.
By interacting with the System, you acknowledge that your data is stored on secure servers located within the Republic of INDIA. SharkGrid commits to data localization principles, ensuring that the primary database clusters and backup architectures do not cross international borders into jurisdictions with lesser data protection standards without regulatory approval. CLOUD ROUTING CONSENT: While SharkGrid prioritizes data localization within the Republic of India, the User acknowledges and consents that encrypted operational data may be automatically and temporarily routed, processed, or backed up on authorized global cloud infrastructures (such as Supabase, AWS, or similar providers) strictly to ensure system availability, load balancing, and redundancy.
The System utilizes highly secure, HttpOnly, SameSite-restricted session cookies exclusively for the purpose of maintaining cryptographic user authentication and preventing Cross-Site Request Forgery (CSRF). The System does not employ third-party advertising cookies, cross-site tracking pixels, or invasive behavioral profiling technologies. The cookies deployed are classified as "Strictly Necessary" for the operation of the web application.
Because the System does not engage in behavioral tracking or targeted advertising, it does not alter its behavior in response to web browser "Do Not Track" (DNT) signals. Furthermore, the System does not subject Users to fully automated decision-making algorithms that produce legal or similarly significant effects without human oversight from designated Senior Cadets.
The System is designed exclusively for enrolled cadets of the National Cadet Corps within Maharaja Ranjit Singh Punjab Technical Univeristy (MRSPTU) and its constituent college Giani Zail Singh Campus College of Engineering & Technology (GZSCCET) only. The System does not knowingly collect, solicit, or process personal data from individuals under the age of 18 (as defined by the DPDPA 2023) without the verifiable written consent of a parent or legal guardian, submitted physically to the designated Senior Cadets during the physical enrollment process. AGE VERIFICATION: If a User misrepresents their age or enrollment eligibility, their account may be suspended pending verification by NCC unit authorities. SharkGrid disclaims any liability for age-fraud perpetrated by Users.
Users maintain specific rights concerning their personal data. However, because the Platform operates as a Decentralized Autonomous Framework, all requests for data export, modification, or correction must be coordinated through the Cadet's designated Senior. DATA RIGHTS: Under the DPDPA 2023, you have the right to access, correct, and request erasure of your personal data. Requests should be submitted to your designated Senior Cadet or legal@sharkgrid.com and will be processed within 30 days, subject to record-keeping requirements for active attendance and disciplinary data during your enrollment term. WITHDRAWAL OF CONSENT: If a User exercises their statutory right to withdraw consent for data processing under the DPDPA 2023, the User acknowledges that SharkGrid may be technically unable to provision the Service. Withdrawing consent may limit or disable your ability to use the System, as certain data is required for core functionality.
In the event of a verified data breach or unauthorized exposure of personal data, the Cadet acknowledges that SharkGrid operates as a passive Intermediary and Data Processor. SharkGrid will comply with all mandatory incident reporting guidelines issued by CERT-In and other federal regulatory bodies, but bears no additional contractual liability, financial obligation, or mitigative duty beyond the statutory minimums required by law. SharkGrid will notify affected Users of a data breach in accordance with applicable law and coordinate with institutional authorities where relevant.
SharkGrid reserves the right to amend, modify, expand, or rewrite this Policy at any time to reflect changes in legal requirements or underlying operational methodologies. SharkGrid retains the right to modify or amend this Agreement to reflect legal or operational changes. It is the User's responsibility to periodically review this Agreement to remain aware of any modifications. The "Effective Date" at the top of this document will always reflect the most recent update. Users will be bound by such modifications upon their continued utilization of the System following the publication of the updated Policy. Your continued use of the Platform constitutes your legal acceptance of the most currently published version of this Privacy Policy.
All operational inquiries, data subject access requests, or legal notices regarding this Policy must be directed primarily to the designated Senior of the Cadet's respective NCC Unit. Statutory electronic grievances or data requests mandated under the IT Rules 2021 and DPDPA 2023 may be directed to legal@sharkgrid.com, and we will coordinate with the appropriate institutional authorities to ensure resolution within the statutory 30-day timeframe.