Mahbub College Historic Campus

Data Security

Mahbub College Students Association

Last Updated: July 2026

1. Protection of Personal Information

We implement appropriate administrative, technical, and organizational safeguards to protect personal information from unauthorized access, disclosure, alteration, misuse, loss, or destruction.

2. Secure Storage

Member information is stored on secure systems with appropriate access controls. Access to personal data is restricted to authorized office bearers, administrators, or service providers who require such access for legitimate Association purposes.

3. Access Control

Only authorized personnel are permitted to access member records. Access rights are granted based on responsibilities and are reviewed periodically.

4. Data Transmission

Where applicable, information transmitted through our website is protected using industry-standard encryption technologies, such as Secure Socket Layer (SSL) or Transport Layer Security (TLS), to help safeguard data during transmission.

5. Password Security

Members are responsible for maintaining the confidentiality of their account credentials. Passwords should not be shared with others, and users should promptly notify the Association if they suspect unauthorized access to their account.

6. Third-Party Service Providers

Where the Association uses trusted third-party providers for website hosting, cloud storage, payment processing, email communication, or other operational services, such providers are expected to maintain appropriate security measures and process personal information only for authorized purposes.

7. Data Retention

Personal information will be retained only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, maintain historical alumni records, or resolve disputes. Information that is no longer required will be securely deleted or anonymized where appropriate.

8. Security Monitoring

We may periodically review and update our security practices, systems, and procedures to address evolving security risks and improve the protection of member information.

9. Data Breach Response

In the event of a suspected or confirmed data breach, the Association will take reasonable steps to investigate the incident, mitigate its impact, and, where required by applicable law, notify affected individuals and relevant authorities.

10. User Responsibilities

Members are encouraged to:

  • Keep their contact information up to date.
  • Use strong and unique passwords.
  • Avoid sharing login credentials.
  • Report any suspected unauthorized access or security concerns immediately.

11. Limitation of Security

While the Association adopts reasonable security measures to protect personal information, no method of electronic transmission or internet storage is completely secure. Accordingly, the Association cannot guarantee absolute security of information transmitted or stored electronically.

12. Compliance

The Association endeavors to handle personal information in accordance with applicable laws and regulations, including the Digital Personal Data Protection Act, 2023 (India), and will continuously strive to improve its data protection practices.