RTNex Privacy Notice
This notice is being finalised with our privacy adviser. If it changes in a way that affects you, we will show you the new version before it applies.
Who we are
RTNex is responsible for the personal data described here. For privacy questions or to use any of your rights, email [email protected].
What we collect when you create an account
| Information | Type | Required |
|---|---|---|
| First name | Identity | Yes |
| Last name | Identity | Yes |
| Username | Account identifier | Yes |
| Contact details | Yes | |
| Password | Credential: accepted only to create your sign-in, sent only to our identity service, which stores it in protected form; never logged or kept anywhere else | Yes |
| Age confirmation (18 or older) | Eligibility attestation (yes/no only, no birth date) | Yes |
We do not ask for your date of birth. If you leave out required information we cannot create your account.
Why we use it and our legal basis
| Purpose | EU/EEA (GDPR) | India (DPDP Act) |
|---|---|---|
| Create, secure and run your learning account, and send account and verification emails | Contract: necessary to provide the account you ask for (GDPR Art. 6(1)(b)) | Consent for this specified purpose, given by submitting the form after this notice (DPDP Act ss. 5-6) |
| Confirm you meet the minimum age for public sign-up | Legitimate interests in keeping public sign-up adults-only (GDPR Art. 6(1)(f)) | Legitimate use: verifying eligibility before processing (DPDP Act s. 7) |
| Keep a record of which privacy notice applied when you signed up, and of any choices you made | Legal obligation and legitimate interests in demonstrating compliance (GDPR Art. 6(1)(c) and (f)) | Legitimate use: compliance with law (DPDP Act s. 7) |
| Check that sign-ups come from people, not automated scripts | Legitimate interests in protecting sign-up (GDPR Art. 6(1)(f)) | Legitimate use (DPDP Act s. 7) |
Who receives it
- Keycloak identity service (RTNex-operated)
- RTNex learning platform database (RTNex-operated)
- RTNex mail service (verification and account emails)
- Cloudflare (network transit to RTNex servers)
- Apache Unomi customer-data platform (RTNex-operated)
- Cloudflare Turnstile (bot check)
Your account is handled by RTNex-operated services. Our network provider, Cloudflare, carries traffic to them, our mail service sends your verification email, and Cloudflare Turnstile checks that the sign-up comes from a person.
Server locations and any cross-border transfer safeguards are being confirmed by the privacy owner and will be listed here.
How long we keep it
- Create, secure and run your learning account, and send account and verification emails: While your account is active; afterwards deleted or anonymised under the approved retention schedule.
- Confirm you meet the minimum age for public sign-up: Kept with the privacy evidence record for the approved evidence-retention period.
- Keep a record of which privacy notice applied when you signed up, and of any choices you made: For the approved evidence-retention period; the record holds notice versions and choices only, never your password or form answers.
- Check that sign-ups come from people, not automated scripts: Not kept by RTNex; the check result is discarded once verified.
Your privacy choices
Account sign-up asks for no optional permissions: we do not use your sign-up details for newsletters, advertising or profiling.
The sign-up page uses no analytics, advertising or tracking cookies, pixels or similar technologies.
Your rights
Depending on where you live, you can ask us to:
- give you access to, or a copy of, your personal data and how we use it;
- correct, complete or update it;
- delete it, or restrict or object to some uses of it;
- withdraw any consent you gave, without affecting what was done before you withdrew it;
- in India, nominate someone to exercise your rights if you die or become unable to; and
- in US states with privacy laws, opt out of the sale or sharing of personal data, targeted advertising and certain profiling, and appeal our decision on your request.
Email [email protected] to make a request. We will check your identity in a way that fits the request and reply within the time the applicable law allows. Using your rights will never cost you access to the service, and we will never ask you to give them up.
Complaints and grievances
Please contact our grievance contact first at [email protected]. In the EU/EEA you can also complain to your local data protection authority. In India, if we have not resolved your grievance, you may complain to the Data Protection Board of India.
Children
Public sign-up is for people aged 18 or older. Learners under 18 join through their school's admissions and invitation process instead.
Changes to this notice
Each version of this notice has its own number (this is 2026-10-31.1), and we record which version applied when you signed up. We will tell you about material changes before they apply to you.