Last updated 29 June 2026
Overview
This Privacy Policy explains how the World Tech Olympiad (“WTO”, “we”, “us”) collects, uses, shares, and protects personal data when you visit our website, register a child, or take part in the olympiad. The WTO is operated by Tosh Labs Private Limited in partnership with the Global Tech Council.
Because most of our participants are children, protecting their data is central to how we operate. Where this policy refers to a “parent”, we mean the parent or legal guardian who registers and consents on a child's behalf.
Information we collect
We collect only what we need to run the olympiad and improve it:
- Account data: a parent's or school coordinator's name, email, and password (stored hashed).
- Participant data: a child's first name, class/grade, chosen track, and the responses and results they submit during practice and editions.
- Payment data: processed by our payment providers; we receive a confirmation and the last digits of the instrument, never full card numbers.
- Technical data: device, browser, approximate region, and usage analytics, collected via cookies and similar technologies.
Children's data and parental consent
A child account is always created and managed by a verified parent or a participating school acting under its own consent obligations. We do not knowingly collect personal data directly from a child without that authorisation.
We minimise children's data, never use it for behavioural advertising, and never sell it. Our handling aligns with India's Digital Personal Data Protection Act (DPDP), the GDPR provisions for children (GDPR-K), and the US Children's Online Privacy Protection Act (COPPA).
Where a parent, guardian, or school registers a child, they represent and warrant that they have the authority and have obtained any consents required to do so. We act in good-faith reliance on those representations, and the Account Holder is responsible for obtaining and maintaining verifiable parental consent for each child they enrol. If you believe a child has provided us personal data without proper authorisation, contact us and we will delete it.
How we use data
- To register participants, run editions, and issue results, ratings, and certificates.
- To provide the skill rating, rankings, and verifiable credentials.
- To keep accounts secure and prevent fraud or cheating.
- To communicate essential service messages to parents and schools.
- To understand and improve the product through aggregated, privacy-safe analytics.
Legal bases
Depending on your region, we rely on parental consent, the performance of our contract with you, our legitimate interests in operating and securing the service, and compliance with legal obligations. You may withdraw consent at any time, as described under Your rights.
Data retention
We keep personal data only as long as needed for the purposes above. Credential and rating records that must remain verifiable are retained on a longer, documented schedule; other data is deleted or anonymised when no longer required.
Security
We protect data with encryption in transit, access controls, least-privilege practices, and regular review. No system is perfectly secure, but we work continuously to reduce risk and we notify you of material incidents as required by law.
International transfers
We operate globally, so data may be processed in countries other than yours. Where we transfer data across borders, we use appropriate safeguards such as standard contractual clauses and equivalent protections.
Your rights
Subject to local law, you can request access, correction, deletion, a copy of your data, or restriction of processing, and you can withdraw consent. Parents may exercise these rights on behalf of their child. To make a request, contact us at the address below; we respond within the timeframes required by applicable law.
Ratings and automated processing
We use automated methods to calculate skill ratings and rankings from assessment responses, using a published method. These results are estimates of demonstrated performance and are not used to make legal or similarly significant decisions about a child. Results affected by error, technical fault, or a breach of the fair-play rules may be corrected, and they can be contested through the appeals process described in our Terms of Use.
Grievance and contact
If you have a question, request, or complaint about how we handle personal data, contact our privacy team at the address below, and, where required by law, our designated grievance or data-protection contact. We will acknowledge and respond within the timeframes required by applicable law. If you are not satisfied, you may have the right to complain to your local data-protection authority.
Changes to this policy
We may update this policy as the service evolves or the law changes. We will revise the date above and, for material changes, give clear notice to parents and schools.
Questions about this policy?
Reach our team and we will get back to you.