Privacy Policy
"Learning Dots", "we", "us" or "our" refers to [Registered company name], No 19/20, 4th Cross, Sugama Layout, Bangalore, GSTIN [GSTIN]. Email: [privacy@yourdomain.com] · Phone: +91-9944226010 · WhatsApp.
1. Scope
This policy explains how we process personal data when you visit our website, submit a form, attend our online or classroom training, use our learning platform (LMS) or labs, or pay for a programme. It is drafted with reference to the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000 and rules under it. Where we deliver training under a contract with your employer, your employer may also act as a Data Fiduciary for that data.
2. Personal data we collect
- Website forms (enquiry, callback, contact, course and batch enquiry, webinar registration, trainer application, careers, newsletter, report and curriculum downloads): name, work email, phone, company, role, location, the course or session you are interested in, your message and any CV you upload. Forms are processed by our hosting provider, Netlify.
- Learning platform and labs: account details, enrolment and batch, attendance, assignment and assessment results, progress, certificates issued, and technical logs (IP address, device and browser, timestamps) needed for security.
- Payments: billing name, billing address, GSTIN (for invoices) and transaction references. Card, UPI and bank details are collected and processed by our payment gateway, Razorpay; we do not store full card numbers.
- Classroom sessions: attendance records and, where you agree, photographs or recordings of sessions.
- Communications: emails, chat and call notes when you contact us.
3. Why we use it (purposes)
- To respond to enquiries and provide quotes and proposals.
- To enrol you, deliver training, run labs, assess progress and issue certificates.
- To invoice, collect payments, process refunds and meet tax and accounting obligations.
- To send service messages about your batch (schedule changes, joining links, reminders).
- To send newsletters and webinar invitations, only where you have opted in; you can unsubscribe at any time.
- To keep our systems secure, prevent misuse and comply with law.
We process personal data on the basis of your consent, given when you submit a form or enrol, or for legitimate uses permitted under Section 7 of the DPDP Act (for example, where you voluntarily provide data for a specified purpose, or to comply with law). You may withdraw consent at any time; this will not affect processing already carried out.
4. Sharing
We do not sell personal data. We share it only with service providers who process it on our behalf under contract (Data Processors), such as website hosting and forms (Netlify), our CRM and database providers, our learning platform and lab infrastructure providers, email providers, and Razorpay for payments; with trainers assigned to your batch, limited to what they need; with your employer where your training is sponsored by them (attendance, progress and completion); and with authorities where required by law. Some providers may store data outside India; we transfer data only where permitted under the DPDP Act and any restrictions notified by the Government of India.
5. Retention
- Enquiries that do not become enrolments: up to 24 months from the last contact, then deleted or anonymised.
- Learner records (enrolment, attendance, results, certificates): for the duration of the programme plus 3 years, so that we can verify certificates.
- Invoices and payment records: 8 years, as required by tax and accounting laws.
- Job and trainer applications: up to 12 months, unless you ask us to delete them sooner.
- Security logs: up to 180 days.
We erase personal data when the purpose is served and retention is no longer required by law, or when you withdraw consent, unless the law requires us to keep it.
6. Your rights
Under the DPDP Act you may: obtain a summary of the personal data we process about you and how we process it; ask us to correct, complete, update or erase it; withdraw consent; nominate another person to exercise your rights in the event of death or incapacity; and raise a grievance with us. To exercise these rights, write to [privacy@yourdomain.com]. We will respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
7. Children
Our programmes are meant for adults and working professionals. We do not knowingly collect data of anyone under 18 without verifiable consent of a parent or lawful guardian.
8. Cookies
Our website uses only the cookies and local storage needed for it to work and for form spam protection. If we add analytics or advertising cookies, we will update this policy and ask for your consent where required. You can block or delete cookies in your browser settings.
9. Security
We use reasonable security practices consistent with the IT Act 2000 and the SPDI Rules 2011, including encrypted connections (HTTPS), access controls and limiting data to people who need it. If a personal data breach occurs, we will notify the Data Protection Board and affected persons as required by law.
10. Grievance Officer
Name: [Grievance Officer name]
Email: [grievance@yourdomain.com]
Phone: +91-9944226010 · WhatsApp
Address: No 19/20, 4th Cross, Sugama Layout, Bangalore
We acknowledge grievances within 48 hours and aim to resolve them within 30 days. See our Grievance Redressal page.
11. Changes
We may update this policy. The date at the top shows the latest version; material changes will be highlighted on this page.