Privacy, in plain language.

1. Scope and who we are

This Privacy Policy applies to the website, customer workspace, learning-management features, online classes and recordings, assessments, digital and print publications, events, support channels and professional tools that link to this policy (together, the “Services”).

This policy does not apply to a third-party website or service merely because we link to it. Its own privacy terms will apply.

2. Personal data we collect

The data we collect depends on how you use the Services. It may include:

• Identity and account data: profile information, preferences, permissions and account-support history.
• Account data: sign-in details, profile information, preferences, permissions and account-support history.
• Order and billing data: products purchased, invoice and GST details, discounts, payment status, transaction reference and refund history. Payment-card, UPI or banking credentials are generally collected by the payment provider, not through website-hosted payment fields.
• Learning and assessment data: enrolments, attendance, lesson progress, downloads, submissions, examination attempts, answers, scores, feedback and access-expiry information.
• Class and event data: registration, attendance, chat or questions and, when announced, audio, video or screen content captured in a recorded online session.
• Content you provide: enquiries, reviews, survey responses, uploaded documents, notes or information entered into a professional tool. Please provide third-party personal data only when you are authorised to do so.
• Device and usage data: IP address, browser and device type, operating system, referring page, pages viewed, approximate location derived from IP, timestamps, diagnostic events and cookie or similar identifiers.
• Communication and marketing data: support correspondence, communication preferences and engagement with service or marketing messages.

We do not ask you to provide sensitive personal data unless it is genuinely needed for a stated feature. Avoid placing confidential, financial, health, biometric or identity-document data in free-text fields or uploads unless the feature expressly requires it.

3. Where the data comes from

We collect data directly from you; automatically when you use the Services; from an organisation that purchases or assigns access for you; and from service providers such as payment, delivery, event, authentication or learning-platform providers. We may also receive information from public or professional sources when it is lawful and relevant to an enquiry or business relationship.

4. How and why we use personal data

We use personal data only for a lawful purpose, including to:

• create and secure accounts, verify users and manage permissions;
• process orders, payments, invoices, refunds and delivery;
• provide courses, recordings, assessments, publications, events, support and professional tools;
• track entitlements, progress, attempts and access periods;
• send essential service, security, schedule, order and account communications;
• answer enquiries and resolve complaints;
• prevent fraud, misuse, unauthorised sharing and security incidents;
• maintain, troubleshoot, analyse and improve the Services;
• meet tax, accounting, consumer-protection, regulatory and other legal obligations; and
• send news or offers where you have consented or where otherwise permitted, with an opt-out in each marketing email.

Depending on the activity and applicable law, we rely on your consent, steps taken at your request, performance of our agreement with you, compliance with law, and other uses permitted by law. Withdrawing consent does not affect processing already carried out lawfully and may not affect data we must retain or use on another lawful basis.

5. Cookies and similar technologies

We may use session and persistent cookies, pixels, local storage and similar technologies for sign-in, security, shopping-cart functions, preferences, audience measurement and communication performance. Some are necessary for the Services to work; optional analytics or marketing technologies should operate according to the choices presented to you.

You can use our cookie controls, when shown, or your browser settings to block or remove cookies. Blocking necessary cookies may prevent account, cart or learning features from working correctly. Email messages may use limited tracking, such as whether a message was delivered or opened; you can opt out of marketing at any time.

6. When we share data

We do not sell or rent personal data. We may share only what is reasonably necessary with:

• service providers supporting hosting, security, analytics, communications, customer support, learning delivery, online events, payment processing, accounting, printing and shipping;
• faculty, assessors and authorised staff who need the data to deliver or administer a programme;
• your sponsoring organisation, where it purchases or manages your access and the relevant reporting has been explained to you;
• professional advisers, regulators, courts or law-enforcement bodies where disclosure is required or permitted by law, or needed to establish, exercise or defend legal claims;
• a successor or transaction counterparty in a merger, reorganisation or transfer of the relevant business, subject to appropriate confidentiality and notice where required; and
• another recipient you direct or consent to.

Providers are expected to handle data only for the agreed service and with appropriate safeguards. Their own privacy terms may also apply when you interact with them directly, including at a hosted payment or webinar page.

7. Processing outside India

Some technology providers may process or store data outside India. Where personal data is transferred across borders, we use providers and arrangements intended to protect it and comply with applicable restrictions issued by the Government of India.

8. How long we keep data

We keep personal data only for as long as needed for the purpose described here, including the period needed to provide access, resolve support or payment issues, enforce agreements and meet legal obligations. Retention depends on the record:

• account and entitlement records are generally kept while the account or access relationship remains active and for a reasonable period afterwards;
• orders, invoices and tax records are kept for the period required by applicable accounting and tax law;
• learning progress and assessment records are kept for the applicable programme, review and support period, unless a longer period has been disclosed;
• marketing preferences are kept until you opt out, plus a minimal suppression record so we can respect that choice;
• class recordings are kept for the announced access or operational period; and
• security logs and backups are deleted or overwritten on a controlled cycle, subject to incident, legal-hold or recovery needs.

When retention is no longer necessary, we delete, anonymise or securely isolate the data, as appropriate.

9. Security

We use reasonable technical and organisational safeguards designed for the nature of the data and risks involved. These may include access controls, least-privilege permissions, secure transmission, backups, logging, vendor review and incident-response procedures. No online service can promise absolute security. Keep your credentials confidential and contact us promptly if you suspect unauthorised account activity.

10. Your choices and rights

Subject to applicable law, you may ask us to:

• provide information about the personal data we process and the parties with whom it has been shared;
• correct, complete or update inaccurate data;
• erase data that is no longer needed or lawfully retained;
• withdraw consent or change communication preferences;
• raise a grievance about the handling of your data; and
• record a nominee to exercise rights where the law provides for nomination.

You may update certain information through your account or use the unsubscribe option in marketing communications. We may need to verify your identity and may retain information where required by law, needed for security, or necessary to establish or defend legal claims.

India’s Digital Personal Data Protection Act, 2023 and Digital Personal Data Protection Rules, 2025 have a phased commencement. We will apply statutory rights and procedures as the relevant provisions become effective, while continuing to honour the choices described above.

11. Children

The Services are designed for adults and professional learners and are not directed to anyone under 18. We do not knowingly process a child’s personal data without the verifiable consent or other authorisation required by applicable law. A parent or lawful guardian who believes a child has provided data to us should contact us so we can review and take appropriate action.

12. Testimonials, community and public content

If you submit a testimonial, article, review or other material for publication, we will explain the intended public use and seek any consent required. Information you choose to publish can be copied or shared by others. Contact us if you want us to review a published item, although removal from third-party copies or search caches may not be within our control.

13. Changes to this policy

We may update this policy to reflect changes in the Services, providers or law. We will post the revised version here and change the “Last updated” date. If a change materially affects how we use data already collected, we will provide additional notice or seek consent where required.