1. About This Policy

This Privacy Policy applies to CipherNet Eduverse Pvt Ltd (“CipherNet”, “we”, “us”, “our”), a company registered under the Companies Act, 2013, operating the cybersecurity training platform at cybersecuritytraining.solutions. This policy governs how we collect, use, store, protect, and share personal data when you visit our website, enquire about our courses, enrol in a programme, or interact with our counselling and placement services.

This policy is compliant with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and aligns with applicable provisions of the Information Technology Act, 2000 and the IT (Amendment) Act, 2008.

By submitting any form on our website, enrolling in a course, or continuing to use our services, you provide informed, free, specific, and unambiguous consent to the data practices described in this policy. You may withdraw consent at any time by writing to us, subject to lawful obligations.

2. Data We Collect and Why

We collect only the data necessary to deliver our training and placement services:

Identity & Contact Data: Full name, email address, mobile number (+91), and city. Collected when you submit enquiry forms, download course brochures, register for a free demo, or enrol in a programme. Purpose: to respond to your enquiry, process enrolment, send programme updates, and provide placement support.

Educational & Professional Background: Current qualification, work experience, and employment status (Student / Fresher / Working Professional / Career Switcher / Corporate HR). Collected during counselling sessions. Purpose: to recommend the most suitable course and learning pathway.

Payment Data: Transaction reference, payment mode, and fee instalment records. We do not store full card numbers or UPI credentials — these are handled by licensed payment processors. Purpose: fee reconciliation and issuance of receipts or GST invoices.

Technical & Usage Data: IP address, browser type, operating system, pages visited, session duration, and referring URL. Collected automatically via cookies and server logs. Purpose: website performance monitoring, fraud prevention, and analytics.

Communication Records: Emails, WhatsApp messages, and call notes with our counsellors. Purpose: quality assurance and continuity of service.

3. Legal Basis for Processing (DPDP Act, 2023)

Under the Digital Personal Data Protection Act, 2023, we process your personal data under the following lawful bases:

Consent: You provide explicit consent by submitting enquiry forms, ticking the DPDP consent checkbox, or continuing enrolment. You may withdraw consent at any time without affecting prior lawful processing.

Contractual Necessity: Processing is necessary to fulfil your course enrolment agreement — including scheduling classes, issuing certificates, and providing placement assistance.

Legitimate Interests: We process limited data for fraud prevention, IT security, and ensuring the technical integrity of our systems, where such interests are not overridden by your rights.

Legal Compliance: We may process data to comply with applicable Indian laws, including income tax, GST, and regulatory requirements.

We do not process special category data (health, biometric, financial beyond fee records, or political opinion). If you are under 18, please obtain parental consent before submitting any personal data to us.

4. How We Share Your Data

CipherNet does not sell, rent, or trade your personal data. We may share data strictly on a need-to-know basis with:

Placement Partners: With your explicit written consent, we may share your resume, course completion status, and contact details with our 400+ hiring partners for job referrals. You may opt out at any time.

Certification Bodies: Relevant data is shared with partner certification authorities (e.g., EC-Council, CompTIA) solely for the purpose of issuing course completion certificates.

Payment Processors: Payment details are processed by licensed third-party payment gateways under their own PCI-DSS compliant privacy frameworks. We receive only transaction status notifications.

Service Providers: We use third-party tools for email delivery, CRM, analytics, and website hosting. These providers process data only under our instructions and are bound by data processor agreements.

Legal Authorities: We may disclose data when required by law, court order, or to protect the rights, property, or safety of CipherNet, our students, or the public.

All third-party recipients are contractually obligated to maintain data confidentiality and security standards equivalent to or exceeding our own.

5. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law:

Enquiry / Lead Data: Retained for 2 years from the date of last interaction. If you enrol, data becomes part of your student record.

Student Records (enrolled students): Academic records, attendance, project submissions, and certificates are retained for 7 years post-completion to support alumni verification and background checks by employers.

Payment Records: Retained for 8 years in compliance with the Income Tax Act and GST requirements.

Website Usage Logs: Anonymised after 12 months. Raw IP-level logs are deleted after 90 days.

After the applicable retention period, data is securely deleted or irreversibly anonymised. You may request early deletion of your data (right to erasure) subject to our legal retention obligations.

6. Your Rights Under DPDP Act, 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

Right to Access: Request a copy of the personal data we hold about you, including the purposes for which it is processed and the parties with whom it has been shared.

Right to Correction: Request correction of inaccurate or incomplete personal data without undue delay.

Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to lawful retention obligations.

Right to Withdraw Consent: Withdraw your processing consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.

Right to Grievance Redressal: Lodge a complaint with our Data Protection Officer if you believe your data rights have been violated. We will respond within 30 days.

Right to Nominate: Nominate another individual to exercise your rights on your behalf in the event of death or incapacity.

To exercise any of these rights, contact our Data Protection Officer at privacy@cipherneteduverse.com with subject “DPDP Rights Request”. We will acknowledge within 3 working days and resolve within 30 days.

7. Cookies and Tracking Technologies

Our website uses the following categories of cookies:

Strictly Necessary Cookies: Required for website functionality (form submissions, session management). Cannot be disabled.

Performance and Analytics Cookies: Help us understand how visitors use our website (pages viewed, bounce rate, session duration). We use anonymised aggregate data only. You may opt out via browser settings.

Marketing and Preference Cookies: Enable personalised content and course recommendations based on your browsing history. You can manage these via the cookie consent banner on first visit.

Third-Party Cookies: Embedded content (YouTube course previews, Google Maps) may set their own cookies. Please refer to those platforms' privacy policies.

You can manage, restrict, or delete cookies through your browser settings at any time. Disabling strictly necessary cookies may affect website functionality.

8. Data Security Measures

CipherNet implements comprehensive technical and organisational security measures to protect your personal data:

Encryption: All data transmitted between your browser and our servers is encrypted using TLS 1.2/1.3 (HTTPS). Data at rest is encrypted using AES-256.

Access Controls: Personal data is accessible only to authorised staff on a role-based need-to-know basis. All staff handling personal data undergo mandatory data protection training.

Infrastructure Security: Our systems are hosted on ISO 27001-certified cloud infrastructure with regular vulnerability assessments and penetration testing.

Incident Response: In the event of a data breach that is likely to cause harm to you, we will notify you and the Data Protection Board of India within the timeframes specified under the DPDP Act.

Despite our best efforts, no internet transmission is 100% secure. If you suspect unauthorised access to your data, contact us immediately at privacy@cipherneteduverse.com.

9. Children's Privacy

CipherNet's cybersecurity training programmes are designed for individuals aged 18 and above. We do not knowingly collect personal data from children below the age of 18. If you are under 18, please ensure a parent or guardian reviews and consents to this policy before you submit any personal data.

If we become aware that we have inadvertently collected personal data from a minor without verified parental consent, we will promptly delete such data. Parents or guardians who believe their child has submitted data to us should contact privacy@cipherneteduverse.com immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our data practices, applicable law, or regulatory guidance. When we make material changes, we will:

• Update the “Last Updated” date at the top of this page
• Send an email notification to enrolled students
• Display a prominent notice on our website homepage for 30 days

Your continued use of our services after the effective date of changes constitutes acceptance of the updated policy. If you do not agree with material changes, you may close your account and request data deletion by contacting us.

11. Contact & Grievance Redressal

For any privacy-related questions, data rights requests, or complaints, please contact:

Data Protection Officer
CipherNet Eduverse Pvt Ltd
Email: privacy@cipherneteduverse.com
Phone: +91 83292 07498
Address: 3rd Floor, Manjeera Trinity Corporate, Trinity Work Hub, Unit 310, JNTU - Hitech City Rd, beside Lulu Mall, KPHB Phase 3, Kukatpally, Hyderabad, Telangana — 500072

General Enquiries: info@cipherneteduverse.com

If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Board of India (once constituted under the DPDP Act, 2023) or approach the appropriate court of law.