Privacy Policy

Gears of Excel ('we,' 'our,' 'us,' or the 'Company') is committed to protecting your privacy and ensuring transparency regarding how we collect, use, process, and protect your personal information. This Privacy Policy outlines our practices regarding personal data collection and usage.

This Privacy Policy applies to all individuals who use our website, mobile applications, and Services. By accessing or using our Services, you consent to the collection and use of your information as described herein.

'Personal Data' or 'Personal Information' means any information relating to an identified or identifiable natural person, including but not limited to name, email address, phone number, postal address, date of birth, educational background, employment details, and payment information.

'Processing' means any operation performed on Personal Data, including collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, transmission, erasure, or destruction.

We use your Personal Data for the following purposes:

• Service Delivery: To provide, maintain, and improve our training courses, consulting services, and digital platforms
• Account Management: To create and manage your account, process registrations, and handle login and access control
• Communication: To send course updates, notifications, certificates, reminders, and respond to your inquiries
• Payment Processing: To process payments, issue receipts, and manage billing and invoicing
• Personalization: To customize course content, learning paths, and recommendations based on your preferences and progress
• Assessment and Feedback: To grade assignments, provide feedback, track learning progress, and generate performance reports
• Analytics and Improvement: To analyze course effectiveness, user engagement, and usage patterns to improve our Services
• Compliance: To comply with legal obligations, tax requirements, and regulatory provisions in India
• Security: To detect, prevent, and address fraud, abuse, and security incidents
• Marketing and Promotion: To send promotional emails, newsletters, course recommendations, and special offers (with your consent)
• Research: To conduct aggregate anonymized research on educational outcomes and training effectiveness
• Legal and Safety: To protect our rights, privacy, safety, or property, and to enforce our Terms and Conditions

We will not use your Personal Data for any purpose other than those stated above without your prior written consent.

We process your Personal Data on the following legal bases:

• Consent: Where you have explicitly consented to our collection and use of your data
• Contract Performance: To perform our obligations under the service agreement with you
• Legal Obligation: To comply with applicable laws, court orders, and regulatory requirements
• Legitimate Interest: To pursue our legitimate business interests, including fraud prevention, security, service improvement, and direct marketing (where not overridden by your rights)
• Vital Interest: To protect your vital interests or those of others in cases of emergency

We do not sell, trade, or rent your Personal Data to third parties. However, we may share your information in the following circumstances:

• Service Providers: We engage third-party vendors to provide technical services (hosting, analytics, payment processing, email delivery, customer support). These providers are contractually bound to maintain confidentiality and use your data only to provide services to us.
• Academic and Corporate Partners: If you enroll through an educational institution or corporate organization, we may share relevant progress reports and certificates with that institution (with your consent or as per your enrollment agreement).
• Legal Requirements: We may disclose your information when required by law, court order, or government request, or to protect our legal rights and interests.
• Business Transfers: In case of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice of any such change in ownership or control.
• Aggregated and Anonymized Data: We may share anonymized, aggregated data that does not identify you personally for research, analytics, and promotional purposes.
• Your Consent: We will share your information with third parties where you have explicitly consented to such disclosure.

All third-party service providers are contractually obligated to use your Personal Data solely for the purpose of providing services to Gears of Excel and to maintain appropriate security measures.

We retain your Personal Data only for as long as necessary to achieve the purposes outlined in this Privacy Policy or as required by applicable law. Retention periods vary based on the type of data and the purpose:

• Account Information: Retained for the duration of your relationship with us plus 1 year after account closure
• Course Enrollment and Progress: Retained for 3 years to facilitate credential verification and alumni engagement
• Payment Information: Retained as per GST/Income Tax compliance requirements (6-7 years)
• Communication Records: Retained for 1 year from the date of communication
• Cookies and Tracking Data: Deleted after 2 years of inactivity unless you clear them earlier
• Support and Complaint Data: Retained for 2 years to address grievances and legal claims

After the retention period, we securely delete or anonymize your Personal Data. However, we may retain anonymized data indefinitely for aggregate analytics and research purposes.

What are Cookies? Cookies are small text files stored on your device to enhance your browsing experience, remember your preferences, and analyze usage patterns.

Managing Cookies: You can control cookies through your browser settings and choose to disable non-essential cookies. However, disabling essential cookies may affect website functionality. You can also opt out of analytics tracking through Google Analytics opt-out tools.

Other Tracking Technologies: We may use pixels, web beacons, and similar technologies to track user interactions and measure campaign effectiveness.

Security Measures: Gears of Excel implements comprehensive technical and organizational measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: Secure transmission of data using industry-standard encryption protocols (HTTPS)
• Database Security: Encryption of sensitive data at rest with strong encryption algorithms
• Access Controls: Role-based access controls limiting data access to authorized personnel only
• Regular Audits: Periodic security assessments, penetration testing, and vulnerability scans
• Employee Training: Mandatory data protection and confidentiality training for all employees
• Firewalls and Intrusion Detection: Multi-layer security infrastructure to detect and prevent unauthorized access
• Secure Infrastructure: Data hosted on secure, compliant cloud platforms with redundancy and backup

Limitations: While we implement robust security measures, no system is entirely secure. We cannot guarantee absolute security and encourage you to use strong passwords and maintain confidentiality of your login credentials.

Data Breach Notification: In the unlikely event of a security breach compromising your Personal Data, we will notify affected individuals and relevant authorities within 72 hours as per applicable data protection laws.

Subject to applicable laws, you have the following rights regarding your Personal Data:

• Right to Access: You have the right to request and obtain a copy of your Personal Data we hold
• Right to Correction: You can request correction of inaccurate or incomplete Personal Data
• Right to Erasure: You can request deletion of your Personal Data, subject to our legal obligations
• Right to Data Portability: You can request transfer of your Personal Data to another service provider in a structured, machine-readable format
• Right to Withdraw Consent: You can withdraw your consent for data processing at any time by contacting us
• Right to Object: You can object to specific types of processing, including direct marketing
• Right to Restrict Processing: You can request temporary restriction of data processing while we address your concerns
• Right to Lodge Complaints: You have the right to file complaints with relevant data protection authorities

Exercise Your Rights: To exercise any of these rights, submit a written request to privacy@gearsofexcel.com with sufficient details for us to identify you. We will respond within 30 days.

Marketing Communications: You can opt out of promotional emails and newsletters by clicking the 'unsubscribe' link in our emails or adjusting your preferences in your account settings.

Data Storage: While our primary operations are in India, we may transfer your Personal Data to other countries for technical hosting, backup, or to service providers located outside India. Such transfers are made with appropriate safeguards and are compliant with Indian data protection laws.

International Recipients: Any international transfer of your data will be subject to binding data transfer agreements ensuring adequate data protection standards equivalent to those in India.

Our website may contain links to third-party websites, social media platforms, and external services. We are not responsible for the privacy practices or content of these external sites. Please review the privacy policies of any third-party sites before providing your information.

Social Media Integration: If you log in using your social media account, we may receive basic profile information. This is governed by that social media platform's privacy policy.

Our Services are intended for users aged 18 and above. We do not intentionally collect Personal Data from children under 18 without parental consent. If we become aware that we have collected data from a child without appropriate consent, we will take immediate steps to delete such data.

For services targeted at minors (such as school-based programs), we require explicit parental consent and will limit data collection to what is necessary for the specific educational purpose.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or applicable laws. We will notify you of significant changes by email or by posting the updated policy on our website with a new effective date.

Your continued use of our Services following such changes constitutes your acceptance of the updated Privacy Policy.

Data Protection Officer: For any privacy-related concerns, data protection requests, or to file a complaint, please contact our Data Protection Officer:

Response Timeline: We commit to responding to all privacy-related inquiries and grievances within 30 days of receipt.

Escalation: If you are not satisfied with our response, you may escalate your complaint to the competent data protection authority or file a complaint under applicable Indian data protection laws.

This Privacy Policy is drafted in compliance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable Indian data protection and privacy laws.