1. Who We Are
Growth Deck (“we”, “us”, “our”) is an IT & AI professional training company based in Bengaluru, India. We operate the website at https://growthdeck.co.in and the forthcoming course hosting platform that delivers mostly video-based programs in AI/ML, Cybersecurity, Cloud/DevOps and related domains.
Under India’s Digital Personal Data Protection Act, 2023 (DPDP Act), Growth Deck is the Data Fiduciary.
Contact
Email: [email protected]
Address: Pouranami, Vayanayi rd, Chettipeedika, Kannur
2. Information We Collect
We collect only the personal data necessary for the stated purposes.
A. Information you provide directly
- Inquiry / contact form: name, email, phone number, message / learning goals.
- Account registration (course platform): name, email, phone, password (hashed), professional background (optional).
- Payment & enrolment: billing name, address, payment method details (processed by the payment gateway; we do not store full card numbers).
- Course activity: progress, quiz/assignment submissions, certificates earned, support tickets.
B. Information collected automatically
- Device and browser data, IP address (approximate location), pages visited, referring URL.
- Cookies and similar technologies (see Cookies section).
- Video platform telemetry needed for DRM and legitimate access control (device ID, playback events) when you watch protected content.
C. Information from third parties
- Zoho CRM (lead data from the inquiry form).
- Payment gateways (transaction status).
- Analytics providers (aggregated, anonymised usage data).
We do not collect special-category or sensitive personal data beyond what is strictly required for course delivery and certification.
3. How We Use Your Data
We process personal data only for these purposes:
- Respond to inquiries and convert leads into enrolled learners (via Zoho CRM).
- Create and manage learner accounts, deliver course content (including DRM-protected videos), track progress, and issue certificates.
- Process payments and prevent fraud.
- Send transactional communications (enrolment confirmation, access links, reminders, support replies).
- Send marketing / cohort announcements only if you have given separate consent (you can withdraw at any time).
- Improve the platform, curriculum and user experience (using aggregated or anonymised data where possible).
- Comply with legal obligations and enforce our Terms.
4. Legal Basis & Consent (DPDP Act)
- Most processing is based on consent (inquiry form, account creation, marketing).
- Processing necessary for performance of a contract (course enrolment and delivery).
- Legitimate uses permitted under the DPDP Act (security, fraud prevention, analytics that do not identify individuals).
You may withdraw consent at any time by emailing us or using the unsubscribe / account settings. Withdrawal does not affect processing already completed.
5. Sharing of Data
We do not sell or rent personal data.
We share data only with:
- Zoho CRM – to manage leads and customer relationships.
- Payment gateways (e.g., Razorpay or equivalent) – for processing transactions.
- Hosting & infrastructure providers (currently DigitalOcean; future video CDN / DRM provider such as VdoCipher or equivalent) – to host the site, store content and enforce DRM.
- Analytics tools (e.g., Google Analytics or privacy-friendly alternatives) – aggregated usage data.
- Email / communication services – for transactional and consented marketing messages.
- Professional advisors or authorities when required by law or to protect our rights.
All processors are contractually required to process data only on our instructions and to maintain appropriate security.
6. Cookies and Tracking
We use essential cookies for site functionality and security. We may use analytics cookies (with consent where required) to understand site performance. You can manage cookie preferences via your browser settings. Disabling essential cookies may affect form submission or login.
7. Data Security
We implement reasonable technical and organisational measures, including:
- Encryption in transit (HTTPS) and at rest where applicable.
- Hashed passwords.
- Access controls and least-privilege principles.
- DRM and device binding for video content to prevent unauthorised redistribution.
No method of transmission or storage is 100 % secure; we continuously improve our practices.
8. Data Retention
- Inquiry / lead data: retained while the relationship is active + reasonable period for follow-up, then deleted or anonymised.
- Learner account and course progress data: retained for the duration of access rights + statutory retention periods (tax, certification records).
- Payment records: as required by Indian tax and accounting laws.
- We delete or anonymise data when it is no longer needed for the stated purposes.
9. Your Rights under the DPDP Act
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request erasure (subject to legal retention obligations).
- Withdraw consent.
- Nominate another individual to exercise rights on your behalf in case of death or incapacity.
- Grievance redressal.
To exercise any right, email [email protected] with sufficient identification. We will respond within the timelines prescribed by the DPDP Act / Rules.
If you are unsatisfied, you may approach the Data Protection Board of India.
10. Children’s Data
Our programs are aimed at adult professionals. We do not knowingly collect personal data from individuals under 18 without verifiable parental consent. If we become aware of such collection, we will delete the data promptly.
11. International Transfers
Primary processing occurs in India. If any processor stores or processes data outside India, we ensure appropriate safeguards as required under the DPDP Act (or obtain consent where necessary).
12. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last Updated” date will reflect the change. Material changes will be notified via email or a prominent notice on the site. Continued use after the effective date constitutes acceptance.
13. Contact & Grievance
For any privacy-related questions or to exercise your rights:
Email: [email protected]