Privacy Policy

1. Scope & Purpose of this Policy

This Privacy Policy governs the manner in which LearnTech Academy Private Limited ("LearnTech Academy", "we", "us", or "our") collects, uses, stores, protects, and discloses personal information obtained from users of our website (learntechacademy.in), students enrolled in our academic courses, participants in corporate training workshops, and corporate clients engaging our managed IT and cloud infrastructure services.

By accessing our learning management systems (LMS), submitting an inquiry form, enrolling in a technical training track, or executing a Statement of Work (SOW) for IT consulting services, you acknowledge and agree to the practices outlined in this Policy.

2. Information We Collect

Depending on your interaction with LearnTech Academy, we collect information across three main categories:

• Direct Student & Inquirer Information: Full name, email address, telephone number, residential city, educational background, current employment status, course interests, and payment transaction metadata (we do not store raw card numbers; payments are processed via PCI-DSS Level 1 compliant gateways).
• Academic & Learning Platform Data: Course progress metrics, quiz scores, project code submissions, attendance in live interactive sessions, lab compute usage, and feedback ratings.
• Enterprise & IT Services Client Data: Organization name, authorized representative business contact info, corporate billing address, server endpoint diagnostics, cloud resource identifiers, and technical logs necessary to fulfill contracted IT Service Level Agreements (SLAs).
• Technical & Telemetry Data: IP address, device browser type, operating system, referral source, pages viewed, time spent per module, and standard session cookies.

3. Data Categories, Purpose & Processing Schedule

To maintain transparency, the following table details how specific data categories are processed and retained:

4. How We Use Your Data

LearnTech Academy processes your personal information exclusively for specified, legitimate purposes:

1. Delivery of Educational Services: Facilitating live instructor-led lectures, providing access to lab cloud environments, grading assignments, and issuing verified digital credentials and certificates of completion.
2. Execution of Managed IT & Cloud Contracts: Configuring virtual machines, monitoring network health, executing scheduled backups, and providing 24/7 technical helpdesk support.
3. Administrative Communication: Sending critical course updates, batch reschedule alerts, billing receipts, security notices, and response to consultation inquiries.
4. Quality Improvement & Accreditation: Analyzing course completion rates and anonymous curriculum feedback to refine technical syllabi and train mentors.

5. Data Sharing & Third-Party Sub-Processors

We do not sell, barter, or distribute your private information. Data sharing occurs solely with trusted enterprise sub-processors under rigorous confidentiality and data protection agreements:

• Cloud Infrastructure: Amazon Web Services (AWS) and Google Cloud Platform (GCP) hosted in the Asia-Pacific (Mumbai) region for secure hosting, database storage, and virtual lab environments.
• Payment Processors: RBI-authorized payment aggregators (e.g., Razorpay, Stripe) operating under PCI-DSS certification for secure digital transactions.
• Communication Gateways: Enterprise transactional email and SMS infrastructure (e.g., SendGrid, Twilio) for one-time verification codes and batch notifications.
• Legal Disclosures: We may disclose data when strictly required by a court order, statutory governmental authority, or lawful enforcement subpoena under Indian law.

6. Security Safeguards & Encryption Standards

Security is integral to our identity as a technology institution. We enforce multi-tiered defense mechanisms to protect personal and business data against unauthorized access, alteration, or disclosure:

• Encryption in Transit: All data transmitted between your browser and our servers is secured using Transport Layer Security (TLS 1.3 / SSL) with strong cipher suites.
• Encryption at Rest: Database records, student submissions, and backup snapshots are encrypted using industry-standard Advanced Encryption Standard (AES-256).
• Role-Based Access Control (RBAC): Access to student and client databases is restricted strictly to authorized engineering and counselor personnel with mandatory Multi-Factor Authentication (MFA).
• Regular Vulnerability Audits: Our web assets and cloud environments undergo continuous vulnerability scanning and annual third-party penetration testing.

7. Data Retention & Disposal

We retain personal information only for as long as necessary to fulfill the objectives for which it was originally collected, including the satisfaction of educational, legal, accounting, and reporting obligations.

Upon the expiration of the defined retention window or upon a valid student erasure request, records are either securely purged via cryptographic shredding or permanently anonymized so that individuals cannot be re-identified.

8. Cookies & Telemetry Management

Our platform uses minimal, privacy-conscious cookies:

• Essential Cookies: Required to maintain student login sessions, authenticate portal access, and remember security preferences. These cannot be disabled.
• Performance & Analytics Cookies: Aggregated, privacy-friendly telemetry that helps us understand which tutorial articles and curriculum topics require enhancement.

You may configure your web browser to reject cookies or notify you when a cookie is placed. However, disabling essential cookies may impair access to your student dashboard or virtual labs.

9. Your Data Protection Rights

Under applicable Indian data protection laws, including the Digital Personal Data Protection Act 2023, you possess the following rights regarding your personal information:

• Right to Access: You can request a summary of the personal data we hold about you and the processing activities undertaken.
• Right to Correction & Rectification: You may update outdated contact details, rectify factual inaccuracies in your profile, or complete incomplete records.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data, subject to statutory retention obligations (e.g., financial audit records).
• Right to Withdraw Consent: You may revoke consent for non-essential communications (such as our monthly tech newsletter) at any time with a single click.

To exercise any of these rights, submit a written request to [email protected]. We process verified requests within fifteen (15) business days without fee.

10. Grievance Redressal & Statutory Officer

In compliance with the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023, LearnTech Academy has designated an official Data Grievance Redressal Officer.