Privacy Policy

1. Introduction

This Privacy Policy describes the manner in which D.R.D Security Private Limited, incorporated under the Companies Act, 2013, collects, receives, records, stores, processes, uses, shares, retains, transfers, protects, and otherwise handles Personal Data of individuals using its Training Wing website, Learning Management System, mobile applications, online portals, communication channels, and related services.

The Company processes Personal Data in accordance with applicable Indian laws including the Digital Personal Data Protection Act, 2023, Information Technology Act, 2000, IT Rules, Consumer Protection Act, 2019, and other applicable directions.

2. Scope

This Policy applies to website visitors, registered users, students, prospective students, parents or guardians, corporate clients, educational institutions, workshop participants, internship applicants, certification candidates, and individuals contacting the Company through any communication channel.

3. Definitions

Personal Data: Any information relating to an identified or identifiable individual.

Processing: Collection, recording, storage, organization, retrieval, use, disclosure, transmission, sharing, deletion, destruction, or any other operation performed on Personal Data.

User: Every individual accessing or using the Services.

Consent: Free, specific, informed, unconditional, and unambiguous agreement given by the User for processing Personal Data.

4. Information We Collect

4.1 Personal Information

• Full name, photograph, date of birth, gender, address, email, mobile number
• Parent or guardian details, educational qualification, college/university name
• Occupation, company name, government identification details where required by law
• Emergency contact information

4.2 Academic Information

• Previous qualifications, transcripts, certificates, results
• Assignments, attendance, assessment reports, evaluations, internship performance

4.3 Financial Information

• Payment amount, transaction reference number, invoices, billing and GST information
• Scholarship details and installment records

The Company does not intentionally store complete debit card, credit card, or banking credentials unless required by law or processed through authorized payment service providers.

4.4 Technical & Communication Information

• IP address, browser, device, OS, login history, cookies, error logs
• Email, chat, WhatsApp, phone call records, support requests, feedback, complaints, surveys

5. Purpose of Processing

Personal Data may be processed for student registration, identity verification, admission processing, course administration, attendance, examinations, certification, internship management, placement assistance, support, fee collection, refund processing, fraud prevention, legal compliance, security monitoring, website improvement, analytics, internal audits, regulatory reporting, and communication regarding courses, schedules, notices, events, and updates.

6. Lawful Basis for Processing

• Consent provided by the User
• Performance of contractual obligations
• Compliance with legal obligations
• Protection of legitimate business interests
• Prevention of fraud, abuse, and cybercrime
• Protection of rights, property, safety, and security

7. Cookies and Tracking Technologies

The Company may use cookies, pixels, web beacons, log files, and similar technologies to maintain user sessions, improve website performance, analyze traffic, personalize user experience, detect fraud, monitor website security, and remember user preferences.

Users may disable cookies through browser settings; however, certain website functionalities may become unavailable or operate improperly.

8. Third-Party Services & Sharing

The Company may engage authorized third-party providers for payment processing, hosting, cloud infrastructure, LMS, email, SMS, video conferencing, analytics, CRM, and technical support.

Personal Data may be disclosed to government authorities, courts, law enforcement agencies, regulators, payment processors, educational institutions, internship partners, placement partners, auditors, legal advisors, chartered accountants, technology vendors, and cloud service providers.

9. International Data Transfers

Where business operations or cloud service providers require international processing, Personal Data may be transferred outside India in accordance with applicable Indian law and subject to appropriate contractual, organizational, and technical safeguards.

10. Data Security

The Company adopts reasonable technical, administrative, organizational, and physical safeguards including encryption, SSL/TLS, firewalls, access control, role-based access, password protection, antivirus, endpoint protection, backup systems, audit logs, vulnerability assessments, security monitoring, and incident response procedures.

No electronic transmission or storage system can be guaranteed to be absolutely secure; therefore, the Company does not warrant absolute security.

11. Data Retention

Personal Data shall be retained only for so long as necessary for educational services, academic records, certification verification, legal compliance, taxation, audits, dispute resolution, contractual enforcement, and legitimate business interests.

Upon expiry of retention periods, Personal Data may be securely deleted, anonymized, archived, or destroyed.

12. User Rights

• Request access to Personal Data
• Request correction or update of inaccurate or incomplete information
• Withdraw consent where processing is based on consent
• Request deletion where legally permissible
• Request grievance resolution
• Seek information regarding processing activities

The Company may refuse requests where permitted by law or where compliance may affect legal obligations, security, investigations, or third-party rights.

13. Withdrawal of Consent

Where processing is based on consent, the User may withdraw consent by submitting a written request. Withdrawal does not affect processing already undertaken and may impact availability of certain Services.

14. Children’s Privacy

Individuals below eighteen years of age may access the Services only through a parent or lawful guardian, wherever required by applicable law. The Company may verify parental authorization and refuse or discontinue Services where authorization is absent.

15. Marketing Communications

The Company may send course updates, schedules, promotional offers, newsletters, event invitations, webinar notifications, and educational content. Users may opt out of promotional communications, but administrative and legal communications may continue.

16. Third-Party Websites

The Company’s website may contain links to external websites. The Company does not control such websites and shall not be responsible for their privacy practices, content, policies, security, or services.

17. Confidentiality & Breach Response

Employees, consultants, trainers, contractors, and authorized representatives handling Personal Data are bound by confidentiality obligations.

In the event of an actual or suspected Personal Data breach, the Company may undertake investigation, containment, remediation, regulatory reporting where required, and notification to affected individuals where applicable.

18. Changes to this Privacy Policy

The Company reserves the right to modify, update, replace, or revise this Privacy Policy at any time without prior notice. Continued use of the Services constitutes acceptance of the revised Privacy Policy.

19. Governing Law & Jurisdiction

This Privacy Policy shall be governed by the laws of India. Any dispute shall be subject to the exclusive jurisdiction of the competent courts located at Lucknow, Uttar Pradesh, India, subject to applicable law.

20. Grievance Redressal & Contact

Grievance Officer: D.R.D Security Private Limited – Training Wing

Email: support@drdsecurity.com

Main Website: https://drdsecurity.com

Training Wing: https://training.drdsecurity.com

Phone: +91-8601030795

21. Declaration

By accessing this website, creating an account, submitting any form, enrolling in any course, making payment, or otherwise using the Services of D.R.D Security Private Limited, the User acknowledges that they have read, understood, and accepted this Privacy Policy and consent to processing of Personal Data in accordance with this Policy and applicable Indian laws.