Privacy Policy

1 Overview

We are committed to protecting your privacy and handling your personal data with transparency and integrity. We only collect information that is necessary for legitimate business purposes, and we will never sell your personal information to third parties.

By using our website or services, you consent to the collection and use of your information as described in this policy.

2 Data We Collect

Category	Examples	Purpose
Identity Data	Full name, date of birth (for training certificates)	Identification, communication, certification
Contact Data	Email address, phone number, postal/office address	Service delivery, invoicing, support
Financial Data	Payment method type, transaction ID (NOT card details — processed by Razorpay)	Payment verification, invoicing
Technical Data	IP address, browser type, device, OS, referring URL	Security, analytics, service improvement
Usage Data	Pages visited, time on site, link clicks	Website improvement, content relevance
Communication Data	Messages sent via contact form, emails, WhatsApp chats	Support, lead management, follow-up

We do not collect sensitive personal data such as biometric information, medical records, or financial account credentials.

3 How We Collect Your Data

Directly from you: When you fill in our contact form, enquiry form, or enroll in a training program.
Via payment: When you make a payment through Razorpay (Razorpay's privacy policy governs their processing of your payment data).
Automatically: Through cookies, server logs, and analytics tools when you browse our website.
Through communications: Emails, WhatsApp messages, or phone calls with our team.

4 How We Use Your Data

We use your personal information for the following purposes:

To deliver the services or training programs you have engaged us for.
To process payments and issue GST-compliant invoices.
To communicate project updates, training schedules, and support.
To send you relevant service information, offers, or newsletters (you may opt out at any time).
To improve our website, services, and customer experience.
To comply with legal obligations under Indian law.
To detect and prevent fraud, spam, or security threats.

We rely on the following legal bases for processing: (a) performance of a contract, (b) your consent, (c) our legitimate business interests, and (d) legal compliance.

5 Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share your data with:

Razorpay: Our payment gateway partner, for secure payment processing. Razorpay is PCI-DSS Level 1 certified.
Google (Analytics & Ads): Anonymised usage data for website analytics and advertising performance.
Meta Platforms: Anonymised event data for advertising measurement (only if you've interacted with our ads).
Email service providers: To send transactional and marketing emails.
Legal authorities: When required to comply with a court order, legal process, or government mandate.

All third-party service providers are contractually obligated to keep your information confidential and use it solely for the agreed purposes.

6 Cookies & Tracking Technologies

What are cookies?

Cookies are small text files placed on your device when you visit our website. We use cookies to:

Essential cookies: Enable core functionality (session management, CSRF security tokens). Cannot be disabled.
Analytics cookies: Google Analytics 4 — understand how visitors use our site (pageviews, session duration, traffic source). Data is anonymised.
Marketing cookies: Google Ads and Meta Pixel — measure the effectiveness of our advertising campaigns.

Managing Cookies

You can control or delete cookies through your browser settings. Note that disabling non-essential cookies may affect your experience on our website. Most browsers allow you to refuse all cookies or accept only certain types.

7 Data Retention

We retain your personal data only for as long as necessary:

Client data: Retained for 7 years for tax and legal compliance (GST requirements).
Training enrollments: Retained for 5 years to support certification verification.
Contact form submissions: Retained for 2 years or until the enquiry is resolved.
Website analytics data: Retained for 14 months (Google Analytics default).
Marketing opt-out records: Retained indefinitely to honour your preferences.

After these periods, data is securely deleted or anonymised.

8 Data Security

We implement robust technical and organisational measures to protect your personal data, including:

SSL/TLS encryption for all data transmitted to and from our website.
Secure, hashed password storage — we never store passwords in plain text.
PDO prepared statements to prevent SQL injection on all database queries.
CSRF token verification on all forms to prevent cross-site request forgery.
Regular security audits and updates to our web infrastructure.
Restricted access to personal data on a need-to-know basis within our organisation.

Payment security: We do not store your card or bank account details on our servers. All payment processing is handled by Razorpay, which is PCI-DSS Level 1 certified.

Despite our best efforts, no internet transmission or electronic storage is 100% secure. In the unlikely event of a data breach, we will notify affected individuals and relevant authorities as required by law.

9 Your Rights

Under applicable Indian law, you have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you.
Right to Correction: Request correction of inaccurate or incomplete data.
Right to Deletion: Request deletion of your data, subject to legal retention obligations.
Right to Withdraw Consent: Withdraw consent for marketing communications at any time.
Right to Object: Object to processing based on our legitimate interests.

To exercise any of these rights, please email us at info@digitalithub.com with the subject line "Privacy Request". We will respond within 30 days.

You may also unsubscribe from our marketing emails by clicking the "Unsubscribe" link in any email we send you.

10 Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected personal information from a person under 18, we will take prompt steps to delete it. If you believe we have collected data from a minor, please contact us immediately.

11 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. Any updates will be posted on this page with a revised "Last Updated" date. Continued use of our website or services after such changes constitutes your acceptance of the updated policy.

For significant changes, we will notify active clients via email.

12 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Officer: