Privacy
Policy
This Privacy Policy (the “Policy”) governs the
manner in which the Platform collects, uses, maintains and discloses
information of its users. The Policy also describes the practices that We apply
to such user information, user’s privacy rights and choices regarding their
information. To clarify, this Policy applies to all users of the Platform
(referred to as “Learners”, “You”, “Your”).
By accessing and using the Platform, providing Your Personal Information, or by
otherwise signalling Your agreement when the option is presented to You, you
consent to the collection, use, and disclosure of information described in this
Policy and Terms of Use and we disclaim all the liabilities arising therefrom.
If You do not agree with any provisions of this Policy and/or the Terms of Use,
You should not access or use the Platform or engage in communications with us
and are required to leave the Platform immediately. If any information You have
provided or uploaded on the Platform violates the terms of this Policy or Terms
of Use, we may be required to delete such information upon informing You of the
same and revoke Your access if required without incurring any liability to You.
Capitalized terms used but not defined in this Privacy Policy can be found in
our Terms of Use. Please read this Policy carefully prior to accessing our
Platform and using any of the services or products offered therein. If you have
any questions, please contact us at the contact information provided below.
1.
PERSONAL INFORMATION
“Personal Information” shall mean the information which identifies a
Learner i.e., first and last name, identification number, email address, age,
gender, location, photograph and/or phone number provided at the time of
registration or any time thereafter on the Platform.
“Sensitive Personal Information” shall include (i) passwords and
financial data (except the truncated last four digits of credit/debit card),
(ii) health data, (iii) official identifier (such as biometric data, aadhar
number, social security number, driver’s license, passport, etc.,), (iv)
information about sexual life, sexual identifier, race, ethnicity, political or
religious belief or affiliation, (v) account details and passwords, or (vi)
other data/information categorized as ‘sensitive personal data’ or ‘special
categories of data’ under the Information Technology (Reasonable Security
Practices and Procedures and Sensitive Personal Data or Information) Rules,
2011, General Data Protection Regulation (GDPR) and / or the California Consumer
Privacy Act (CCPA) (“Data Protection Laws”) and in context of
this Policy or other equivalent / similar legislations.
Usage of the term ‘Personal Information’ shall
include ‘Sensitive Personal Information’ as may be applicable to the
context of its usage.
2.
INFORMATION WE COLLECT:
We may collect both personal and non-personal identifiable information from You
in a variety of ways, including, but not limited to, when You visit our
Platform, register on the Platform, and in connection with other activities,
services, features or resources we make available on our Platform. However,
please note that-
a. Personal
Identifiable Information: We may collect personal-identifiable
information such as Your name and emails address to enable Your access to the
Platform and services/products offered therein. We will collect
personal-identifiable information from You only if such information is
voluntarily submitted by You to us. You can always refuse to provide such
personal identification information; however, it may prevent You from accessing
services or products provided on the Platform or from engaging in certain
activities on the Platform.
b. Non-Personal
Identifiable Information: When You interact with our Platform, we may
collect non-personal-identifiable information such as the browser name,
language preference, referring site, and the date and time of each user
request, operating system and the Internet service providers utilized and other
similar information.
c. Cookies: To
enhance User experience, our Platform may use 'cookies'. A cookie is a string
of information that a website stores on a visitor’s computer, and that the
visitor’s browser provides to the website each time the visitor returns for
record-keeping purposes. You may choose to set Your web browser to refuse
cookies, or to notify You when cookies are being sent; however, please note
that in doing so, some parts of the Platform may not function properly.
3.
HOW WE USE and SHARE THE INFORMATION COLLECTED
We may collect and use Your Personal Information for the following purposes:
a.
To provide access to our Platform and/or the
services/products offered therein: We use the Your information as
collected by us to allow You to access the Platform and the services/products
offered therein, including without limitation to provide customer service,
fulfil purchases through the Platform, verify User information and to resolve
any glitches with our Platform. The legal basis for this processing is consent
or, where applicable, our legitimate interests in the proper administration of
our Platform, and/or the performance of a contract between You and us.
b.
To improve our Platform and maintain safety: We
use Your information to improve and customize the Platform and
services/products offered by us. Further, we also use Your information to
prevent, detect, investigate, and take measures against criminal activity,
fraud, misuse of or damage to our Platform or network, and other threats and
violations to a third party's or our rights and property, or the safety of our
Users, or others. The legal basis for this processing is consent or, where
applicable, our legitimate interests in the proper administration of our
Platform, and/or the performance of a contract between You and us.
c.
To communicate with You or market our
services/products: We may use the email address submitted by You to
communicate with You about Your orders on our Platform, our offers, new
products, services or even receive Your feedback on the Platform or any
services/products offered therein. It may also be used to respond to Your
inquiries, questions, and/or other requests. If at any time You would like to
unsubscribe from receiving future emails, please write to us at the contact
information provided below. The legal basis for this processing is consent or,
where applicable, our legitimate interests in the proper administration of our
Platform, and/or the performance of a contract between You and us.
We do not use Personal Information for making any automated decisions affecting
or creating profiles other than what is described in this Policy.
We do not sell, trade, or otherwise exploit Your personal-identifiable
information to others. Limited to the purposes stated hereinabove, we may share
generic aggregated demographic information not linked to any personal-identifiable
information regarding visitors and Users with our business partners and trusted
affiliates.
4. YOUR CHOICES:
a. Limit
the information You provide: You always have an option to choose the
information You provide to us, including the option to update or delete Your
information. However, please note that lack of certain information may not
allow You access to the Platform or any of its features, in part or in full.
For example: information required for Your registration on the Platform.
b. Limit
the communications You receive from us: Further, You will also have
the option to choose what kind of communication You would like to receive from
us. However, there may be certain communications that are required for legal or
security purposes, including changes to various legal agreements, that you may
not be able to limit.
c. Reject
Cookies and other similar technologies: You may reject or remove
cookies from Your web browser; You will always have the option to change the
default settings on Your web browser if the same is set to ‘accept cookies’.
However, please note that some of the services/products offered on the Platform
may not function or be available to You, when the cookies are rejected, removed
or disabled.
5.
YOUR RIGHTS:
In general, all Learners have the rights specified herein this section.
However, depending on where you are situated, you may have certain specific
rights in respect of your Personal Information accorded by the laws of the
country you are situated in. To understand Your rights, please refer to
the Country Specific Additional Rights below.
If you are a Learner, you may exercise any of these rights by using the options
provided to you within the Platform upon your login. If however, you are facing
any issues or require any clarifications, you can always write to us at the
address noted in the ‘Grievances’ section below, and we will address
your concerns to the extent required by the applicable law.
a. Right to Confirmation and Access: You
have the right to get confirmation and access to your Personal Information that
is with us along with other supporting information.
b. Right to Correction: You have the right to
ask us to rectify your Personal Information that is with us that you think is
inaccurate. You also have the right to ask us to update your Personal
Information that you think is incomplete or out-of-date.
c. Right to be Forgotten: You have the right to
restrict or prevent the continuing disclosure of your Personal Information
under certain circumstances.
d. Right to Erasure: If you wish to
withdraw/remove your Personal Information from our Platform, you have the right
to request erasure of your Personal Information from our Platform. However,
please note that such erasure will remove all your Personal Information from our
Platform (except as specifically stated in this Policy) and may result in
deletion of your account on the Platform permanently, and the same will not be
retrievable.
Remember, you are entitled to exercise your rights as stated above only with
respect to your information, including Personal Information, and not that of
other Learners. Further, when we receive any requests or queries over email to
the address specified in the ‘Grievances’ section below, then, as per the
applicable Data Protection Laws, we may need to ask you a few additional
information to verify your identity in association with the Platform and the
request received.
6.
PROTECTION OF YOUR INFORMATION:
We take all measures reasonably necessary to protect against the unauthorized
access, use, alteration or destruction of Personal Information or such other
data on the Platform. Our disclosure of any such information is limited to –
a.
our employees, contractors and affiliated
organizations (if any) that (i) need to know that information in order to
process it on our behalf or to provide services available on our Platform, and
(ii) that have agreed not to disclose it to others.
b.
a response to a court order, or other
governmental request. Without imitation to the foregoing, we reserve the right
to disclose such information where we believe in good faith that such
disclosure is necessary to comply with applicable laws, regulations, court
orders, government and law enforcement agencies’ requests; protect and defend a
third party's or our rights and property, or the safety of our users, our
employees, or others; or prevent, detect, investigate and take measures against
criminal activity, fraud and misuse or unauthorized use of our Platform and/or
to enforce our Terms of Use or other agreements or policies.
To the extent permitted by law, we will attempt to give You
prior notice before disclosing Your information in response to such a request.
7.
THIRD PARTY WEBSITES
You may find links to the websites and services of our partners, suppliers,
advertisers, sponsors, licensors and other third parties. The content or links
that appear on these sites are not controlled by us in any manner and we are
not responsible for the practices employed by such websites. Further, these
websites/links thereto, including their content, may be constantly changing and
the may have their own terms of use and privacy policies. Browsing and
interaction on any other website, including websites which have a link to our
Site, is subject to those terms and policies published on such websites.
8.
CROSS-BORDER DATA TRANSFER
Your information including any Personal Information is stored, processed, and
transferred in and to the Amazon Web Service (AWS) servers and databases
located in India. We may also store, process, and transfer information in and
to servers in other countries depending on the location of our affiliates and
service providers.
Please note that these countries may have differing (and potentially less
stringent) privacy laws and that Personal Information can become subject to the
laws and disclosure requirements of such countries, including disclosure to
governmental bodies, regulatory agencies, and private persons, as a result of
applicable governmental or regulatory inquiry, court order or other similar
process.
If you use our Platform from outside India, including in the USA, EU, EEA, and
UK, your information may be transferred to, stored, and processed in India. By
accessing our Platform or otherwise giving us information, you consent to the
transfer of information to India and other countries outside your country of
residence.
9. DURATION FOR WHICH YOUR
INFORMATION IS STORED
We will retain Your information for as long as it is required for us to retain
for the purposes stated hereinabove, including for the purpose of complying
with legal obligation or business compliances.
Further, please note that we may not be able to delete all communications or
photos, files, or other documents publicly made available by you on the
Platform (for example: comments, feedback, etc.), however, we shall anonymize
your Personal Information in such a way that you can no longer be identified as
an individual in association with such information made available by you on the
Platform. We will never disclose aggregated or de-identified information in a
manner that could identify you as an individual.
Note: If you wish to exercise any of your rights (as specified in ‘Your
Rights’ section below) to access, modify and delete any or all information
stored about you, then you may do so by using the options provided within the
Platform. You can always write to us at the email address specified in the
‘Grievances’ section below
10.
MODIFICATION TO PRIVACY POLICY:
We may modify, revise or change our Policy from time to time; when we do, we
will revise the ‘updated date’ at the beginning of this page. We encourage You
to check our Platform frequently to see the recent changes. Unless stated
otherwise, our current Policy applies to all information that we have about
You.
11.
GRIEVANCES:
If you have any questions about this Policy, wish to exercise your rights,
concerns about privacy or grievances, please write to us with a thorough
description via email to info@tradeshala.co.in.
COUNTRY SPECIFIC ADDITIONAL RIGHTS
1.
TERMS APPLICABLE IF YOU ARE AN INDIAN
RESIDENT
Your Rights: If you are located in India, you may have the
following rights under the Personal Data Protection Bill (PDPB) when it becomes
a legislation. All requests can be made by using the option provided to you
within the Platform upon your login. You may also write to us as stated in
the “Grievances” section above, and we will address you concerns to
the extent required by law.
a. Right to Confirmation and Access: You
have the right to get confirmation and access to your Personal Information that
is with us along with other supporting information.
b. Right
to Correction: You have the right to ask us to rectify your Personal
Information that is with us that you think is inaccurate. You also have the
right to ask us to update your Personal Information that you think is
incomplete or out-of-date.
c. Right
to Data Portability: You have the right to ask that we transfer the
Personal Information you gave us to another organisation, or to you, under
certain circumstances.
d. Right
to be Forgotten: You have the right to restrict or prevent the
continuing disclosure of your Personal Information under certain circumstances.
e. Right
to Erasure: If you wish to withdraw/remove your Personal Information
from our Platform, you have the right to request erasure of your Personal
Information from our Platform. However, please note that such erasure will
remove all your Personal Information from our Platform (except as specifically
stated in this Policy) and may result in deletion of your account on the
Platform permanently, and the same will not be retrievable.
2.
TERMS APPLICABLE IF YOU ARE A RESIDENT OF UNITED KINGDOM (UK), A EUROPEAN
UNION (EU) COUNTRY OR EUROPEAN ECONOMIC AREA (EEA)
Your Rights: If you are located in the United Kingdom (UK) or
European Union (EU) or European Economic Area (EEA), you have the following
rights under the UK and EU General Data Protection Regulation (GDPR)
respectively. All requests should be sent to the address noted in
the “Grievances” section above, and we will fulfil requests to the
extent required by applicable law.
a. Right to access Your Personal Information: You
have the right to receive confirmation as to whether or not Personal
Information concerning you is being processed and, where that is the case,
access to the Personal Information can be sought;
b. Right to Rectification: Our goal is to keep
your Personal Information accurate, current and complete. Please contact us if
you believe your information is inaccurate or incomplete;
c. Right to Erasure: In some cases, you have a
legal right to request that we erase your Personal Information;
d. Right to object to Processing: You have the
right to object to our processing of your Personal Information under certain
conditions;
e. Right to restrict Processing: You have the
right to request that we restrict the processing of your Personal Information,
under certain conditions;
f. Right to Data Portability: You have the right
to request that we transfer the data that we have collected to another
organization, or directly to you, under certain conditions;
g. Right to make a complaint to a government supervisory
authority: If you believe we have not processed your Personal
Information in accordance with applicable provisions of the GDPR, we encourage
you to contact us at email address provided in
the ‘Grievances’ section above. You also have the right to make a
GDPR complaint to the relevant Supervisory Authority or seek a remedy through
the courts. A list of Supervisory Authorities is available at:
https://edpb.europa.eu/about-edpb/board/members_en. If you need further
assistance regarding your rights, please contact us using the contact
information provided below, and we will consider your request in accordance
with applicable law. You can identify the supervising authority of your concern
by visiting https://edpb.europa.eu/about-edpb/board/members_en.
h. Right to not be subject to automated decision-making,
including profiling: You have the right not to be subject to a
decision based solely on automated processing, including profiling, which
produces legal or similarly significant effects concerning you.
We collect and process Personal Information about you only where we have a
legal rationale to do so. Specific legal rationale applied for the same will
depend on the type of Personal Information collected and the context in which
the same is being processed, including the Services involved.
3.
TERMS APPLICABLE IF YOU ARE A CALIFORNIA
STATE RESIDENT
If you are a California state resident, then you have the following rights to
the extent, and in the manner, set out in the CCPA:
a.
The right to access the Personal Information
that we hold on you;
b.
The right to know what Personal Information we
intend on collecting from them before the point of collection;
c.
The right to opt in or out of marketing,
analytics, and other similar activities;
d.
The right to equal services without
discrimination; and
e.
The right to request deletion of Personal
Information.
The above rights, the manner in which you can exercise the
same and the category of and the manner in which we collect your information,
are detailed below.
2. CCPA
NOTICE AT COLLECTION:
For purposes of the CCPA, in collecting the information described above, we
collect the categories of Personal Information listed below from you:
a. Identifiers: We may collect your name, email
address, mobile number, username, unique personal identifier, and Internet
Protocol (IP) address. We use Identifiers as set forth in the “How We Use and
Share the Information Collected” section of this Policy, like your name,
contact information, and device and online identifiers.
b. Characteristics of Personal Information described in
the California Customer Records statute: We may collect your name,
email address, username, unique personal identifier, and gender. We use
Categories of Personal Information described in the California Consumer Records
statute as set forth in the ‘How We Use and Share the Information
Collected’ section of this Policy.
c. Internet or other electronic network activity
information: We collect cookies as described above, we will
automatically receive information from your browser and your device, which
includes the date and time of your visit to the Platform as well as your
location, Internet Protocol (IP) address, domain server, browser type, access
time, and data about which pages you visit on the Platform. We use Internet or
other electronic network activity information as set forth in the “How We Use
and Share the Information Collected” section of this Policy.
D. Geolocation data: We may collect your IP
address. We may use Geolocation Data as set forth in the “How We Use and
Share the Information Collected” section of this Policy.
e. Audio, electronic, visual or similar information: We
may collect your profile picture or other audio or visual information uploaded
as content to the Platform. We use audio, electronic, visual or similar
information as set forth in the “How We Use and Share the Information
Collected” section of this Policy.
f. Inferences: We may make inferences based upon
the Personal Information collected (such as likelihood of retention or
attrition). We use Inference information as set forth in the “How We Use and
Share the Information Collected” section of this Policy.
2. CCPA
DATA PRACTICES DURING THE LAST 12 MONTHS:
Personal Information collected: As described in this
Policy, we have collected the categories of Personal Information listed below
during the preceding 12 months:
b.Categories of sources: We have collected the
Personal Information identified in this Policy from you and our payment processors.
c. Business and commercial purposes for collecting: We
have collected the categories of Personal Information listed above for the
following purposes:
d. Personal
Information sold: We have not sold categories of Personal Information
during the preceding 12 months.
e. Personal
Information disclosed for a business purpose: We have disclosed for a
business purpose the categories of Personal Information listed below during the
preceding 12 months:
3.
CONSUMER RIGHTS AND REQUESTS UNDER THE CCPA
The CCPA gives consumers the right to request that we (1) disclose what
Personal Information we collect, use, disclose, and sell, and (2) delete
certain Personal Information that we have collected or maintained. you may
submit these requests to us as described below, and we honor these rights where
they apply.
If a request is submitted in a manner that is not one of the designated methods
for submission, or if the request is deficient in some manner unrelated to our
verification process, we will either (i) treat the request as if it had been
submitted in accordance with the designated manner, or (ii) provide you with
specific directions on how to submit the request or remedy any deficiencies
with the request, as applicable.
A. Request
to Know: As a California resident, you have the right to request: (1)
the specific pieces of Personal Information we have collected about you; (2)
the categories of Personal Information we have collected about you; (3) the
categories of sources from which the
B. Personal
Information is collected; (4) the categories of Personal Information about you
that we have sold and the categories of third parties to whom the Personal
Information was sold; (5) the categories of Personal Information about you that
we disclosed for a business purpose and the categories of third parties to whom
the Personal Information was disclosed for a business purpose; (6) the business
or commercial purpose for collecting, disclosing, or selling Personal
Information; and (7) the categories of third parties with whom we share
Personal Information. Our response will cover the 12-month period preceding our
receipt of a verifiable request.c.
C. Request
to Delete: As a California resident, you have a right to request the
erasure/deletion of certain Personal Information collected or maintained by us.
As described herein, we will delete your Personal Information from our records
and direct any service providers (as defined under applicable law) to delete
your Personal Information from their records. However, we are not required to
honor a deletion request if an exemption applies under the law
D. Submitting
a Request:
1. Submission
of Instructions: You may submit a request to know or to delete by
email to the address provided in the ‘Grievances’ section above or by
submitting a request via mail to address provided by us in our Terms of Use or
the Platform page. Regarding requests to delete, we may present you with the
choice to delete select portions of your Personal Information, but a global
option to delete all Personal Information will be offered and more prominently
presented.
2. Verification
Process: We are required by law to verify the identities of those who
submit requests to know or to delete. To determine whether the individual
making the request is the consumer about whom we have collected information, we
will verify your identity by matching the identifying information provided by
you in the request to the Personal Information that we already maintain about
you. As a part of this process, you will be required to provide your name and
email address, and mobile number (if the same have been voluntarily provided by
you at the time of registering on the Platform or otherwise while using the
Platform). We will inform you if we cannot verify your identity. Please note-
·
If we cannot verify the identity of the person
making a request for categories of Personal Information, we may deny the
request. If the request is denied in whole or in part for this reason, we will
provide a copy of, or direct you to, our Privacy Policy.
·
If we cannot verify the identity of the person
making the request for specific pieces of Personal Information, we are
prohibited from disclosing any specific pieces of Personal Information to the
requestor. However, if denied in whole or in part for this reason, we will
evaluate the request as if it is seeking the disclosure of categories of
Personal Information about the consumer.
·
If we cannot verify the identity of the person
making a request to delete, we may deny the request. If there is no reasonable
method by which we can verify the identity of the requestor to the degree of
certainty required, we will state this in our response and explain why we have
no reasonable method by which we can verify the identity of the requestor.
·
Authorized Agents: Authorized agents
may submit requests via the methods identified in this Policy. If you use an
authorized agent to submit a request to know or a request to delete, we may
require you to: (1) provide the authorized agent with signed permission to do
so; (2) verify your identity directly with us; and (3) directly confirm with us
that you provided the authorized agent permission to submit the request.
However, we will not require these actions if you have provided the authorized
agent with power of attorney pursuant to the California Probate Code.
·
Excessive Requests: If requests from
a User are manifestly unfounded or excessive, in particular because of their
repetitive character, we may either (1) charge a reasonable fee, or (2) refuse
to act on the request and notify the User of the reason for refusing the request.
If we charge a fee, the amount will be based upon the administrative costs of
providing the information or communication or taking the action requested.
CCPA Non-Discrimination: You have the right not to receive
discriminatory treatment by us due to your exercise of the rights provided by
the CCPA. We do not offer financial incentives and price or service
differences, and we do not discriminate against Users/consumers for exercising
their rights under the CCPA.