This Privacy Policy explains how Zaufany collects, uses, discloses, and protects personal information about visitors, customers, learners, partners, and other users of our websites, services and products (collectively, the “Services”). We are committed to protecting your privacy and handling your information transparently.

1. Scope

This policy applies to personal data collected via: our websites (including zaufany.in), blogs, web forms, demo requests, learning platforms (LMS / Robo Review), emails, events, and other interactions where we collect information. It does not apply to information collected by third parties (see Third Parties below).

2. Types of data we collect

We collect the following categories of information when necessary to provide Services, operate our business, or comply with legal obligations:

CategoryExamplesPurpose
Contact & account dataFull name, email, phone, company name, job title, billing addressAccount setup, billing, support, communications
CredentialsUsernames, hashed & salted passwords, OAuth tokensAuthentication & account security
Platform & usage dataLogs, pages visited, features used, upload metadata, timestampsTo operate Services, analytics, and product improvements
Payment & billingPayment card details (via secure third-party processors), invoicesBilling & fraud prevention
Learning & assessment dataTraining enrolments, scores, feedback, submissionsCourse delivery, evaluation, improvements
Device & connection dataIP address, device type, browser, operating systemSecurity, diagnostics, geo-localisation (approx.)
Marketing & preferencesSubscription preferences, communications historyPersonalised communications and offers

We limit collection to what is necessary for each purpose and retain data only as long as needed (see Retention).

3. How we use your information

  • To provide, operate and maintain our Services (including account management, course delivery, and platform features).
  • To process transactions and send related information such as invoices and order confirmations.
  • To communicate with you — customer service, updates, security alerts, and marketing (with opt-out where required).
  • To personalise your experience and to provide content tailored to your needs.
  • For analytics, product development, and improving user experience.
  • To detect, investigate and prevent fraudulent or illegal activities and to protect our rights, property, and users.

Where applicable under data protection laws (for example, the GDPR for EU data subjects), we rely on one or more of the following legal bases:

  • Performance of a contract (to provide services you requested).
  • Legal compliance (to meet legal or regulatory obligations).
  • Legitimate interests (e.g., security, fraud prevention, product improvement) — balanced against individuals’ rights.
  • Consent (for marketing communications, cookies not strictly necessary, or other optional processing). You can withdraw consent at any time where consent was the basis.

5. Cookies and similar technologies

We use cookies, web beacons, and similar technologies to operate the Services and enhance the user experience. Cookies may be:

  • Essential: Required for core functionality (session management, security).
  • Performance & analytics: To understand usage patterns and improve the product.
  • Functional & preferences: To remember user choices and settings.
  • Marketing: To measure campaigns and show relevant content.

You can control cookie preferences via your browser or opt-out where provided in our cookie banner. Blocking cookies may limit some features.

6. Third-party services and disclosures

We share personal information only when necessary and with trusted third parties who help us deliver Services, including:

  • Payment processors (for secure payment handling).
  • Hosting & cloud providers (e.g., for storing data).
  • Analytics providers (aggregate usage measurement).
  • Email delivery & communication platforms.
  • Professional advisors (legal, audit) where required.

We enter into agreements to protect personal data and require partners to process data only on our instructions. We do not sell personal data to third parties.

7. International transfers

Because we operate globally, personal data may be transferred to and processed in countries other than your country of residence. Where transfers occur, we use appropriate safeguards such as standard contractual clauses or other lawful transfer mechanisms to ensure an adequate level of protection.

8. Security

We implement industry-standard technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. These include encryption in transit (TLS), access controls, and regular security assessments. However, no system is completely secure. If a security incident affecting your data occurs, we will notify you and regulators as required by law.

9. Data retention

We retain personal data only for as long as necessary for the purposes described in this policy, to comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data category; for example:

  • Account & transaction records: typically retained for 6–7 years for tax & audit compliance.
  • Learning & assessment records: retained for the duration of your relationship and as required by contract or law.
  • Support and communications: retained for up to 3 years unless otherwise required.

10. Your rights

Subject to local law, you may have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Request erasure (delete) of your personal data.
  • Request restriction or object to processing.
  • Request portability of your data in a structured, commonly used format.
  • Withdraw consent (where processing is based on consent).

To exercise your rights, contact us using the details below. We may ask for information to verify your identity before responding. We will respond within the timeframes required by applicable law.

11. Children’s privacy

Our Services are not directed to children under 16 (or a higher age if required by local law). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us to request deletion.

Our Services may contain links to third-party sites. We are not responsible for their privacy practices. Please read the privacy policies of any site you visit.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes, we will post the updated policy with a new effective date and, where appropriate, notify users by email or notice on our site.

14. Contact & data protection officer

If you have questions, requests, or concerns about this policy or our data practices, please contact:

Zaufany Training and Consulting Private Limited
4th Floor, MR Prime, Leeway Survey No. 6, BP Raju Marg, White Fields,
Kondapur, Hyderabad, Telangana 500084, India
Email: contact@zaufany.in
Website: zaufany.in

If you are located in the EU/EEA/UK and wish to exercise data subject rights or have a complaint, you may also contact your local data protection authority.

15. Specific notices (GDPR, CCPA & similar)

GDPR: For EU/EEA data subjects, the purposes and legal bases for processing are described above. For data access, correction, deletion, and portability requests, contact us at contact@zaufany.in.

CCPA / CPRA (California): If you are a California resident, you may have additional rights regarding access, deletion, and opt-out of sale of personal information. We do not sell personal data. To make a request, please email contact@zaufany.in and include “CCPA Request” in the subject line.

16. Complaints

If you are dissatisfied with our response to a privacy request, please contact us. You may also lodge a complaint with your local data protection authority.

Effective date: July 24, 2023

Zaufany Training and Consulting Private Limited is the controller of personal data for the Services. Registered office: 4th Floor, MR Prime, Leeway Survey No. 6, BP Raju Marg, White Fields, Kondapur, Hyderabad, Telangana 500084, India.