Privacy Policy

Redemy - RedR India ("we", "us") operates this online learning platform. This policy explains what personal data we collect, why we collect it, and the choices you have. It is written to meet the Digital Personal Data Protection Act, 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

1. Who we are

The data fiduciary for this platform is RedR India, Flat No. 402, B Building, Wonder Futura Phase II, Off. Pune Bengaluru Highway, Near Vasudha Etasha Building, Kothru, Pune, Maharashtra, 411038. You can reach us at [email protected].

2. What we collect

• Account details — your name, email address, and any profile information you choose to add.
• Enrolment and learning activity — the courses you enrol in, lessons and videos you complete, quiz attempts and scores, and certificates issued to you.
• Billing details — the billing name, address, state and GSTIN you enter at checkout. These are required to raise a valid tax invoice under GST law.
• Payment data — card and bank details are collected and processed by our payment gateway. We never see or store them; we receive only the payment reference and its status.
• Technical data — IP address, browser and device type, and pages requested, recorded in server logs.

3. Why we use it

• To give you access to the courses you have enrolled in and to track your progress and certification.
• To take payment, raise a GST tax invoice and meet our accounting and tax obligations.
• To send service messages: enrolment confirmations, receipts, reminders about courses you have started, and changes to a course you are on.
• To keep the platform secure, prevent misuse, and diagnose faults.
• To improve our courses using aggregate, non-identifying statistics.

4. Marketing messages

We send promotional email only where you have opted in, and every such email carries an unsubscribe link. Unsubscribing does not stop service messages about a course you have paid for.

5. Who we share it with

We do not sell your personal data. We share it only with processors who help us run the platform, and only as far as each needs:

• Razorpay — to take and confirm payment.
• Hostinger — to host the site and deliver course video.
• AWS SES — to send transactional email.
• Our auditors and tax authorities, where the law requires it.

Where a course is delivered with a partner organisation, we tell you at the point of enrolment and share only what that partner needs to run and certify the training.

6. How long we keep it

Account and learning records are kept while your account is open and for 2 years afterwards, so certificates remain verifiable. Invoices and payment records are kept for eight years, as required under GST and the Companies Act. Server logs are kept for 90 days.

7. Your rights

You may ask us to give you a copy of your data, correct it, or erase it; you may withdraw a consent you have given; and you may nominate someone to exercise these rights on your behalf. Write to [email protected] and we will respond within 2 days. Some data cannot be erased on request where we are legally required to retain it, such as tax invoices.

8. Security

The site is served over HTTPS, passwords are stored hashed, course video is served through short-lived signed links, and access to production data is restricted to staff who need it. No system is perfectly secure; if a breach affects your data we will notify you and the Data Protection Board as required.

9. Cookies

We use cookies that are strictly necessary to keep you signed in and to protect forms against cross-site request forgery.

10. Children

This platform is intended for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has registered, contact us and we will remove the account.

11. Changes to this policy

We will post any change on this page and update the date shown at the top. A material change will also be emailed to registered learners.

12. Grievance Officer

Under the Information Technology Act, 2000 and the DPDP Act, 2023, our Grievance Officer is reachable at [email protected]. We acknowledge complaints within 24 hours and resolve them within 15 days. If you are not satisfied, you may complain to the Data Protection Board of India.