Policy

Privacy Policy

This policy explains what personal data we collect when you use learn.networkwithmohsin.com, why we collect it, who processes it on our behalf, and the rights you have over it. We comply with the Digital Personal Data Protection Act 2023 (India) and, for users in the EU and UK, the General Data Protection Regulation.

1. What we collect

Account and contact data

• Name, email address, country, phone number
• Password (stored as a one-way hash, never in readable form)
• Profile photo, if you upload one

Billing data

• Billing name, billing address, GSTIN if you supply one
• Order and invoice records
• We do not store card numbers. Payment gateways handle those directly.

Learning data

• Course enrolments, progress and completion data
• Quiz and assessment results
• Certificate records and candidate IDs
• Lab access credentials issued to you

Technical data

• IP address, device and browser type, timestamps
• Usage analytics: pages viewed, time on lesson, video watch data

2. Why we collect it

We collect and use your personal data for the specific purposes below, and no others without your consent.

• Delivering the course: account access, progress tracking, video delivery, lab provisioning.
• Issuing certificates: generating and verifying credentials tied to your candidate ID.
• Processing payments: passing transaction details to the payment gateway you choose at checkout.
• Statutory invoicing and tax records: creating invoices, GST records, and financial statements required by law.
• Support: responding to your questions and resolving issues.
• Marketing communications: only if you have given explicit consent, and you can withdraw it at any time.
• Security and abuse prevention: detecting unauthorised access and platform misuse.

3. Who processes your data on our behalf

We use the following processors. Each is bound by a data processing agreement.

4. Cross-border transfer

Some of the processors above are located outside India. Your data may therefore be processed outside India in the course of delivering the services above.

For users in the EU and UK, transfers outside your region are made under the transfer mechanisms permitted by GDPR, including the European Commission's Standard Contractual Clauses where applicable.

5. How long we keep it

• Account and learning records: while your account is active, plus a defined period after account closure to allow for reactivation and complete our records.
• Invoices and financial records: retained as required under the Companies Act and GST law, regardless of any erasure request, because statutory obligations override deletion.
• Access logs and security records: for a minimum period required under law, then deleted.
• Marketing consent records: for as long as consent is active, plus a short period after withdrawal to prove the withdrawal was actioned.

6. Your rights

Under Indian law (DPDP Act 2023), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request erasure of data we are not legally required to retain
• Withdraw consent for marketing at any time
• Nominate another person to exercise these rights in the event of your incapacity
• Have your grievance addressed within 90 days

Under EU and UK GDPR, you additionally have the right to data portability, to object to processing, and to restrict processing in specific circumstances.

To exercise any of these rights, email grievance@networkwithmohsin.com. We will verify your identity before actioning the request.

7. Security

We protect your data with the following measures:

• Encryption of data in transit using TLS
• Access controls limiting who can view personal data
• Admin credentials held in a password manager with hardware two-factor authentication
• Regular review of processor security practices

8. Data breach notification

If we become aware of a personal data breach affecting you, we will notify you without undue delay and report the breach to the Data Protection Board of India within 72 hours as required under law.

9. Children

Our services are intended for users aged 18 years and above. We do not knowingly collect personal data from children below this age. If you believe we have collected data from a child, please contact us immediately at grievance@networkwithmohsin.com and we will delete it.

10. Cookies and analytics

We use cookies and similar technologies to operate the platform, remember your preferences, and understand how the platform is used. For visitors in the EU and UK, non-essential cookies fire only after your consent through our cookie banner.

You can control cookies through your browser settings. Blocking essential cookies may prevent you from signing in or using core features.

11. Changes to this policy

We may update this policy from time to time. The effective date at the bottom shows when the current version was published. Material changes will be announced to registered users by email at least 14 days before they take effect.

12. Contact and grievance redressal

For any question, request or complaint about your personal data:

• Grievance Officer: Mohammed Mohsin, Founder
• Email: grievance@networkwithmohsin.com
• Response time: 3 business days for acknowledgment, resolution within 90 days as required under DPDP.