Privacy Policy

1. Introduction

Welcome to Sure Success Ayurveda Classes ("we", "our", "us"). This Privacy Policy describes how we collect, use, process, and protect your personal information when you use our website, learning management system (LMS), mobile applications, and related educational services (collectively, the "Platform").

By accessing or using our Platform, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Platform.

This Privacy Policy is published in compliance with the Information Technology Act, 2000 and the rules made thereunder, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as well as the Digital Personal Data Protection Act, 2023 (DPDPA) of India, where applicable.

2. Information We Collect

We collect the following types of information:

2.1 Personal Information You Provide

• Account Information: Full name, email address, phone number, and password when you register for an account.
• Profile Information: Profile picture, date of birth, educational qualifications, areas of interest, and professional background.
• Communication Data: Messages, queries, feedback, and any correspondence you send to us.
• Payment Information: Billing address, transaction details, and payment method information (processed securely through our payment partners; we do not store full credit/debit card numbers).
• Educational Data: Course enrollments, quiz/test responses, assignment submissions, progress tracking data, and certificates earned.

2.2 Information Collected Automatically

• Device Information: Device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, time spent on pages, click patterns, courses accessed, videos watched, learning duration, and features used.
• Log Data: IP address, access dates and times, referring URLs, and error logs for troubleshooting.
• Location Data: General geographic location inferred from your IP address (we do not collect precise GPS location).

2.3 Cookies and Similar Technologies

We use cookies, session tokens, and similar tracking technologies to maintain your session, remember your preferences, and improve your experience. Please see Section 5 for more details.

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To create and manage your account, provide access to courses, track your learning progress, and issue certificates.
• Authentication & Security: To verify your identity via OTP (One-Time Password), passwords, or social login, and to protect your account from unauthorized access.
• Personalization: To customize your learning experience, recommend courses based on your interests, and provide tailored content.
• Communication: To send you important notifications such as OTP codes, enrollment confirmations, course updates, reminders, and announcements.
• Payment Processing: To process course purchases, subscriptions, refunds, and maintain billing records.
• Analytics & Improvement: To analyze usage patterns, improve our Platform features, develop new courses, and enhance user experience.
• Customer Support: To respond to your inquiries, troubleshoot issues, and provide technical support.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforcing our terms and conditions.
• Marketing: With your consent, to send promotional offers, newsletters, and updates about new courses and features. You can opt out at any time.

4. Data Storage & Security

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction.

Security Measures Include:

• Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS (HTTPS) protocols.
• Password Security: User passwords are hashed using secure one-way hashing algorithms. We never store passwords in plain text.
• OTP Authentication: OTP codes are time-limited and hashed before storage for additional security.
• Access Controls: Access to personal data is restricted to authorized personnel only, on a need-to-know basis.
• Regular Backups: We perform regular backups of our databases to prevent data loss.
• Secure Infrastructure: Our servers are hosted on secure, professional hosting infrastructure with firewall protections.

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

5. Cookies & Tracking Technologies

We use the following types of cookies:

5.1 Essential Cookies

These are necessary for the Platform to function properly. They include session cookies that maintain your login state and CSRF (Cross-Site Request Forgery) protection tokens for security.

5.2 Functional Cookies

These remember your preferences, such as language settings, theme preferences (dark/light mode), and other customization options.

5.3 Analytics Cookies

We may use analytics tools to understand how users interact with our Platform, which pages are most visited, and how we can improve. These cookies collect anonymized, aggregated data.

5.4 Managing Cookies

You can manage or delete cookies through your browser settings. However, disabling essential cookies may affect the functionality of our Platform, including the ability to log in and access courses.

6. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our Platform (e.g., email delivery services, payment processors, hosting providers). These providers are bound by contractual obligations to keep your data confidential.
• Legal Requirements: When required by law, regulation, legal process, or governmental request, or to protect our rights, privacy, safety, or property.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. You will be notified of any such change.
• With Your Consent: For any purpose not described here, we will seek your explicit consent before sharing your information.

7. Third-Party Services

Our Platform may integrate with or utilize the following third-party services:

• Email Services: We use third-party email service providers (SMTP services) to send transactional emails such as OTP codes, registration confirmations, and notifications.
• Payment Gateways: Payment transactions are processed through secure, PCI-DSS compliant payment gateways. We do not store your full payment card details on our servers.
• Social Login: If you choose to log in using Google or other social login providers, we receive limited profile information (name, email, profile picture) as authorized by you through their platform.
• Content Delivery Networks (CDNs): We may use CDNs to deliver static content (styles, fonts, icons) for faster loading times.

Each of these third-party services has its own privacy policy. We encourage you to review their policies to understand how they handle your data.

8. Your Rights

As a user, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Correction: You can update or correct your personal information through your profile settings or by contacting us.
• Right to Erasure: You can request the deletion of your account and associated personal data, subject to any legal obligations we may have to retain certain information.
• Right to Withdraw Consent: Where we process your data based on consent, you may withdraw your consent at any time by contacting us. This will not affect the lawfulness of processing carried out prior to withdrawal.
• Right to Data Portability: You may request your data in a commonly used, machine-readable format.
• Right to Object: You can object to certain types of processing, including marketing communications, by using the unsubscribe link in our emails or by contacting us.
• Right to Complain: You have the right to lodge a complaint with the relevant data protection authority if you believe your data has been mishandled.

To exercise any of these rights, please email us at suresuccessayurvedacoaching@gmail.com.

9. Children's Privacy

Our Platform is primarily intended for users who are 18 years of age or older. We do not knowingly collect personal information from children under 18 without verifiable parental consent. If you are a parent or guardian and you believe your child has provided us with personal information, please contact us at suresuccessayurvedacoaching@gmail.com, and we will take steps to delete such information.

10. Data Retention

We retain your personal information for as long as:

• Your account remains active on our Platform.
• It is necessary to provide you with our services.
• Required by applicable laws and regulations (e.g., financial transaction records, tax compliance).
• Needed to resolve disputes, enforce agreements, or for other legitimate business purposes.

Upon account deletion, we will delete or anonymize your personal data within a reasonable timeframe, except where retention is required by law. Anonymized, aggregated data that cannot identify you may be retained indefinitely for analytical purposes.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered users via email for significant changes.
• Display a prominent notice on our Platform when applicable.

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Platform after changes are posted constitutes your acceptance of the revised policy.

12. Grievance Redressal

In accordance with the Information Technology Act, 2000 and applicable rules, if you have any complaints, concerns, or grievances regarding the processing of your personal data, you may contact our Grievance Officer:

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: