Privacy Policy

Last updated 9 Oct 2026

This Privacy Policy explains how [Registered company name — to be added], trading as Ace Skills Consulting (“Ace Skills”, “we”, “us”), collects, uses, stores and protects your personal data when you use our website, contact us, or enrol in our training. We act as a Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made under it.

Summary: we collect only what we need to respond to your enquiry and deliver training; we do not sell your data; you can withdraw consent, access, correct or erase your data at any time by contacting our Grievance Officer.

Who we are

Legal entity: [Registered company name — to be added]
Registered office: [Registered office address — to be added]
CIN / LLPIN: [CIN / LLPIN — to be added, if applicable]
Offices: Chennai — [Chennai office address — to be added]; Delhi — [Delhi office address — to be added]
Contact: [General support email address — to be added]

Personal data we collect

Data you give us

When you fill in an enquiry, brochure, callback, corporate quote or enrolment form, we collect:

Your name, email address and phone number.
Your country and, where you provide it, your company or organisation.
The course, category or training you are interested in, and any message you write.
Your choice on optional marketing communications.
For learners under 18: a confirmation from, and the contact details of, a parent or guardian.
For enrolment: billing details needed to issue a GST invoice, such as a billing address and, for businesses, a GSTIN.

When you give consent on a form, we keep a record of it so we can show what you agreed to and when. The record contains the version of the notice you saw, the date and time, your browser’s user-agent string, and a one-way hashed (not readable) form of your IP address.

Data collected automatically

The page from which you submitted a form, the referring website, and campaign tags (UTM parameters) in the link you followed.
A currency-preference cookie and other essential cookies described in our Cookie Policy.
Analytics data about how pages are used — only if you accept analytics cookies.

We do not ask for sensitive information such as financial account passwords, health information or government identity numbers through our website forms.

Why we use your data

To respond to your enquiry — for example, to contact you about the course you asked about and to send the brochure you requested.
To arrange and deliver training you enrol in, including joining instructions, schedules, materials, attendance and certificates of completion.
To issue invoices and meet our tax, accounting and legal obligations.
To prepare quotes and deliver programmes for corporate clients.
To send you updates about courses and offers — only if you have opted in, and you can opt out at any time.
To understand and improve how our website is used — only with your consent to analytics cookies.
To keep our website secure and prevent misuse, such as spam submissions.

We process your data on the basis of your consent, or where the law permits it for certain legitimate uses — for example, where you have voluntarily provided data for a specific purpose, or where we must comply with a legal obligation. We do not sell your personal data.

We share personal data only with service providers (Data Processors) who help us run our business, under contracts that require them to protect it and use it only on our instructions. These include:

Website hosting and database: [Website hosting and database provider — to be confirmed]
File and media storage: Cloudflare R2 (Cloudflare, Inc.)
Email delivery: [Email delivery provider — to be confirmed]
Customer relationship management: [CRM provider — to be confirmed, if used]
Analytics: Google Analytics 4 (Google LLC) — only with your consent
Advertising measurement: Meta Platforms pixel — only with your consent, if used
Payments: [Payment gateway — to be confirmed (Phase 2)]

We may also share data with a trainer assigned to your batch (limited to what they need to deliver the class), with your employer where your employer has arranged the training, with a certification body or exam provider only when you ask us to book an exam for you, and with authorities where required by law.

Processing outside India

Some of our hosting, storage, email and analytics providers may store or process personal data on servers outside India. Where this happens, we transfer data only to countries not restricted by the Government of India under the DPDP Act, and we choose providers that apply appropriate security safeguards.

How long we keep it

Enquiries that do not lead to an enrolment: deleted or anonymised 24 months after our last contact with you, unless you ask us to delete them sooner.
Enrolment, invoice and payment records: kept for the period required by Indian tax and accounting laws.
Consent records: kept for as long as needed to show that we obtained, and respected, your consent — including after you withdraw it.
Marketing preferences: kept until you opt out; after that we keep only the minimum needed to make sure we do not contact you again.

Your rights

As a Data Principal under the DPDP Act, you have the right to:

Access — obtain a summary of the personal data we hold about you and how we use it, and the identities of those we have shared it with.
Correction and completion — ask us to correct inaccurate or incomplete data, or update it.
Erasure — ask us to delete your data where it is no longer needed for the purpose it was collected for, unless we must keep it by law.
Grievance redressal — raise a complaint with our Grievance Officer and receive a response.
Nomination — nominate another person to exercise your rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, use the form on our Grievance page or email [Grievance email address — to be added]. We may need to verify your identity before acting on a request.

You can withdraw your consent at any time, as easily as you gave it:

Use the “Withdraw consent / delete my data” form on our Grievance page.
Email [Grievance email address — to be added] from the address you used with us.
Unsubscribe from marketing using the link in any marketing email.
Change your cookie choices at any time through “Cookie Settings” in the website footer.

Withdrawing consent does not affect processing already carried out. If you withdraw consent while enrolled, we may be unable to continue providing the training, and we will still keep records the law requires.

Children

Our services are intended for adults. If a learner is under 18, a parent or lawful guardian must make the enquiry or enrolment, or give verifiable consent on the learner’s behalf. We do not knowingly use the data of under-18s for behavioural tracking or targeted advertising. If you believe a child has given us data without a guardian’s consent, please contact us and we will delete it.

Cookies

We use essential cookies to run the site (for example, to remember your currency preference). Analytics and marketing cookies are used only if you accept them in our cookie banner. See our Cookie Policy for details.

Security

We use reasonable security safeguards, including encrypted connections (HTTPS), access controls limited to staff who need the data, hashing of IP addresses in consent records, and contractual obligations on our processors. If a personal data breach occurs, we will notify affected individuals and the Data Protection Board of India as required by law.

Grievance Officer

Name: [Grievance Officer name — to be added]
Designation: [Grievance Officer designation — to be added]
Email: [Grievance email address — to be added]
Phone: [Grievance phone number — to be added]
Address: [Registered office address — to be added]

We acknowledge grievances within 48 hours and aim to resolve them within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed. If we make significant changes to how we use your data, we will tell you and, where required, ask for your consent again.