Privacy
What we keep about you, why, who sees it and what you can ask us to do.
NIBVEDA, RZ A-87, Upper Ground, Sitapuri Part-2, Dabri Extn, New Delhi - 110045, decides why and how your personal data is used on NIBVEDA Internships (in the language of the Digital Personal Data Protection Act, 2023, we are the data fiduciary).
What we collect, and why
- Account: your name, email address, a password (kept only as a one-way hash, never in a readable form) and, if you give them, your phone number and college. To create your account, sign you in, send you messages and print your name on your certificate.
- Orders: what you bought, the amount, the GST, the invoice number, the payment reference and whether it was refunded. To confirm your order, give you an invoice and meet our tax and accounting duties.
- Learning: the parts you opened and finished, quiz answers and scores, ticked tasks, the links and notes you submit, and any reviewer comments. To run the programme, unlock the next part, review your work and decide when to issue your certificate.
- Security: sign-in attempts with the time and your internet address, and a session record while you are signed in. To protect your account from guessing and misuse.
- Your messages to us and our replies, to answer your questions and refund requests.
We use your data only for these purposes, because you gave it to us to use the service (your consent) or because the law lets or requires us to (for example keeping invoices). We do not sell your data and we do not use it for advertising.
Payments
Card, UPI and bank details are entered with the payment provider (Razorpay, or the test provider on a rehearsal server). We never see or store them. We receive a payment reference and the result.
Who else handles your data
We use a few service providers to run the site: payment processing, email delivery and hosting. They handle data only to provide that service to us and under their own duties of confidentiality and security. We may also share data where the law or a court requires it. We do not share your data with advertisers.
What the public can see
The verification page for a certificate shows only what is printed on it: your name, the programme, level, hours and skills, the issue date and the certificate number. It does not show your email, phone, orders or progress. Anyone with the certificate number, link or QR code can see it, which is the point of verification, so share the link only where you want it seen.
Cookies and storage
The site keeps your sign-in in your browser's own storage so that you stay signed in. We do not use advertising or tracking cookies.
How long we keep it
We keep your account and learning records while your account is open. Invoices and payment records are kept for as long as tax and accounting law requires (several years). If you close your account, we delete or anonymise the rest, except what is needed for an issued certificate to stay checkable (your name, the programme and the dates) and for the records the law requires. Sign-in records are kept for a short period for security.
Your rights
You can ask us to show you the data we hold about you, to correct it, to delete it (subject to what we must keep), to withdraw your consent, and to name someone to exercise these rights for you if you cannot. Write to the email address in the page footer from the address on your account. We reply within 7 days. Withdrawing consent may mean we can no longer provide the service to you.
Younger people
The service is for people aged 18 and over. Younger learners need a parent or guardian to create the account and to give consent on their behalf, and we will remove an account that was created without it.
Keeping it safe
We use encrypted connections, store passwords only as hashes, limit who in the team can see your data and keep a record of what the team does with it. No system is perfectly safe. If a breach affects your personal data we will tell you and the authorities as the law requires.
Complaints
If you are unhappy with how we handle your data, write to the grievance contact: send an email to the address in the footer with “Grievance” in the subject, and we will acknowledge it within 3 working days and answer within 15. If you are still not satisfied you can complain to the Data Protection Board of India once it is in place.