Growth Grid

Privacy Policy

Growth Grid Academy (“We,” “Us,” or “Our”) is committed to protecting the privacy and personal data of all individuals who interact with our Website, [URL] and Services. This Privacy Policy is prepared in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and, to the extent applicable, the laws and regulations of the United Arab Emirates governing data protection.

This Policy explains how We collect, use, store, protect, and disclose personal data. By using Our Website or submitting information to Us, You consent to the practices described in this Policy.

1. IDENTITY OF THE DATA FIDUCIARY

The Data Fiduciary, as defined under the DPDP Act, 2023, is:
Growth Grid Academy
Whitefield, Bangalore, Karnataka, India
Email: info@growthgridacademy.com
(Hereinafter referred to as the “Data Fiduciary”)

2. PERSONAL DATA WE COLLECT

We collect the following categories of personal data through the enquiry and booking form on the Website:

A. For Individuals:

  • Full Name
  • Phone Number
  • Email Address
  • Category: Individual (company name field is greyed out and not collected)

B. For Corporate / Business Enquiries:

  • Full Name of the Contact Person
  • Company Name (mandatory)
  • Role / Designation within the Organisation (mandatory)
  • Team Size (mandatory)
  • Primary Challenge / Training Requirement (mandatory)
  • Phone Number
  • Email Address

We do not collect any sensitive personal data or information (“SPDI”) as defined under the SPDI Rules, such as financial information, health data, biometric data, or government-issued identification numbers. Users are responsible for ensuring that the personal data submitted to us remains accurate and up to date.

3. METHOD OF COLLECTION

Personal data is collected solely through the contact and enquiry form available on the Website. No personal data is collected through cookies, web beacons, pixel tags, or similar tracking technologies at this time.

4. PURPOSE OF PROCESSING

Personal data collected by the Academy is processed for the following legitimate purposes:

  • To respond to Your enquiry and assess the suitability of Our Services for Your needs;
  • To provide information regarding Our programs, pricing, and availability;
  • To confirm and administer bookings and engagements;
  • To communicate with You regarding Your enquiry, training schedule, and related matters;
  • We may send information regarding our programs, workshops, newsletters, events, educational resources, and service offerings. Users may opt out of marketing communications at any time by contacting us or following the unsubscribe instructions included in such communications.
  • To maintain records as required for compliance with Applicable Laws.

We do not process Your personal data for any purpose other than those stated above, unless You provide explicit consent for any additional processing.

5. LEGAL BASIS FOR PROCESSING

We process Your personal data on the following grounds:

  • Consent: Processing occurs upon Your voluntary submission of the enquiry form and Your agreement to this Privacy Policy.
  • Legitimate Use: Processing is necessary for the purposes for which data has been provided by You.

6. DISCLOSURE AND SHARING OF PERSONAL DATA

6.1 We do not sell, rent, or trade Your personal data to any third party.

6.2 We may engage third-party service providers including CRM providers, cloud hosting providers, communication platforms, email service providers, customer support systems, payment processors, analytics providers, and similar business service providers for the operation and improvement of our Services.

6.3 We may disclose personal data where required by law, regulation, court order, governmental authority, law enforcement agency, or to protect our legal rights and interests.

7. CROSS-BORDER TRANSFER OF DATA

7.1 Users located outside India acknowledge that personal data may be processed and stored in India or other jurisdictions where our service providers operate.

7.2 Any cross-border transfer of personal data shall be undertaken in compliance with the provisions of Section 16 of the DPDP Act, 2023, and any rules notified thereunder by the Central Government permitting or restricting transfer to specific countries or territories.

7.3 For UAE-based Users, the Academy shall endeavour to comply with the applicable data protection requirements under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“UAE PDPL”) and the relevant regulations and guidelines issued thereunder.

8. DATA RETENTION

8.1 We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by Applicable Laws.

8.2 In general, personal data submitted through enquiry forms shall be retained for a period not exceeding three (3) years from the date of last interaction, after which it shall be securely deleted or anonymised.

8.3 Where an engagement is entered into, relevant personal data may be retained for such period as is necessary to comply with legal, tax, and contractual obligations.

9. DATA SECURITY

9.1 The Academy implements reasonable technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction, in accordance with the requirements of the SPDI Rules and the DPDP Act, 2023.

9.2 Notwithstanding the foregoing, no data transmission over the internet or electronic storage system can be guaranteed to be completely secure. The Academy shall not be liable for any unauthorised access or security breach beyond its reasonable control.

9.3 In the event of a personal data breach that is likely to adversely affect Your rights or interests, We shall notify the Data Protection Board of India (upon its establishment) as required by the DPDP Act, and shall take reasonable steps to inform affected individuals in accordance with applicable legal requirements.

10. RIGHTS OF DATA PRINCIPALS

Under the DPDP Act, 2023, You, as a Data Principal, have the following rights in respect of Your personal data:

  • Right to Access: To obtain information about the personal data held by Us and the purposes for which it is being processed.
  • Right to Correction and Erasure: To request the correction of inaccurate or incomplete data, and to request erasure of data that is no longer necessary or where consent has been withdrawn.
  • Right to Grievance Redressal: To seek redressal of any grievance relating to processing of Your personal data.
  • Right to Nominate: To nominate an individual to exercise Your rights in the event of Your death or incapacity.
  • Right to Withdraw Consent: To withdraw Your consent to processing at any time, subject to the consequences under applicable law. Withdrawal of consent shall not affect the lawfulness of processing prior to such withdrawal.

To exercise any of the above rights, please contact Us at: info@growthgridacademy.com
We shall respond to any request within such period as prescribed under the DPDP Act and applicable rules.

11. COOKIES AND ANALYTICS

As of the effective date of this Policy, this Website does not use cookies, tracking pixels, or website analytics tools. If this practice changes in the future, this Privacy Policy will be updated accordingly and Users will be notified.

12. CHILDREN’S DATA

Our Services are intended for adults and business professionals. We do not knowingly collect personal data from individuals below the age of eighteen (18) years. If We become aware that personal data of a minor has been inadvertently collected, We shall delete it without undue delay.

13. BUSINESS TRANSFERS

In the event of a merger, acquisition, restructuring, asset sale, business transfer, or similar corporate transaction, personal data may be transferred to the acquiring or successor entity subject to applicable legal requirements.

13. GRIEVANCE REDRESSAL

In accordance with the Information Technology Act, 2000, and the DPDP Act, 2023, any grievance relating to the processing of personal data may be directed to:

Grievance Officer / Data Protection Contact
Shrutika Bidikar
Growth Grid Academy
Whitefield, Bangalore, Karnataka, India
Email: info@growthgridacademy.com

We shall acknowledge and endeavour to resolve all grievances within thirty (30) days of receipt.

14. AMENDMENTS TO THIS PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or Service offerings. Any amendments shall be effective upon publication on the Website. We encourage Users to review this Policy periodically. Where material changes are made, We shall endeavour to provide reasonable notice.

15. CONTACT INFORMATION

If You have any questions, concerns, or requests in relation to this Privacy Policy or Our data practices, please contact Us at:

Growth Grid Academy
Whitefield, Bangalore, Karnataka, India
Email: info@growthgridacademy.com