Privacy Policy
GreaterInsights LLP ("Greater Insights", "we", "us" or "our") operates the website at greaterinsights.in and provides live, instructor-led professional training courses. We are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, how long we keep it, and the rights you have over it. Please read it carefully. By using our website, enrolling in a course, or otherwise sharing your information with us, you acknowledge that you have read and understood this Policy.
1. Introduction & Scope
This Policy applies to all personal data we collect through our website, course enrolment and enquiry forms, payment and billing processes, communications (including WhatsApp, SMS and email), and our customer relationship management (CRM) systems. It covers prospective, current and former learners, website visitors, and anyone who contacts us.
For the purposes of India's Digital Personal Data Protection Act, 2023 (DPDP Act), GreaterInsights LLP is the Data Fiduciary that determines the purpose and means of processing your personal data, and you are the Data Principal. We also act consistently with the Information Technology Act, 2000 and the rules made under it. Where we serve learners in the European Union or the United Kingdom, the brief GDPR section at the end of this Policy also applies.
2. Personal Data We Collect
We collect only the data we need to provide and improve our training services. Depending on how you interact with us, this may include the following categories:
- Identity & contact data — your name, email address, phone or WhatsApp number, city and country, and (where you choose to provide it) your job title and organisation.
- Educational & professional data — your professional background, qualifications, areas of interest, learning goals, course preferences, attendance and progress, and any feedback or queries you submit.
- Payment & billing data — billing name and address, invoice details, transaction records and payment status. Card and bank-instrument data are handled by our payment processor and are not stored by us (see Section 9). Where required for invoicing or refunds, we may collect your GST number, and your PAN or bank details (see Section 10).
- Technical & usage data — your IP address, browser type and version, device and operating-system information, referring pages, pages viewed, and interactions with our website, collected through cookies and similar technologies and through our server logs.
- Marketing & communication preferences — your consent choices and opt-in/opt-out preferences for course updates, reminders, offers and newsletters across WhatsApp, SMS and email.
3. How We Collect It
We collect personal data:
- Directly from you — when you fill in an enquiry, registration or enrolment form, request a callback or brochure, make a payment, communicate with us, or respond to a survey or feedback request.
- Automatically — when you browse our website, through cookies, analytics tools and server logs that record technical and usage data.
- From our service providers — for example, our payment processor confirms the status of a transaction, and our messaging and analytics tools provide delivery and engagement information.
4. Purposes & Legal Basis
We process your personal data for the following purposes, on the legal bases stated. Under the DPDP Act and applicable law, our bases for processing are your consent, the performance of a contract with you, and compliance with a legal obligation.
- To respond to your enquiries and provide information about our courses, schedules and pricing — basis: consent.
- To enrol you in a course and deliver the training, including scheduling, access, materials, attendance and certification — basis: performance of a contract.
- To process payments, issue invoices and handle refunds — basis: performance of a contract and legal obligation.
- To send you course notifications, reminders and service messages (for example batch timings and joining links) via WhatsApp, SMS or email — basis: performance of a contract and, for promotional messages, consent.
- To send you marketing communications about new courses, offers and updates — basis: consent.
- To operate, secure, analyse and improve our website and services — basis: consent for non-essential analytics, and our legitimate need to maintain a secure and functional service.
- To comply with tax, accounting and other legal requirements, and to establish, exercise or defend legal claims — basis: legal obligation.
5. Consent & Withdrawal
Where we rely on your consent, that consent is free, specific, informed, unconditional and unambiguous, given through a clear affirmative action, and limited to the purpose for which it is sought. You may give consent when you submit a form, tick a checkbox, or opt in to messages.
You have the right to withdraw your consent at any time, and withdrawing it is as easy as giving it. To withdraw consent, you can use the opt-out options described in Section 7, adjust your browser cookie settings, or contact our Grievance Officer at grievance@greaterinsights.in. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal, and we may still need to retain certain data to meet our legal obligations (see Section 11). If you withdraw consent that is necessary to deliver a course you have enrolled in, we may be unable to continue providing that service.
6. Cookies, Analytics & Tracking
We use cookies and similar technologies to make our website work, remember your preferences, and understand how the site is used so we can improve it. Essential cookies are necessary for the site to function. Non-essential analytics cookies are used only where permitted.
We use Google Analytics to collect aggregated, mostly de-identified information about how visitors use our site, such as pages visited and time spent. We do not use Meta Pixel or any advertising or retargeting pixels.
You can control or disable cookies through your browser settings. You can opt out of Google Analytics across websites by installing the Google Analytics Opt-out Browser Add-on (available at tools.google.com/dlpage/gaoptout). Disabling some cookies may affect how parts of the site work.
7. WhatsApp, SMS & Email
With your opt-in, we may contact you by WhatsApp, SMS and email to send course notifications and reminders (such as batch schedules and joining links), responses to your enquiries, transactional messages (such as payment confirmations and invoices), and — where you have consented — promotional updates.
You can opt out of promotional messages at any time:
- WhatsApp / SMS — reply STOP to any message, or tell us you wish to stop receiving them.
- Email — click the unsubscribe link in any marketing email, or email us.
Even after you opt out of marketing, we may still send you essential service or transactional messages relating to a course you have enrolled in or a payment you have made.
8. How We Share Your Data & Our Processors
We do not sell or rent your personal data. We share it only with trusted service providers (Data Processors) who process it on our behalf, under contract, and only as needed to provide our services. Our key processors and third parties are:
- Razorpay — to securely process payments and handle billing and refunds.
- Google Analytics — to measure and analyse website usage.
- WhatsApp — to deliver course notifications, reminders and permitted messages.
- Google Sheets / Google Apps Script — to manage our leads and CRM pipeline.
- cPanel hosting — to host our website and store data on our hosting infrastructure.
We may also disclose personal data where required by law, to comply with a legal obligation or valid request from a public authority, to enforce our terms, or to protect the rights, safety and property of Greater Insights, our learners or others. If our business is involved in a reorganisation, merger or transfer, your data may be transferred as part of that transaction, subject to this Policy.
9. Payment Data
Payments on our website are processed by Razorpay, a third-party payment gateway. When you make a payment, your card, UPI or bank-instrument details are collected and processed directly by Razorpay over secure, encrypted channels in accordance with applicable payment-security standards. We do not store your full card number or other complete card details on our systems. We retain only transaction-level records — such as the amount, status, and a payment reference — needed to confirm your enrolment, issue invoices and handle refunds. Your use of Razorpay is also subject to Razorpay's own privacy policy.
10. Sensitive Personal Data
In limited situations we collect data that is treated as sensitive personal data or information under the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the SPDI Rules), namely your GST number (for tax invoices) and your PAN or bank details (where needed for invoicing or to process a refund).
We collect and process this sensitive data only with your explicit consent, only for the specific purpose for which you provide it, and only to the extent necessary. You may decline to provide it, although this may prevent us from issuing a particular invoice or processing a refund by a specific method. We apply additional safeguards to this data and retain it only as long as required for tax, accounting or refund purposes.
11. Data Retention
We keep personal data only as long as necessary for the purposes set out in this Policy or as required by law. Our standard retention periods are:
- Enrolled learners' records — kept for the duration of your relationship with us and for up to 8 years thereafter, to meet tax, accounting and legal obligations.
- Raw enquiry leads (where you enquired but did not enrol) — kept for approximately 12 to 18 months.
- Analytics data and server logs — kept for approximately 14 months.
When data is no longer needed, we delete it or irreversibly anonymise it. We may retain limited information for longer where required to comply with the law or to establish, exercise or defend legal claims.
12. Security Safeguards
We implement reasonable technical and organisational security measures to protect your personal data against unauthorised access, use, alteration, disclosure or loss. These include encryption of data in transit (HTTPS), access controls and the principle of least privilege, secure and reputable hosting and payment infrastructure, and limiting access to personal data to authorised personnel and processors. While we work hard to protect your data, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.
13. Your Rights as a Data Principal
Subject to applicable law, you have the following rights over your personal data under the DPDP Act:
- Right to access — to obtain a summary of the personal data we process about you and the processing activities undertaken.
- Right to correction — to have inaccurate or incomplete data corrected, completed or updated.
- Right to erasure — to have your personal data erased where it is no longer needed for the purpose for which it was collected and no legal obligation requires us to retain it.
- Right to withdraw consent — to withdraw consent you have given, at any time, as described in Section 5.
- Right to nominate — to nominate another individual who may exercise your rights in the event of your death or incapacity.
- Right of grievance redressal — to a readily available means of raising a grievance with us about how we handle your data.
To exercise any of these rights, contact our Grievance Officer at grievance@greaterinsights.in or using the details in Section 19. We may need to verify your identity before acting on a request, and we will respond within the timelines required by applicable law.
14. Children's Data
Our services are intended for working professionals and adults. We do not knowingly process the personal data of anyone under 18 years of age without verifiable consent. Where an individual is under 18, we require verifiable consent from a parent or lawful guardian before collecting or processing their data. We do not direct any targeted or behavioural advertising at children, and we do not undertake processing likely to cause a detrimental effect on a child's well-being. If you believe a child has provided us data without the required parental consent, please contact our Grievance Officer and we will take appropriate steps to delete it.
15. International Data Transfers
Greater Insights is based in India, and your personal data is stored on infrastructure located in India. Where we use service providers that may process limited data outside India (for example global analytics or messaging platforms), we take reasonable steps to ensure your data continues to be protected in line with this Policy and applicable law. If you access our services from outside India, you understand that your data will be processed in India for the purposes described in this Policy.
16. Data Breach
We maintain procedures to detect, respond to and manage personal data breaches. In the event of a personal data breach, we will notify the Data Protection Board of India and the affected Data Principals without undue delay, in the manner and within the timelines required by the DPDP Act, and we will take prompt steps to contain the breach and reduce any harm.
17. Links to Third-Party Sites
Our website may contain links to third-party websites, tools or services that we do not operate or control. This Policy does not apply to those third parties, and we are not responsible for their content or privacy practices. We encourage you to read the privacy policy of any third-party site you visit.
18. Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the "Last updated" date at the top of this page, and where the changes are significant we will take reasonable steps to bring them to your attention. Your continued use of our website or services after an update takes effect indicates your acceptance of the revised Policy.
19. Governing Law
This Policy and any dispute or matter arising out of or in connection with it are governed by and construed in accordance with the laws of India. The courts at Bengaluru, Karnataka shall have jurisdiction, subject to any rights and remedies available to you under applicable law.
20. Grievance Officer & Escalation
If you have any questions, concerns or complaints about this Policy or how we handle your personal data, or if you wish to exercise your rights, please contact our Grievance Officer, who is also our data-protection grievance contact:
Raju Gupta — Grievance Officer (Chief Business Officer)
grievance@greaterinsights.in
+91 81029 35454 (9:00 AM – 8:00 PM IST)
GreaterInsights LLP, 768, 14th Cross Rd, Kumaraswamy Layout 2nd Stage, Bengaluru, Karnataka 560078, India.
We aim to acknowledge and resolve grievances within the timelines required by applicable law. If you are not satisfied with our response, or if your grievance is not resolved, you may escalate the matter to the Data Protection Board of India.
21. Rights of EU/UK Users (GDPR)
If you are located in the European Union or the United Kingdom, the EU General Data Protection Regulation (GDPR) and UK GDPR may apply to our processing of your personal data, and you have additional rights, including the rights to access, rectification, erasure, restriction of processing, data portability, and to object to processing, as well as the right to withdraw consent at any time. Where we rely on consent, you may withdraw it without affecting prior processing. To exercise these rights, contact our Grievance Officer using the details in Section 20. You also have the right to lodge a complaint with your local data protection supervisory authority.