Draft notice (remove before publishing). This draft was prepared as a starting point. It is not legal advice. Items in [SQUARE BRACKETS] must be completed. Have it reviewed against the Digital Personal Data Protection Act, 2023 and rules made under it, the Information Technology Act, 2000 and its rules, and the Consumer Protection (E-Commerce) Rules, 2020, and against the laws of any other country where you actively market to learners (for example the EU/UK GDPR).
Privacy Policy
NexGen Drilling & Safety Academy Private Limited [confirm exact registered name and CIN once incorporation is complete] ("NexGen Drilling & Safety Academy", "we", "us") operates the website https://nexgendrilling.co.in and the online learning platform on it. This policy explains what personal data we collect, why, how long we keep it, and the choices you have.
1. Who is responsible for your data
NexGen Drilling & Safety Academy Private Limited, [REGISTERED ADDRESS], India. Contact: admin@nexgendrilling.co.in. Grievance Officer: [NAME], [DESIGNATION], [EMAIL], [PHONE]. We aim to acknowledge complaints within [48 hours] and resolve them within [30 days] or any shorter period required by law.
2. What we collect
| Data | When | Why (purpose) |
|---|---|---|
| Name, email address, password (stored only as a one-way hash) | Account registration | Create and secure your account; send account emails |
| Phone / WhatsApp number (optional) | Profile, or WhatsApp opt-in | Send the course notifications you opted into |
| Courses purchased, order and payment references, coupon used | Checkout | Provide access, issue receipts, handle refunds, meet tax and accounting obligations |
| Lesson progress, quiz and exam answers and scores | While you study | Track progress, score assessments, decide certificate eligibility |
| Certificate details (name, course, date, certificate ID) | On completion | Issue and allow verification of your certificate |
| Messages you send us | Contact form / email | Respond to your enquiry |
| Technical data (IP address, browser type, log data) | Every visit | Security, fraud prevention, rate limiting and troubleshooting |
We do not receive or store your full card number, CVV, UPI PIN or net-banking password. Payments are processed by Razorpay Software Private Limited, which handles payment data under its own privacy policy and applicable card-network and RBI requirements.
3. Legal basis and consent
We process your data to provide the service you request (your account and courses), to meet legal obligations (for example tax records), and with your consent where required (for example WhatsApp messages and the newsletter). You can withdraw consent at any time; this does not affect processing already carried out.
4. Who we share data with
Only service providers who help us run the academy, under contract and for these purposes:
- Payment processing: Razorpay
- Website hosting and database: [HOSTING PROVIDER], [DATABASE PROVIDER]
- File and video storage: [STORAGE PROVIDER, e.g. Cloudflare R2]
- Email delivery: [EMAIL PROVIDER]
- WhatsApp messages (only if you opt in): Meta Platforms (WhatsApp Business Platform)
Some providers may store data outside India. [List countries/regions once providers are chosen.] We do not sell your personal data. We share data with authorities only where the law requires it.
5. Certificate verification
Anyone with a certificate ID can confirm on our verification page that the certificate is valid, the course title, the issue date and the holder's name as printed on the certificate. No other personal data is shown.
6. How long we keep data
| Data | Retention |
|---|---|
| Account and learning records | While your account is active, then [24 months] after your last activity, unless you ask us to delete it sooner |
| Order, invoice and payment records | [8 years] (to meet accounting and tax record-keeping requirements — confirm with your accountant) |
| Certificate register (ID, name, course, date) | [Permanently / 10 years] so certificates can be verified |
| Contact-form messages | [24 months] |
| Security logs | [12 months] |
7. Your rights
Subject to applicable law, you can ask to access, correct, update or erase your personal data, withdraw consent, and nominate another person to exercise your rights. Email admin@nexgendrilling.co.in. You may also complain to the Data Protection Board of India once it is operational for such complaints.
8. Security
Passwords are hashed; connections use HTTPS; access to student records is restricted to authorised staff and logged; paid learning materials are served through short-lived links. No system is completely secure, and we will notify affected users and authorities of personal data breaches as the law requires.
9. Children
Our courses are intended for adults (18+). We do not knowingly collect data from children.
10. Cookies
See our Cookie Notice. We use only cookies needed to keep you signed in and to protect the site, plus [any analytics, if enabled — describe here].
11. Changes
We will post updates on this page and, for significant changes, email registered users.