Privacy Policy

Last updated 14 September 2026

1. About this policy

In short: we’re regulated under India’s DPDP Act, and under UK/EU GDPR for users based there.

We are the data fiduciary for your personal data under India’s Digital Personal Data Protection Act 2023, and the data controller under the UK GDPR and EU GDPR for users based in those regions. This policy explains what we collect, why, and what you can do about it.

2. What we collect

• Account and purchase data: name, email, phone, billing address, country and order history. Card details go straight to our payment processor; we never see or store them.
• Consultation bookings: name, email, phone, plus your route, experience and target sitting.
• Course usage: lessons viewed, progress, quiz results and certificates.
• Contact messages: sent by form, email, WhatsApp or chat.
• Automatic data: IP address, browser, device, pages visited and referrer, via cookies and analytics.

3. Why we use it

In short: mostly to deliver what you bought or asked for. Marketing email is the one thing that needs your separate consent.

Purposes and lawful bases

Purpose	Lawful basis (GDPR)
Delivering your purchase	Contract
Payment and invoicing	Contract / legal obligation
Handling enquiries and bookings	Contract / legitimate interests
Issuing certificates	Contract
Service emails	Contract
Marketing emails	Consent, withdrawable any time
Improving the site	Legitimate interests, or consent for non-essential cookies
Tax and accounting	Legal obligation

Under the DPDP Act, we rely on your consent or on the legitimate uses the Act permits.

4. Who we share it with

In short: we don’t sell your data. It goes only to the processors who run the business with us, named below.

Processors we share data with

Processor	What they get	Why
Razorpay	Payment and billing details	Payments in India
PayPal	Payment and billing details	International payments
Automattic / WordPress.com	Site and account data	Hosting
Tutor LMS	Enrolment and progress	Course delivery
MailerLite	Name and email	Email communication
Tawk.to	Chat messages and basic device data	Live chat
Easy Appointments	Booking details	Scheduling

We’ll add Google Analytics to this table the day it goes live, not before.

5. International transfers

We operate from India and serve candidates in India, the Gulf and the UK, so your data may be processed by providers in the US and EU. Where data leaves the UK or EU, we rely on standard contractual clauses.

6. Cookies

We use strictly necessary cookies to run the site, and analytics and preference cookies to understand how it’s used.

7. How long we keep it

How long data is kept

Data	Retention
Account and course records	Active plus 3 years
Order and payment records	8 years (Indian tax and accounting)
Enquiries and bookings	2 years from last contact
Marketing contacts	Until you unsubscribe, then a suppression record
Analytics	14 months

8. Your rights

You can ask us to access, correct, delete or restrict your data, object to how we use it, request portability, or withdraw consent, including unsubscribing from marketing at any time. Contact us at the address below; we respond within 30 days.

9. Grievance Officer

Required under the DPDP Act and the IT Act. Grievance Officer, Alpha Consulting Engineers India Private Limited. You can raise a grievance using the contact details below.

privacy@alphaapc.com · +91 82405 30210 · Bally, Howrah, West Bengal 711205, India

We acknowledge a grievance within 48 hours and resolve it within 30 days. UK and EU users may also complain to their own data protection authority.

10. Security

We use HTTPS throughout, restrict internal access to personal data, use PCI-DSS compliant payment processors, and will notify you of any breach that affects you.

11. Children

Our services are for working professionals. We do not knowingly collect data from anyone under 18, and we do not seek verifiable parental consent because we do not serve children.

12. Changes

We may update this policy. Material changes will be reflected in the date at the top.