Privacy Policy

1.About this Policy

This Privacy Policy explains how Cybethix (“Cybethix”, “we”, “us”) handles personal information in connection with the website at www.cybethix.com, our course registration process and our contact form. Cybethix provides cybersecurity education, training and related services in India.

Cybethix seeks to handle personal data in accordance with applicable privacy and data protection laws and applicable regulatory requirements, including, where they apply, the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 and the rules made under them. Nothing in this policy limits any right you have under applicable law.

Please read this policy before you submit personal information through the website. If you do not agree with it, please do not submit personal information to us.

2.Information We Collect

We collect information in three ways: information you give us directly, information that is collected automatically when you use the website, and records of the privacy choices you make on the website.

We aim to collect only what is needed for the purposes described in this policy. The website itself does not collect payment card or bank account details. Payment arrangements for paid programs are communicated separately after registration.

3.Information You Provide

Contact form

• your name, contact number and email address;
• the message or query you write;
• your consent choices on the form (required consent to process your enquiry, and optional consent to receive course information and updates).

Course registration forms

Registration is completed through an external form (currently Google Forms) that opens from the course page. Such forms typically ask for details such as your name, contact information and the course or batch you are interested in, along with any other details the form itself requests. The form shows what it asks for before you submit.

Email and other messages

If you write to us at the email address below, we receive the information in your message and your email address.

4.Information Collected Automatically

When you visit the website, standard technical information such as your IP address, browser type, device type, the pages requested and the date and time of the request may be processed by the hosting and network infrastructure that delivers the website (for example in server or content-delivery logs). This is a normal part of serving a website.

The website stores a small amount of information in your browser to remember your privacy choice (see “Cookies, Local Storage and Similar Technologies”).

The website does not currently use analytics or advertising trackers. If that changes, we will update this policy and, where required, ask for your consent first.

5.How We Use Information

• to read and respond to your enquiries and to communicate with you about your request;
• to review and manage course registrations, including confirming availability, sharing payment instructions and sending batch or joining details;
• to send course information, workshops and updates, only where you have chosen to receive them;
• to keep records of your privacy and consent choices;
• to keep the website secure, prevent spam and abuse, and fix technical problems;
• to meet legal, accounting and regulatory obligations, and to establish, exercise or defend legal claims.

We process information on the basis of your consent, to provide something you have asked us for, and for other lawful purposes permitted by applicable law.

6.Course Registration Information

Course registrations may be collected through Google Forms. When you submit a registration form, the details you enter are collected through Google’s services and received by the Cybethix team. We use them to review your interest in the selected course or batch and to contact you using the details you provided.

Submitting a registration form does not by itself confirm admission or reserve a seat. For paid programs, the next step may include confirmation of availability, payment instructions and batch or joining details. Please see our Terms & Conditions and Refund & Cancellation Policy.

Registration forms are hosted by Google and are also subject to Google’s own privacy terms and notices. Where a form displays additional information about how it uses your details, that information applies as well.

7.Contact Form Information

When you submit the contact form, your details are sent from your browser to a Google Apps Script web app that we operate, and are recorded in a Google Sheet managed by Cybethix. Google processes that data as part of providing those services.

The form asks for your consent separately for (a) processing your details to respond to your enquiry, which is required to submit the form, and (b) receiving course information and updates, which is optional. We store both answers with your submission. If you have made a choice in the website privacy notice, we also store its random consent ID so the enquiry can be linked to that choice.

The form includes a hidden field that helps us filter out automated submissions. Nothing is sent to the Apps Script endpoint until you submit the form.

8.Cookies, Local Storage and Similar Technologies

The website does not set cookies of its own. It uses your browser’s local storage and session storage for the following purposes only:

• Privacy choice (local storage): your decision, a random consent ID, the notice and policy versions, the time of your choice and whether it was recorded, so the notice is not shown on every page;
• Retry queue (local storage): if a consent record could not be sent to our server, it is kept briefly so that sending can be retried;
• Notice dismissed (session storage): if you close the notice without choosing, a flag is kept for the rest of that browser session so we do not keep asking.

These items are used to remember your privacy preference. They are not used for advertising or to track you across other websites. You can clear them at any time through your browser settings; if you do, the notice may be shown again.

External services you open from this website, such as Google Forms or social media platforms, may set their own cookies or use similar technologies under their own policies.

9.Website-Wide Privacy/Consent Notice

On your first visit, and when the notice changes, the website shows a Privacy & Data Processing Notice. You can choose I Accept or Decline, and either choice lets you keep using the whole website. The notice also contains an optional switch for marketing and course updates, which is off by default and applies only if you choose I Accept. If you close the notice without choosing, no choice is recorded.

The notice is a record of your privacy preference. It is separate from the consent requested on the contact form and does not by itself give us permission to process an enquiry or to send marketing.

When you actively choose Accept or Decline, or later withdraw consent, we create a consent record in a Google Sheet managed by Cybethix, sent through a Google Apps Script web app. It contains the date and time, a randomly generated consent ID, your decision, the notice and policy versions, the purpose scope, the consent source (Website) and, if applicable, withdrawal details. We do not record your IP address, device identifiers or fingerprints in this record, and we do not create a record for visitors who make no choice. If a record cannot be sent, your choice is still kept in your browser and sending may be retried later.

You can change your choice at any time using Privacy Preferences or Withdraw Consent in the website footer.

10.Google Forms, Google Sheets and Other Service Providers

We use external service providers to run the website and handle registrations and enquiries. Information may be processed through these services where needed for website functionality, registration handling, communication, hosting, analytics (if enabled in future) or related purposes. Currently these include:

• Google Forms, for course registrations;
• Google Apps Script and Google Sheets, for contact form submissions and consent records;
• Hosting and content-delivery providers, to serve the website to you;
• Email service providers, to send and receive messages at our contact address.

These providers handle information under their own terms and privacy policies, and may store or process it on servers located outside India. For Google’s practices, see the Google Privacy Policy. We do not control how these providers operate, but we aim to use them only for the purposes described in this policy.

11.Data Sharing and Disclosure

We do not sell your personal information. We may share or disclose it only in the following situations:

• with the service providers described above, to the extent needed for them to provide their services;
• with banks or payment service providers where a payment or refund needs to be processed;
• with professional advisers, or with public authorities, courts or regulators, where we are required to by law or legal process, or where needed to protect the rights, safety or property of Cybethix, our learners or others;
• in connection with a reorganisation or transfer of the business, in which case the information would remain subject to this policy or a materially similar one;
• with your consent or at your direction.

We share only the information reasonably needed for each purpose.

12.Data Retention

We keep information only for as long as it is reasonably needed for the purposes in this policy, including handling your enquiry or registration, keeping records of consent and payments, resolving disputes and meeting legal, accounting or regulatory obligations. Consent records are kept as evidence of the choices you made.

When information is no longer needed we aim to delete or anonymise it, subject to practical limits such as backups and the retention practices of Google and other providers. You can ask us to delete your information earlier (see “Your Choices and Privacy Requests”). Items stored in your own browser stay there until you clear them.

13.Data Security

Cybethix takes reasonable technical and organisational measures to protect information. These include serving the website over HTTPS, applying browser security headers, keeping credentials out of the website’s public code, and seeking to limit access to submissions to people who need it.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure, and we cannot promise absolute security. Please take care about what you share, and contact us straight away if you suspect your information has been misused. Where the law requires us to notify you or an authority of a data breach, we will do so.

14.Your Choices and Privacy Requests

Subject to applicable law, you may ask us to:

• tell you what personal information of yours we hold and how we use it;
• correct or update information that is inaccurate or incomplete;
• delete your personal information;
• stop sending you marketing or course updates;
• address a concern or grievance about how your information is handled.

To make a request, email connect@cybethix.com from the address you used with us and tell us what you would like. We may ask for details to confirm who you are. We aim to respond within a reasonable time. In some cases we may need to keep certain information, for example to meet legal obligations or to handle a payment dispute, and we will explain this if so.

You can also use Privacy Preferences in the website footer, and your browser settings, to manage what is stored on your device.

15.Withdrawal of Consent

Where we rely on your consent, you may withdraw it at any time. To withdraw the choice you made in the website notice, use Withdraw Consent in the footer. To withdraw marketing consent given on the contact form or a registration form, or to unsubscribe from updates, email us at the address below.

Withdrawing consent stops future processing based on that consent. It does not affect processing that already took place lawfully, and in some cases we may not be able to continue a service that needs the information (for example, we cannot process a registration without registration details).

16.Children and Minors

Some learners who are interested in Cybethix courses may be under 18. Where applicable law requires it, the involvement or consent of a parent or legal guardian may be needed before we process a minor’s personal information or enrol them in a course, and we may ask for it.

We ask only for the information needed to handle a registration or enquiry, and we do not ask minors for more than that. We do not knowingly use the website to track, profile or target advertising at children. If you believe a minor has given us information without appropriate consent, please contact us and we will take reasonable steps to review and, where appropriate, delete it.

17.Third-Party Links

The website links to external services, including Google (Forms and our Google profile), Instagram, LinkedIn, YouTube and Facebook. These services have their own privacy practices, which we do not control and are not responsible for. Please review their policies before sharing information with them.

18.Policy Updates

We may update this policy from time to time, for example if the website or the way we handle information changes, or if the law changes. The “Last updated” date and version at the top of this page show when it last changed. If a change is significant, we will take reasonable steps to bring it to your attention, such as showing the website privacy notice again.

19.Contact Us

For privacy questions, requests or concerns, email connect@cybethix.com, or use the contact page. Cybethix is based in Delhi, India.