1. Who we are
This website is operated by Alcertis Education Ventures Private Limited under the brand name Asian School of Cyber Laws ("ASCL", "we", "us" or "our").
- CIN: U85500PN2024PTC234744
- GSTIN: 27ABBCA4713F1Z1
- Registered office: Office No. 410, Supreme Headquarters, Supreme Universal, 36/2, Baner Gaon, Pune 411045, Maharashtra, India
- Email: info@asianlaws.org
- Phone / WhatsApp: +91 7798456306
2. Scope
This policy explains how we handle personal data when you visit this website, contact us, pay for or apply to a course, participate in a course, complete an assessment, seek certification or use a course-related tool. A separate notice may apply where a particular platform or service tells you that it has its own privacy terms.
3. Personal data we collect
Depending on how you interact with us, we may collect:
- Identity and contact data: your name, email address, telephone or WhatsApp number, country and State or Union Territory.
- Enrolment data: the course selected, application number, access status and communications concerning your enrolment.
- Payment and tax data: transaction or payment reference, payment status, amount, invoice details and, where requested, GST entity name, address and GSTIN. Payment-card, bank-account or UPI credentials entered into the payment gateway are handled by the payment provider and are not intentionally stored by us.
- Learning and certification data: course access, progress, practical submissions, assessment results, feedback, resubmissions and credentials issued.
- Communications: emails, calls, WhatsApp messages, support requests, complaints and other correspondence.
- Technical and security data: information ordinarily generated when a website is accessed, such as IP address, browser or device information, request time and security-event information. Cloudflare Turnstile may process device, browser and network signals to distinguish legitimate users from automated abuse.
- Course-tool data: prompts, files, tool inputs, generated responses and usage records where you choose to use a course tool.
4. How we collect personal data
We collect data directly from you through application and payment flows, course platforms, assessments and communications. We may also receive payment status or transaction references from our payment provider and technical or security information from the services used to operate and protect the website.
5. Why we use personal data
We use personal data only for purposes connected with our services or another lawful purpose, including to:
- process applications, verify payments and activate course access;
- deliver learning materials, labs, tools, support and course communications;
- administer assessments, resubmissions and certification;
- issue invoices and maintain accounting, tax and transaction records;
- answer enquiries, address complaints and enforce our terms;
- protect our learners, systems, intellectual property and authorised lab environments;
- detect fraud, spam, abuse and security incidents; and
- comply with legal obligations and lawful requests.
We do not sell or rent personal data. We do not use enrolment contact details for promotional messages unless you have separately chosen to receive them. You may withdraw a marketing choice at any time without affecting necessary course communications.
6. Payments
Payments initiated through this website are processed by Razorpay or another payment provider identified at checkout. The provider processes your payment credentials under its own privacy notice and security controls. We receive the information needed to identify and reconcile the payment, administer the enrolment, issue an invoice and handle a refund or dispute.
7. Browser storage, cookies and external resources
The website stores your light or dark theme preference in your browser using local storage. This preference does not identify you to us. Third-party components, including the payment gateway, Cloudflare Turnstile and Google Fonts, may receive technical information and use storage or cookies under their own policies when their services load or you interact with them. We do not currently use the website's theme storage for advertising or behavioural profiling.
8. Course tools
If you use an AI or investigation tool supplied with a course, the information you submit may be processed to provide the requested output, maintain the service, enforce usage limits and investigate misuse. Do not submit third-party personal data, privileged material, confidential information or live-case evidence unless you are authorised to do so and the tool expressly permits it. Important legal, investigative or security conclusions should be independently reviewed by a qualified person.
9. Who receives personal data
We disclose personal data only where reasonably necessary to operate the service or comply with law. Recipients may include:
- hosting, database, email, communications, course-platform, security and technical-support providers;
- payment processors, banks and accounting or tax-service providers;
- faculty, assessors and authorised personnel who administer the relevant course;
- professional advisers, auditors and insurers subject to appropriate duties; and
- courts, regulators, law-enforcement agencies or other authorities where disclosure is legally required.
Some service providers may process data outside India. Where applicable, we use providers and arrangements intended to protect the data and comply with restrictions imposed by Indian law.
10. Retention
We keep personal data only for as long as it is needed for the stated purpose, legal compliance or the establishment, exercise or defence of claims. Our normal retention periods are:
- enrolment, learning and certification records: for the access period and up to three years afterwards;
- payment, invoice and tax records: up to eight years from the transaction, or longer if legally required;
- support and other communications: up to two years after the last communication;
- marketing-choice records: while the choice remains active and for up to two years afterwards as evidence of the request; and
- security records: for a period proportionate to the security purpose and any related investigation.
Data may be retained longer where a dispute, legal hold, investigation or binding legal requirement applies. When it is no longer needed, we delete or anonymise it using reasonable measures.
11. Security
We use reasonable administrative, technical and organisational safeguards designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No website, transmission or storage system can be guaranteed to be completely secure. Please contact us promptly if you believe your data or course account has been compromised.
12. Your choices and rights
You may request a summary of the personal data we process and the processing activities undertaken; ask us to correct, complete or update inaccurate or incomplete personal data; ask us to erase personal data that is no longer required, subject to any lawful retention requirement; withdraw consent where processing is based on consent; raise a grievance; and nominate another person to exercise your rights in the event of death or incapacity. Withdrawing consent is as easy as giving it and does not affect processing already undertaken before withdrawal.
We will respond to requests and grievances within the period prescribed by the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. If you are dissatisfied with our response or do not receive a response within that period, you may use the remedies available under applicable law, including approaching the Data Protection Board of India where permitted.
13. Children
Our paid professional courses are not directed specifically at children. If a participant is under 18, a parent or lawful guardian should contact us before enrolment. We do not knowingly seek more information about a child than is necessary to provide the requested course and comply with law.
14. Changes to this policy
We may update this policy when our services, data practices or legal obligations change. The revised version will be posted here with a new "Last updated" date. If a change materially affects how we use data already collected, we will provide any additional notice or choice required by law.
15. Privacy requests and grievances
Send privacy requests or grievances with the subject "Privacy Request" to info@asianlaws.org, or write to our registered office. We may request information reasonably necessary to verify your identity and locate the relevant records.
Grievance Officer: Shuchi Nagpal, Grievance Officer, Asian School of Cyber Laws. Email: info@asianlaws.org. Phone: +91 7798456306.