1. Introduction & Scope
                Crund Training ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect information in accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act).
                
                2. Data Categories Collected
                We collect: name, email address, learning objectives, experience level, IP address, device information, and cookie data when you use our website or enroll in training programs.
                
                3. Purposes of Processing
                We process your data to: provide training services, communicate with you, improve our offerings, comply with legal obligations, and maintain security.
                
                4. Legal Bases & Consent
                We process your data based on your consent, contractual necessity, legitimate interests, and legal obligations. You may withdraw consent at any time by contacting us.
                
                5. Data Principal Rights (Access, Correction, Erasure, Portability)
                You have the right to access, correct, erase, and port your personal data. You may also withdraw consent and lodge complaints with the Data Protection Board of India.
                
                6. Security Measures
                We implement appropriate technical and organisational measures including encryption, access controls, and regular security audits to protect your data from unauthorised access, loss, or misuse.
                
                7. Retention Periods
                We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law, typically not exceeding 7 years after the end of our relationship.
                
                8. Third-Party Processors & Disclosure
                We may share data with service providers, payment processors, and technology vendors who assist in delivering our services. All processors are bound by data protection agreements.
                
                9. Cross-Border Transfers
                If we transfer data outside India, we ensure adequate safeguards are in place through Standard Contractual Clauses or other approved mechanisms under the DPDP Act.
                
                10. Grievance Redressal & Data Protection Authority
                For privacy concerns or to exercise your rights, contact our Data Protection Officer at privacy@crund.training. You may also file a complaint with the Data Protection Board of India.
                Last updated: November 2025