Harappa Learning Private Limited is a company registered in India with its registered office at N-154 Panchsheel Park New Delhi, South Delhi – 110017, India (referred to herein as “Harappa”, “we”, “our” or “us”). Harappa is a web and mobile based platform which offers curated and specially designed and scripted courses aimed at strengthening foundational skills and building competencies geared towards achieving professional success through its website, https://harappa.education/ (or any successor site) and its related sub-domains, sites, mobile applications and tools accessed through a mobile device, mobile application, computer or any other device (“Website”). The words “you” or “your” or “User” as used herein, refer to all individuals and/or entities browsing, accessing, or using the Website or services for any reason.
PURPOSE & SCOPE
We collect, process, and store your Personal Information, to provide a safe, efficient, and customized experience to our Users accessing the Website. You can browse through the Website without giving any Personal Information about yourself or by creating an account to avail of our services on the Website. These services shall include but not be limited to providing the Users with online pathways, participate in public forums, sign-up for email, calls and SMS, WhatsApp updates, purchase our services. To register and create an account (“Account”), you may be required to provide us with your contact and identity information and other Personal Information as indicated on the Website and complete the registration process. Where possible, we indicate which fields are mandatorily required and which fields are optional. You always have the option to not provide Personal Information by choosing not to use a particular service or feature on the Website unless we require it so. Your Account and Personal Information is protected by a password for your privacy and security. You need to prevent unauthorized access to your Account and Personal Information by selecting and protecting your password appropriately and limiting access to your mobile phone and browser by signing off after you have finished accessing your Account. We advise you to not share login credentials/Account information with anyone to avoid unauthorized access.
1. LEGAL BASIS OF PROCESSING PERSONAL INFORMATION
We process your Personal Information on the following legitimate basis as also mandated under applicable data protection, data security or privacy laws including but not limited to the Indian Information Technology Act, 2000, Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“Data Protection Law”):
1.1 Consent: Processing based on your consent.
1.2 Legitimate interests: Processing, where permitted under Data Protection Law, in furtherance of our legitimate interests to provide and personalise our services to you including our interests to conduct legitimate business activities (such as improving our products and services), to communicate with you, to secure our systems, among other legitimate interests like processing of payment, fraud detection, for the establishment, exercise, or defence of legal claims;.
1.3 Compliance with legal obligations: We may process your Personal Information if necessary for us to comply with any legal obligations arising under any applicable law to which we may be subject.
2. TYPE OF INFORMATION WE COLLECT
Following type of Personal Information may be collected by Harappa subject to the services chosen by you and the applicable laws when you browse or use our Website and when you register as a user to subscribe to our services:
- Title / Sex
- Name & Surname
- Profile Picture
- Contact Information Like Mobile Number, Postal Address And Email Address
- Educational Qualifications
- A Username You Will Use To Access The Website;
- All Information Including User Feedback Gathered During Any Correspondence Or Interaction Between You And Us Via Emails, Chats, Telephone Calls, SMSs, WhatsApp Messages, Posts On Public Forums Etc. Collectively Referred As User Generated Content/ UGC.
- Any Detail Relating To The Above Clauses As Provided To Us For Providing Service; And Any Other Information Required Under Lawful Contract Or Otherwise.
2.1 Sensitive Personal Information
We collect and process Personal Information categorized as Sensitive Personal Data or Information (“SPDI”)which is the User’s password related information.
Should we specifically require SPDI in connection with one or more of the uses described in this policy, we will request your explicit consent to use the data in accordance with applicable laws, this Policy and/or in the ways described at the point where you were asked to disclose the SPDI.
Other legal basis for our processing of special category data may include, as permitted by Data Protection Law, for scientific research, for employment, social security or social protection law, for reasons of substantial public interest, or as necessary for the establishment, exercise or defence of legal claims. You can contact our DPO at email@example.com for more information about our processing of your Personal Information.
2.2 Information Automatically Collected/ Acquired Information
2.2.1. Location Information and IP Address: When you access the Website, your IP address is recorded by us. This method ensures smooth operations and protection against attacks and requires the User’s IP address to be saved for the duration of the session. We may be able to determine from an IP address a User’s Internet Service Provider and the geographic location of his or her point of connectivity.
2.2.2. Device Information: We collect information about the apps, browsers, and devices you use to access our website, which helps us provide features like automatic service updates. The information we collect includes unique identifiers, browser type and settings, device type and settings, operating system, mobile network information including carrier name and phone number, and application version number.
2.2.3. Behavioural Information: We may automatically track, collect, and aggregate certain information about you based upon your behaviour on our Website or while accessing our services. We may use such information to do internal research on our Users’ demographics, interests, and behaviour to better understand, protect and serve our Users. This information is compiled and analysed on an aggregated basis.
You agree, if you send us personal correspondence, such as emails, calls, SMSs (including WhatsApp messages) or letters, or if other users or third parties send us correspondence about your activities or postings on the Website in connection with our Services, we may collect and/or store such information.
2.3 Third-Party Tools:
2.4 User Generated Content:
Content added, created, uploaded, submitted, distributed, posted by Users including but not limited to feedback, queries, chats, discussions are collectively referred to as, “User Content”. User is the sole owner and responsible for the authenticity and correctness of all the User Content.
We may use your User Content, in a number of different ways in connection with our services and Harappa’s business as we may determine at our sole discretion. By submitting User Content through the Website, you hereby do and shall grant Harappa a worldwide, non-exclusive, royalty-free, fully paid, sub-licensable (through multiple tiers) and transferable license to use, copy, reproduce, distribute, prepare derivative works of, display, perform, and otherwise fully utilise the User Content in connection with our services and Harappa’s (and its successors and assigns’) business, including without limitation for promoting and redistributing part or all of the Website (and derivative works thereof), publicly displaying it, reformatting it, incorporating it into marketing materials, advertisements and other works, creating derivative works from it, promoting it, distributing it, and allowing other users to do the same in connection with their own websites, media platforms, and applications (“Third Party Media”),
For clarity, the foregoing license grant to Harappa does not affect your other ownership or license rights in your User Content(s), including the right to grant additional licenses to the material in your User Content(s), unless otherwise agreed in writing with Harappa.
When you delete your User Content, they will be removed from the Website. However, you understand that any removed User Content may persist in backup copies for a reasonable period of time (but following removal will not be shared with others) or may remain with users who have previously accessed or downloaded your User Content or may be retained by Harappa for such period as stipulated under law. If you have questions or concerns about the legal basis upon which we collect and use your Personal Information, you can contact us at firstname.lastname@example.org.
3. HOW WE USE YOUR PERSONAL INFORMATION
3.1 Provide, maintain and Customize our Services:
3.2. Improve our Services :
Information collected form your feedback, reviews, ratings you provide, poll questions and surveys including phone interviews you take may be aggregated and analysed by us in order to improve and enhance our services, our Website etc. Participation in these surveys is purely optional. Identity of the survey participants is anonymous unless otherwise stated in the survey.
3.3. Participation in Online pathways, Public Forums and Signing Up for Updates
We use the Personal Information as provided by you for processing purposes, including but not limited to that of following attendance, progress, utilisation and completion of your online subscription. We may also share details regarding your performance in a given online pathway with the instructor/instructors or other designated individuals who assisted you in such content. This will help us modify, alter, and operate the online pathway conveniently. We may also collect student generated content in the form of various assignments, peer-grading feedback, responses related to the pathway data in the form of exams, surveys etc. We may collect or/and store such information as provided by you.
Harappa may offer public forums. We may require your Personal Information if you wish to participate and share your thoughts on these forums. Please keep in mind that such posts as shared by you will be available on our website and/or any related application or platform. We may collect and/or store such information as provided by you on these forums. We may also provide you with updates by either posting such updates on the Website or through letters, emails, calls, SMS, WhatsApp etc.
3.4. Communicate with You
We may also aggregate (gather up data across all Accounts) information and disclose such information in a non-personally identifiable manner to advertisers and other third parties for other marketing and promotional purposes. We don’t share Personal Information that personally identifies you with advertisers, such as your name or contact information, unless you ask us to.
3.6. Services Offered on the Website by Third Parties:
3.7. Posting to Public Forums:
Please remember that if you post any of your Personal Information in public forums of the Website, such information may be collected and used by others over whom we have no control. You are to please note that these posts may be made available in the public domain.
4. INTERNATIONAL DATA TRANSFER
Our website is primarily operated and managed on servers located and operated within India. However, your Personal Information may also be stored in third party data servers located in other countries where HARAPPA provides its products and services.
HARAPPA engages sub-contractors, service providers and other third parties for facilitating its products, service offerings and to offer support services to you, and your Personal Information may be transferred to servers of such sub-contractors, service providers and other third parties. Depending upon the location of our service providers, your information, including Personal Information, may be transferred to and maintained on computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those from your jurisdiction. Where required under applicable law we will seek your express consent for such transfers. In all other cases, by consenting to this policy, you also provide consent to HARAPPA to transfer your Personal Information to HARAPPA affiliated companies, service providers or any third-party entity in locations around the world. We take steps to ensure that a degree of data protection which is similar to this policy is afforded to such Personal Information transferred. HARAPPA will always ensure transfer of your personal information internationally, will be in accordance with the lawful contract and all applicable legal requirements.
5. PROCESSING AND STORAGE
Your Personal information is processed and stored on Harappa’s internal servers. Your Personal information is either stored manually or electronically. Any data stored electronically will be stored in secure servers, and any data stored manually will be stored in our premises.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal information, we cannot guarantee the security of data transmitted to our Website and any transmission is at your own risk.
6. WITH WHOM YOUR PERSONAL INFORMATION IS SHARED
6.1 We do not rent, sell, or share your Personal Information with other people (save with your consent) or non-affiliated companies except to provide our products or services, or under the following circumstances:
- We Will Share Your Personal Information With Our Employees And Directors Who Need It To Deliver The Services, Complete Your Request Or Carry Out Your Instructions.
- To Provide Personal Information To Trusted Partners Who Work On Behalf Of Or With Us Under Confidentiality Agreements. These Entities May Use Your Personal Information To Assist Us In Providing Our Services To You And Help Us Communicate With You About Offers From Us And Our Marketing Partners.
- To Respond To Summons, Court Orders, Or Legal Process, Or To Establish Or Exercise Our Legal Rights Or Defend Against Legal Claims.
- From Time To Time, To Reveal General Statistical Information About Our Website And Visitors, Such As Number Of Visitors, Number And Type Of Products And Services Purchased, Etc.
- With Companies In The Same Group As Harappa.
- In Addition To The Circumstances Described Above, HARAPPA May Disclose User’s Personal Information If Required To Do So:
- By Law, Required By Any Enforcement Authority For Investigation, By Court Order Or In Reference To Any Legal Process.
- To Conduct Our Business.
- For Regulatory, Internal Compliance And Audit Exercise(S)
- To Secure Our Systems; Or
- To Enforce Or Protect Our Rights Or Properties Of HARAPPA Or Any Or All Its Affiliates, Associates, Employees, Directors, Or Officers Or When We Have Reason To Believe That Disclosing Personal Information Of User(S) Is Necessary To Identify, Contact Or Bring Legal Action Against Someone Who May Be Causing Interference With Our Rights Or Properties, Whether Intentionally Or Otherwise, Or When Anyone Else Could Be Harmed By Such Activities.
Any Disclosure And Storage By Any Enforcement Authority For Investigation, By Court Order Or In Reference To Any Legal Process May Take Place Without Your Knowledge. In That Case, We Shall Not Be Liable To You Or Any Third Party For Any Damages However Arising From Such Disclosure And Storage.
7. HOW LONG DO WE KEEP YOUR DATA?
We may retain Personal Information for as long as it is necessary. It may be archived as long as we believe that the purpose for which it was used still exists or as necessary for our legitimate business interests or for complying with legal obligations or for a period as mentioned in the applicable laws.
There will be some residual information in anonymised form that shall remain with us within our logs, database, and other records. Such residual information may or may not include Personal Information. Please also note that we shall retain your Personal Information if we require the same for complying with a legal obligation.
8. DATA SECURITY
We endeavour to safeguard your Personal Information under our control by adhering to strict security measures and best practises to prevent loss, misuse or unauthorized access of data. Harappa is ISO 27001:2013 (ISMS) Certified and GDPR Compliant.
All the Personal Information is collected, stored, and processed as per the Data Protection Laws. Personal Information of the Users residing outside India is collected stored and processed as per the data protection laws in their respective jurisdictions such as EU General Data Protection Regulation 2016/679 (the “GDPR”) to the extent possible in consonance with the Indian Data Protection Laws as mentioned above.
9. CHILDREN’S PRIVACY
Harappa does not engage in the collection, processing, storage, use, dissemination, and transfer of Personal Information of children. We do not knowingly collect personal information online from children under legal age (18 years in India), depending on the jurisdiction/ country concerned. If a child/ minor has provided us with the Personal Information online such processing shall be lawful only if and to the extent that consent is given or authorised by the holder of parental responsibility over the child. In the event HARAPPA becomes aware that the User is a minor or below the legal age to consent in the jurisdiction concerned, HARAPPA reserves its right to terminate all services to such User/ Account without any prior notice.
10. RIGHTS AVAILABLE TO THE USER
In the event you wish to exercise any of the following rights, you may send your written request email@example.com :
- You Have A Right To Access And Rectify The Record Of Your Personal Information Maintained By The Harappa If It Is Inaccurate.
- You Have A Right For Erasure /Deletion Of Your Data. On Receipt Of Deletion Request, Harappa Shall Delete All Information Pertaining To You/ Your Account Barring The Invoice Which Will Be Retained By Harappa For Accounting And Audit Purpose. User Further Acknowledges That Post Deletion Harappa Will Not Be Able To Share Any User Detail Including The ‘Course Completion Certificate’ Neither Will It Be Able To Continue Providing The Desired Services.
- You Have The Right To Withdraw Your Consent In Relation To Any SPDI You May Have Provided To Harappa.
- You Have The Right To Object, At Any Time To Processing If You Have Concerns That Harappa Is Using Your Data For Direct Marketing Purposes.
- You Have A Right To Restrict Processing. If The Processing Is Unlawful And You Oppose The Erasure Of The Personal Information And Request The Restriction Of Their Use Instead.
- When Technically Feasible, Harappa Will, At Your Request, Provide Your Personal Information To You Or Transmit It Directly To Another Controller.
- You May Also Request Additional Information About The Purpose Of The Processing; The Categories Of Personal Information Concerned; Who Else Outside The Harappa Might Have Received The Data From Harappa; What The Source Of Information Was; And How Long It Will Be Stored.
If Access Cannot Be Provided Within A Reasonable Time Frame, Harappa Will Provide You The Additional Information At The Earliest Possible.
12. THE OPT-OUT PRACTICE
If you are no longer interested in receiving email announcements and other marketing information from us, or you want us to remove any personal information that we have collected about you, you can opt-out anytime by sending an e-mail about your request to firstname.lastname@example.org Or email@example.com
13. GRIEVANCE OFFICER AND CUSTOMER SUPPORT
Grievance Officer: Mr. Gaurav Minhas
Email Id: firstname.lastname@example.org
DPO: Ms. Mamta Swaroop
Email Id: email@example.com