Privacy Policy

This Privacy Policy describes how Menrol Skills Pvt Ltd ("Menrol", "we", "us", or "our") collects, uses, stores, and discloses personal information when you visit our website (menrol.com), enroll in our skill-development courses, or interact with us in any other way. This policy is compliant with the Information Technology Act, 2000 (IT Act), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (SPDI Rules), and the Digital Personal Data Protection Act, 2023 (DPDP Act).

We collect the following categories of personal data:

Identity & Contact Data: Full name, date of birth, gender, photograph, email address, mobile number, and postal address.

Educational & Professional Data: Highest qualification, employment status, skills, and course preferences.

Government-Issued Identifiers: Aadhaar number, PAN, or other ID proof — collected only where required by NSDC, DDUGKY, PMKVY, or other government scheme guidelines and stored with appropriate safeguards.

Financial Data: Bank account details for scholarship/stipend disbursement under government schemes. We do not store payment card data.

Usage Data: IP address, browser type, pages visited, time spent, and referral source — collected via cookies and server logs.

Communications: Emails, form submissions, and call records when you contact us.

We use your personal data for the following purposes:

• Enrolling you in courses and managing your training records • Verifying eligibility for government-funded schemes (DDUGKY, PMKVY, Skill India) • Issuing NSDC-recognised certificates upon course completion • Facilitating job placement and sharing your profile with prospective employers (with your consent) • Sending course updates, batch schedules, and placement notifications • Complying with statutory reporting obligations to NSDC, DDUGKY, and other government bodies • Improving our website and services through analytics • Responding to your queries and grievances

Under the DPDP Act, 2023, we process your personal data on the following lawful bases:

• Consent: You provide explicit consent at the time of enrollment or form submission. • Contractual Necessity: Processing is necessary to deliver the course or service you have enrolled in. • Legal Obligation: We are required to share certain data with government bodies (NSDC, DDUGKY, Ministry of Skill Development) as a condition of operating government-funded programmes. • Legitimate Interests: For fraud prevention, security, and improving our services.

We do not sell your personal data. We may share it with:

• Government Bodies & Scheme Partners: NSDC, DDUGKY, PMKVY, Skill India, and the Ministry of Skill Development & Entrepreneurship — as required for scheme compliance and certification. • Employer Partners: Your resume/profile may be shared with hiring employers only after obtaining your explicit consent during the placement process. • Service Providers: Cloud hosting, SMS/email delivery, and analytics vendors who process data on our behalf under data processing agreements. • Legal Authorities: Courts, regulators, or law enforcement where disclosure is required by law.

All third-party processors are contractually bound to maintain confidentiality and implement adequate security measures.

Certain data we collect — such as Aadhaar numbers, financial account details, and health information (for healthcare courses) — constitutes Sensitive Personal Data or Information under the SPDI Rules, 2011. We collect such data only with your explicit written consent, use it solely for the stated purpose, and apply enhanced security controls including encryption at rest and in transit.

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by law:

• Enrollment & Training Records: 7 years from course completion (as required by NSDC guidelines) • Government Scheme Data: As mandated by the respective scheme guidelines • Website Usage Data: 12 months • Marketing Communications: Until you withdraw consent

After the retention period, data is securely deleted or anonymised.

Under the DPDP Act, 2023, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you. • Right to Correction: Request correction of inaccurate or incomplete data. • Right to Erasure: Request deletion of your data, subject to legal retention obligations. • Right to Withdraw Consent: Withdraw consent at any time; this will not affect the lawfulness of processing before withdrawal. • Right to Grievance Redressal: Lodge a complaint with our Grievance Officer (details below). • Right to Nominate: Nominate another individual to exercise rights on your behalf in the event of death or incapacity.

To exercise any of these rights, write to us at [email protected].

Our website uses cookies and similar technologies to enhance your browsing experience and analyse traffic. You may disable cookies through your browser settings; however, some features of the website may not function correctly without them. We do not use cookies for targeted advertising.

We implement reasonable security practices as required under Rule 8 of the SPDI Rules, 2011, including:

• SSL/TLS encryption for data in transit • Encrypted storage for sensitive data • Role-based access controls • Regular security audits • Employee training on data protection

In the event of a data breach that is likely to cause harm to you, we will notify you and the Data Protection Board of India as required under the DPDP Act, 2023.

Our services are intended for individuals aged 18 years and above. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it promptly.

We may update this Privacy Policy from time to time. The revised policy will be posted on this page with an updated effective date. We encourage you to review this page periodically. Continued use of our services after changes constitutes acceptance of the revised policy.

In accordance with the IT Act, 2000 and DPDP Act, 2023, the details of our Grievance Officer are:

Name: Grievance Officer, Menrol Skills Pvt Ltd Address: 2nd Floor, F-279, Phase 8B, Mohali, Punjab – 160071, India Email: [email protected] Phone: +91 92155 33330 Response Time: We will acknowledge your grievance within 48 hours and resolve it within 30 days.