Privacy Policy

1 Introduction

Welcome to Digital Crazy Hub ("we", "our", or "us"). Digital Crazy Hub is an educational training ecosystem registered under the Ministry of Micro, Small & Medium Enterprises (MSME), Government of India, operating from Tamil Nadu, India.

This Privacy Policy explains how we collect, process, use, store, and safeguard your personal information when you visit our website (training.digitalcrazyhub.com), submit an enrollment form for our digital marketing training workshops and live webinars, or make an online registration payment.

We are committed to respecting student privacy in accordance with applicable Indian legal standards, including the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2 Information We Collect

We adhere to the principle of data minimization. We only collect information that is strictly necessary to register you for the selected training session, facilitate secure payment verification, deliver Zoom webinar access credentials, and provide student support.

3 Personal Information

When you interact with our website to enroll in our practical digital marketing training sessions, we collect personal information directly provided by you through our interactive registration forms.

4 Name, Email Address and Phone Number

Specifically, the enrollment process collects:

• Full Name: Utilized to personalize your enrollment profile, generate your unique Enrollment ID, and prepare official workshop attendance records and tax invoices.
• Email Address: Utilized to transmit booking confirmations, PDF tax invoices, Zoom meeting credentials, calendar reminder notifications, and critical curriculum announcements.
• WhatsApp Mobile Number: Utilized to dispatch instant booking confirmation alerts, Zoom webinar joining links, passcode credentials, and live session commencement reminders via WhatsApp and SMS.
• Location / City & Current Profile: Collected to contextualize practical training examples during live case-study breakdowns for students, working professionals, and business owners.

5 Webinar and Workshop Registration Information

Upon registration submission, our system automatically generates a cryptographically random, unique Enrollment Identifier (e.g. DCH-2026-XXXXXX) along with workshop session timestamps, scheduled date metadata (e.g. November 24, 2026), and delivery mode specifications (Live on Zoom). This ensures an organized and verifiable learning experience.

6 Payment Information and Razorpay Integration

Payment Credential Privacy: Digital Crazy Hub does NOT collect, view, process, or store sensitive financial credentials on our servers. Specifically, we never store credit/debit card numbers, CVV codes, card expiration dates, UPI MPINs, or net banking passwords.

All sensitive payment data is inputted directly into Razorpay's encrypted checkout modal using 256-bit TLS/SSL encryption. Following transaction completion, our server receives only non-sensitive verification tokens:

• Razorpay Order ID (e.g. order_...)
• Razorpay Payment ID (e.g. pay_...)
• Cryptographic HMAC-SHA256 signature token
• Transaction status (captured / paid) and payment method type (e.g. UPI, Net Banking, Card)

7 How We Use Your Information

We process your data strictly for legitimate educational and administrative purposes:

• To process your workshop registration and assign your unique seat.
• To verify payment integrity server-side and prevent fraudulent transactions.
• To generate and issue automated PDF Tax Invoices delivered to your registered email.
• To transmit Zoom webinar access links, meeting passwords, and calendar invites.
• To send important workshop updates, schedule changes, and technical setup guidance.
• To provide timely customer assistance regarding enrollment, billing, or access queries.

8 Google Sheets Integration

To ensure reliable synchronization and real-time operational seat management across our administrative desk, our application securely synchronizes confirmed enrollment metadata to Google Sheets via an isolated Google Apps Script Web App API.

• Synchronized fields include: Enrollment ID, Student Name, Email, Phone, Course Title, Amount, Payment Status, Payment ID, Enrollment Date, and Last Updated Timestamp.
• Communication with Google Apps Script occurs exclusively over encrypted HTTPS POST connections utilizing server-to-server shared secret authentication.
• Formula and CSV injection sanitization is executed on all fields before transmission to prevent spreadsheet execution vulnerabilities.

9 Data Storage and Security

We deploy multi-layered technical and organizational controls to protect student data against unauthorized access, loss, alteration, or disclosure:

• Server Hardening: Relational database records are protected via PDO prepared statements, preventing SQL injection vulnerabilities.
• Transport Encryption: All website traffic, API interactions, and payment sessions are encrypted in transit using industry-standard TLS/HTTPS protocols.
• Directory & Secret Isolation: Backend configuration files, environment variables, database credentials, and log files are isolated outside the public web root and protected by Apache .htaccess access controls.
• Rate Limiting: Enrollment endpoints utilize atomic flock file-based rate limiting to prevent automated spam and brute-force abuse.

10 Cookies and Website Analytics

Our website uses minimal, essential cookies and temporary local/session storage strictly required for website operation and enrollment checkout workflow continuity:

• Essential Session Storage: Used to temporarily retain order IDs and verified enrollment tokens so you can be redirected smoothly to your confirmation page and download your PDF invoice.
• Security Verification: We integrate Google reCAPTCHA v3 to defend enrollment forms against malicious automated bots and automated enrollment spam. Interaction data is processed in accordance with Google's Privacy Policy and Terms of Service.
• We do not utilize intrusive third-party cross-site trackers or sell browsing profiles to advertising brokers.

11 Information Sharing and Third-Party Services

We do not sell, rent, trade, or monetize your personal information. Your information is shared only with trusted third-party service providers essential for delivering the workshop:

• Razorpay: Facilitates payment processing, transaction verification, and billing.
• Zoom Video Communications: Delivers the live interactive 3-hour video webinar session.
• Google Workspace / Apps Script: Facilitates secure administrative spreadsheet synchronization.
• SMTP Mail Delivery: Dispatches automated enrollment confirmation emails and PDF tax invoices.
• Legal Compliance: We may disclose information if required by court order, law enforcement investigation, or mandatory statutory obligations under Indian law.

12 Data Retention

We retain student personal information only for as long as necessary to fulfill the educational purposes outlined in this policy, manage workshop access, maintain accounting and taxation records in accordance with Indian tax laws, and resolve any billing or refund inquiries. Once data is no longer required, it is securely anonymized or permanently deleted.

13 User Rights and Privacy Requests

Under applicable Indian data protection frameworks, you hold the following rights regarding your personal data:

• Right to Access: You may request a summary of the personal information we hold about you.
• Right to Correction: You may request corrections to inaccurate or outdated contact information (e.g. updating an email or WhatsApp number to receive Zoom links).
• Right to Erasure: You may request the deletion of your personal information, subject to mandatory statutory tax and accounting retention requirements.
• Grievance Redressal: You have the right to seek resolution of any data-handling grievances by contacting our designated privacy officer.

14 Children's Privacy

Our practical digital marketing workshops are designed for college students, graduates, job seekers, working professionals, and business owners aged 18 years or older. We do not knowingly collect personal data from minors under the age of 18 without parental or guardian consent. If you believe a minor has registered without supervision, please contact us immediately to have the data removed.

15 Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect improvements in our workshop offerings, technical systems, or applicable legal standards. Any modifications will be posted directly to this page with an updated "Last Updated" date. We encourage participants to review this page periodically. Continued use of our website constitutes acceptance of the revised terms.

16 Contact Information & Grievance Redressal

For questions, privacy inquiries, data correction requests, or grievance redressal, please reach out to our team: