Privacy Policy
This policy explains what personal information Grapinz collects, why we collect it, how we use it, how long we keep it, and what rights you have over it.
Last updated: 21 September 2025
Who we are
Grapinz operates this website and provides technology, education, marketing and business consulting services from its registered office at 152/4, Second Floor, Johnson Enclave, 6th Extension, Gandhipuram, Coimbatore, Tamil Nadu, 641 012, India.
For any question about this policy, or to exercise any of the rights described below, contact Arun S at info@grapinz.com or on +91 82706 61266.
Information we collect
We collect information you give us directly, and a limited amount of technical information collected automatically when you use the site.
- Contact details you submit through forms — name, email address, phone number, country and any message content
- Enrolment and registration details for courses and internships, including educational background where you provide it
- Account credentials for students and administrators, stored only in hashed form
- Technical data such as IP address, browser type, device type and pages visited
- Analytics data about how the site is used, where analytics is enabled
Why we use it
We use personal information only for the purpose it was provided for.
- Responding to enquiries and consultation requests
- Processing course enrolments and internship registrations
- Delivering programmes and issuing certificates
- Providing and supporting services you have engaged us for
- Improving the website and understanding how it is used
- Meeting legal, accounting and record-keeping obligations
Legal basis
We process personal data where it is necessary to perform a contract with you, where you have given consent, where we have a legitimate interest that does not override your rights, or where the law requires it.
Processing is carried out in accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 together with the rules made under it.
Sharing your information
We do not sell personal information, and we do not share it for anyone else’s marketing.
We share it only with service providers who help us operate — website hosting, email delivery and analytics — and only to the extent needed to provide that service. Those providers are bound to use it for no other purpose.
We may disclose information where required by law, by a court order, or to establish or defend a legal claim.
Certificate verification
Our public certificate verification page confirms whether a certificate is valid. It deliberately displays only the minimum needed to do that: the holder’s name, the programme, the duration, the completion date and the certificate ID.
It never exposes contact details, addresses, marks, assessment records, internal notes or any other personal information. Verification requires no account and is free to use.
How long we keep it
We keep personal data only as long as it is needed, or as long as the law requires.
- Enquiries that do not lead to an engagement — 24 months from the last contact
- Client and student records — 8 years from the end of the engagement, to meet accounting and tax obligations
- Student certification records — retained indefinitely, so certificates remain verifiable for the holder’s working life
- Website analytics — 26 months
- Server and security logs — 12 months
Security
We use technical and organisational measures appropriate to the risk: encrypted connections (HTTPS), hashed passwords, access controls that limit staff to what their role requires, validated inputs and rate limiting.
No system is completely secure. If a breach affecting your personal data occurs, we will notify affected individuals and the relevant authority as required by law.
Your rights
You have the right to:
- Request a copy of the personal data we hold about you
- Ask us to correct data that is inaccurate or incomplete
- Ask us to delete data where we have no ongoing lawful reason to keep it
- Object to or restrict certain processing
- Withdraw consent at any time, where processing is based on consent
- Nominate another person to exercise these rights on your behalf in the event of death or incapacity
- Complain to the Data Protection Board of India if you believe your rights have not been respected
How to make a request
Write to Arun S at info@grapinz.com, or by post to 152/4, Second Floor, Johnson Enclave, 6th Extension, Gandhipuram, Coimbatore, Tamil Nadu, 641 012, India.
We respond to requests within 30 days. We may ask you to confirm your identity before we release any personal data, so that we do not disclose your information to someone else.
Cookies
We use only the cookies necessary for the site to function, plus analytics cookies where analytics is enabled. Our cookie policy explains this in detail.
Changes to this policy
We may update this policy from time to time. The revision date at the top always reflects the current version, and material changes will be communicated where we have a way to reach you.