Privacy Policy

Designed to support compliance with India's Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025

Effective Date: October 2026 Compliance Baseline: DPDP Act 2023 & DPDP Rules 2025 Data Fiduciary: SkillInfyTech IT Solutions Pvt. Ltd.
Need to exercise your privacy rights? You may request access, correction, erasure, or withdraw your consent at any time using our dedicated Privacy Request Form or by contacting our Privacy & Grievance desk at support@skillinfytech.com.

1. Introduction & Who We Are

SkillInfyTech IT Solutions Private Limited ("SkillInfyTech", "we", "our", or "us") operates the public website https://skillinfytech.com. We provide technical internship programs, project-based training, and certification verification for students and fresh graduates. The public main website operates on a streamlined, database-free architecture where inquiries and privacy requests are transmitted securely to designated organizational mailboxes.

As a Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (DPDP Act, 2023) and the notified Digital Personal Data Protection Rules, 2025 (DPDP Rules, 2025), we are committed to processing your personal data transparently, securely, and in accordance with the law. This policy outlines our technical and administrative practices, clearly distinguishing implemented technical safeguards from ongoing organizational duties.

2. Legal Basis for Processing

In accordance with Section 4 and Section 6 of the DPDP Act, 2023, SkillInfyTech processes digital personal data primarily on the basis of free, specific, informed, unconditional, and unambiguous consent accompanied by a clear affirmative action, or on certain specified legitimate uses as recognized under Section 7 of the Act (such as fulfilling requested services, voluntary disclosures for a specified purpose, or legal compliance).

3. Personal Data We Collect

We collect only the minimum personal data required for specific educational, assessment, administrative, and support purposes. The categories of data collected across our services are itemised below:

Touchpoint / Feature Personal Data Collected Purpose Required / Optional
Contact Inquiries (/contact) Full Name, Email Address, Phone Number, Subject, Message content Responding to inquiries, questions, course consultations, and support requests Required for inquiry submission
SPQT Aptitude Assessment Registration (/apply) Name, Email Address, Phone Number, Billing info (processed by payment gateway) Processing test registration fee (₹99), seat allocation, scheduling, and result notification Required for test participation
SPQT Examination Session (Online Assessment Platform) Candidate verification details and real-time webcam feed during the assessment session Candidate identity verification and prevention of examination malpractice during the scheduled test Required for taking the proctored SPQT examination
Student Quizzes & Assessments (LMS Platform: lms.skillinfytech.com) Student login credentials, submitted quiz responses, assessment scores, and completion status Administering academic quizzes, evaluating assessment answers, and tracking student learning progress Required for taking online assessments and quizzes
Internship Applications (External Google Forms / Google Drive) Candidate Name, Email Address, Contact Phone, College/University, Degree/Branch, Year of Study, Internship Track, Resume/CV Evaluating candidate suitability, batch allocation, and communicating internship onboarding details Required for internship selection
Certificate Verification (verifycertificate.skillinfytech.com) Intern ID, Candidate Name, Program Track, Duration, Issue Date Verifying authentic issuance of internship completion certificates to employers and candidates Publicly verifiable using unique Intern ID
Analytics & Technical Data (Website visitors) IP address (anonymized), browser user-agent, pages viewed, approximate location, GA cookies Website optimization, usage metrics, and DDoS/bot protection (via Google Analytics & reCAPTCHA) Optional (Analytics consent can be accepted or declined)

When applying for internship durations via our website, you are redirected to application forms hosted by Google Forms. Submitted application details and uploaded resumes are stored in SkillInfyTech's access-controlled Google Workspace (Google Drive/Sheets) and are not stored on the SkillInfyTech public web server.

4. Payment Processing & Financial Data Safety

When you pay application or assessment fees (such as ₹99 for SPQT), transactions are processed through authorized, PCI-DSS compliant payment aggregators (such as Razorpay Software Private Limited).

  • SkillInfyTech servers do not collect, store, or process your credit card numbers, debit card numbers, CVVs, net banking passwords, or UPI PINs.
  • We only receive a transaction reference, confirmation status, and billing contact details to verify your payment.

5. Data Processors & Third-Party Service Providers

To provide our services, we engage reputable third-party service providers (Data Processors) under appropriate confidentiality and security obligations:

  • Google LLC: Web analytics (Google Analytics 4), bot defense (Google reCAPTCHA v2), and application form intake (Google Forms, Google Drive).
  • Razorpay Software Private Limited: Secure payment processing.
  • Web Hosting & Mail Servers: Secure web hosting infrastructure and transactional email transmission.

We do not sell, rent, or trade your personal data to any marketing brokers or unauthorized third parties.

6. Children's Personal Data

SkillInfyTech's internship programs and SPQT assessments are intended for candidates who are 18 years of age or older, including college students, graduates, and freshers.

In accordance with Section 9 of the DPDP Act, 2023:

  • We do not knowingly solicit or process personal data of individuals under 18 years of age. Candidates registering for the SPQT assessment or applying for programs must be 18 years of age or older.
  • We do not undertake behavioural monitoring, tracking, or targeted advertising directed at children.
  • If you believe that personal data of an individual under 18 years of age has been inadvertently submitted to SkillInfyTech, please contact our Privacy & Grievance desk at support@skillinfytech.com so that we may promptly delete such information.

7. Data Retention & Erasure

Under Section 8(7) of the DPDP Act, 2023, personal data is retained only as long as necessary to satisfy the purpose for which it was collected or to comply with statutory and legal requirements:

  • Contact Inquiries: Transmitted via email notification to customer support mailboxes and retained only for the duration required to address the inquiry and relevant follow-ups. The main website maintains no persistent database of general contact submissions.
  • Internship Applications (Google Forms & Google Drive): Candidate applications and uploaded resumes collected through external Google Forms are stored in SkillInfyTech's access-controlled Google Workspace. These records are retained only for as long as necessary for application evaluation, internship selection, onboarding, and related operational purposes, or as otherwise required by applicable law. Applicants may request correction or erasure of their submitted data through the Privacy Request Form.
  • SPQT Assessment Registrations & Proctoring: Candidate payment records are processed and maintained securely via our payment gateway (Razorpay) for transaction settlement, receipt generation, and test eligibility verification. Real-time webcam feeds utilized for SPQT examination proctoring operate during the active assessment session strictly for candidate identity verification and anti-malpractice monitoring.
  • Student Learning Portal Data: Enrolled student credentials, course enrollments, and completion records are retained for the duration of the student's program and active account lifecycle.
  • Privacy Requests: Data Principal rights requests are retained in internal compliance archives to demonstrate compliance with statutory fulfillment timelines.
  • Erasure upon Consent Withdrawal: If you withdraw consent, we cease processing your personal data for that purpose unless retention is mandated by applicable law.

8. Technical Security Safeguards

To prevent personal data breaches, unauthorized access, alteration, or disclosure, we employ reasonable technical and organizational security measures in accordance with Section 8(5) of the DPDP Act, 2023:

  • HTTPS / TLS encryption across all website communications and web endpoints.
  • Database-free main website architecture: contact inquiries and privacy requests are processed directly via secure email transfer without storing unencrypted PII in public databases.
  • Student Learning Portal authentication safeguards: strong password hashing via PHP password_hash() (bcrypt), single-device binding tokens via cryptographic hashes (SHA-256), and parameterized SQL statements to defend against injection attacks.
  • Session and cookie security: HttpOnly, Secure, and SameSite=Lax cookie attributes to mitigate session hijacking and cross-site scripting (XSS) risks.
  • Server-side access control: restricted directory rules (Apache .htaccess deny rules) barring direct HTTP requests to internal logs, backups, configuration files, and diagnostic utilities.
  • Input sanitization and email header injection (CRLF) defenses on contact and inquiry submission handlers.
  • Cryptographic CSRF tokens and sliding-window rate limiting on forms and privacy request workflows.
  • Permanent neutralization of legacy diagnostic scripts and quarantine of unverified files.

9. Data Principal Rights

As a Data Principal under Chapter III of the DPDP Act, 2023, you have the following enforceable rights:

  1. Right to Access Information (Section 11): Request a summary of the personal data being processed about you and the identities of Data Processors with whom it has been shared.
  2. Right to Correction and Erasure (Section 12): Request the correction, completion, updating, or erasure of your personal data where it is inaccurate, incomplete, or no longer necessary for the purpose.
  3. Right to Grievance Redressal (Section 13): Register a grievance with our designated Privacy & Grievance desk regarding any aspect of personal data processing.
  4. Right to Nominate (Section 14): Nominate an individual who, in the event of death or incapacity, shall exercise your rights as a Data Principal.
  5. Right to Withdraw Consent (Section 6(4)): Withdraw previously granted consent as easily as it was provided.
Submit Privacy / Rights Request Email Privacy Contact

10. Cookies & Tracking Technologies

We use cookies and similar technologies to ensure core website functionality and to understand how our site is used:

  • Strictly Necessary Technical Controls: Transient PHP session cookies (PHPSESSID) utilized strictly when processing web security tokens (CSRF tokens and anti-abuse timers) on the contact and privacy request forms. These are strictly functional and do not track users across the internet.
  • Analytics Cookies: Optional Google Analytics 4 cookies (_ga, _ga_*) used to understand aggregate website visitor traffic. Google Analytics is configured with Google Consent Mode v2 and defaults to analytics_storage: 'denied' until you explicitly choose to accept optional analytics. You can manage or revoke this preference anytime via the "Cookie Settings" link in the footer.

11. Personal Data Breach Handling

In the unfortunate event of a personal data breach affecting your information, SkillInfyTech will notify the Data Protection Board of India and affected Data Principals in the form and manner prescribed under the DPDP Rules, 2025, detailing the nature of the breach, potential consequences, and remedial measures undertaken.

12. Grievance Redressal & Contact Information

If you have questions, concerns, or grievances regarding the processing of your personal data, please contact our designated privacy and grievance desk:

Privacy & Grievance Contact

SkillInfyTech IT Solutions Private Limited

Email: support@skillinfytech.com

General Support: support@skillinfytech.com | +91 7382622563

Response Timeline: We will acknowledge and endeavor to resolve your grievance within the statutory timelines prescribed under the DPDP Rules, 2025.

If you are not satisfied with the resolution provided by our privacy and grievance desk, you have the right to register a complaint with the Data Protection Board of India in accordance with Section 13(3) of the DPDP Act, 2023.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect operational updates or changes in applicable rules. Any revisions will be published on this page with an updated Effective Date.