Privacy Policy

1. Notice of Collection

We collect and process the following categories of personal data across our ecosystem:

• Identity Data: Name, professional role, and age range for Academy certification and portal access.
• Contact Data: Email address and mobile number for report delivery, platform alerts, and strategic inquiries.
• Sensitive Data: Permanent Account Number (PAN) for statutory 80G donation compliance within the Foundation.
• Strategic Data: Operational energy usage, city-level climate metrics, and industrial maturity responses processed via our Consulting and CAP portals.

2. Purpose of Processing

Your data is processed exclusively for:

• Consulting: Facilitating strategic ESG assessments, city climate planning, and industrial engineering engagements.
• Academy: Managing technical enrollment, progress tracking, and issuing verifiable sustainability certifications.
• Foundation: Managing community-led environmental missions and ensuring compliance for charitable contributions.

3. Your Rights as a Data Principal

Under the DPDP Act 2023, you hold the following rights across all EinTrust platforms:

• Right to Access: Request a summary of the personal data processed by EinTrust.
• Right to Correction: Update inaccurate professional or personal information via your centralized Profile Hub.
• Right to Erasure: Request the deletion of your data. Deleting your Academy profile will purge associated course records and linked leads across the ecosystem.
• Right to Withdraw Consent: You may withdraw consent for data processing at any time, subject to legal or contractual restrictions.

4. Processing of Children's Data

For users identified in the "Under 18" age range, EinTrust requires verifiable parental or guardian consent before processing personal data. We do not engage in behavioral monitoring or tracking of children.

5. Data Storage and Security

Personal data is stored securely using Firebase (Google Cloud Platform). We implement institutional-grade security safeguards. In the event of a personal data breach, we will notify the Data Protection Board and affected users as prescribed by the Act.

6. Third-Party Data Processors

To provide professional services and secure transactions, we engage the following data processors:

• Razorpay: Processes all financial transactions for Consulting, Academy, and Foundation payments in a PCI-DSS compliant environment.
• Microsoft: Facilitates consultation bookings and ecosystem calendar management.
• Google/Firebase: Provides secure cloud infrastructure and authentication.