Privacy Policy
How we collect, use, and protect your personal information.
Last updated: September 2026
Pune Training Company Pvt Ltd (“PTC”, “we”, “us”, or “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit punetrainingcompany.com or use our services.
Information We Collect
- Account information: Name, email address, phone number, and role when you create an account.
- LinkedIn sign-in data: If you choose to sign in with LinkedIn, we receive your name, email address, profile picture, and LinkedIn member ID from LinkedIn (via the
openid,profile, andemailscopes) solely to create and authenticate your account. - LinkedIn Page data (not yet enabled): Once we switch on Company Page publishing, PTC administrators will receive an access token for our Company Page and aggregate engagement metrics on posts we publish (see “LinkedIn Company Page Publishing” below).
- Registration data: Company name and payment screenshots when you register for a training session.
- Trainer profile data: Professional bio, credentials, experience, and media uploads provided during onboarding.
- Usage data: Pages visited, session duration, and referral source via Vercel Analytics and Google Analytics (anonymised).
- Interaction data: Microsoft Clarity records how you move through the site — clicks, scrolling, mouse movement, and page navigation — to produce heatmaps and session replays that show us where pages are confusing. On the signed-in parts of the site (your account, dashboard, trainer portal and workspaces) and on the sign-in, sign-up and password pages, we mask the page content, so those replays show us layout and interaction only, not what is on screen or what you type. Pages that carry a one-time link from an email — verifying your address, resetting your password, accepting an invitation — are excluded from recording entirely.
- Communication data: Messages you send via our contact or inquiry forms.
How We Use Your Information
- To create your account and authenticate you when you sign in (including via Sign In with LinkedIn).
- To process and manage your training registrations.
- To verify trainer credentials and manage trainer profiles.
- To respond to inquiries and provide customer support.
- To send transactional emails (registration confirmations, verification links).
- To improve our website and services through aggregated analytics.
Data Sharing
We do not sell your personal data. We share information only with:
- Service providers: Vercel (hosting & analytics), Google Analytics and Microsoft Clarity (website analytics), MongoDB Atlas (database), LinkedIn (Company Page publishing — not yet enabled, see below), and email delivery providers — solely to operate our platform.
- Trainers: Your name and contact details may be shared with the trainer whose session you register for.
- Legal requirements: Where required by applicable Indian law (including the DPDPA 2023).
Signing In with LinkedIn
We offer “Sign In with LinkedIn” as an optional, convenient way to create and access your account, using LinkedIn’s OpenID Connect service. Using it is entirely voluntary — you can always register with an email address instead.
- What we receive: Only your name, email address, profile picture, and LinkedIn member ID. We request the minimum scopes needed to sign you in (
openid,profile,email) and nothing more. - How we use it: Solely to authenticate you and populate your PTC profile. We do not post to LinkedIn on your behalf, access your connections or messages, or use LinkedIn data for advertising. Sign-in data will never be combined with the Company Page publishing feature described below, even once it is enabled.
- We never sell or share it: LinkedIn-provided data is never sold or shared with third parties for their own purposes. It is handled in accordance with the LinkedIn API Terms of Use.
- Revoking access: You can revoke PTC’s access at any time from your LinkedIn permitted services settings, or by asking us to delete your account (see below).
Your use of Sign In with LinkedIn is also governed by LinkedIn’s own Privacy Policy.
LinkedIn Company Page Publishing
Not yet enabled. This is an internal tool for PTC staff who already administer our Company Page. Once switched on, it will let those staff publish programme and workshop announcements to PTC’s own LinkedIn Company Page (linkedin.com/company/pune-training-company) using LinkedIn’s Community Management API, and view aggregate engagement on those posts. We are publishing this section in advance, before the feature goes live, so the intended data handling is on the record.
- Who will use it: Only PTC staff who administer our Company Page. Site users, trainers, and other organisations on this site will never be asked to grant Community Management permissions.
- Scopes requested:
w_organization_social,r_organization_socialandr_organization_admin, to be granted by our admins via LinkedIn’s OAuth flow to act on our own Page only — not to view the Page’s follower list, its admin roster, or any other organisation’s Page. - What we will store: The admin’s access token, the IDs of posts we publish, and aggregate engagement counts (e.g. number of reactions and comments) for those posts, to display in an internal dashboard.
- What we will not do: We will not post on behalf of any member or other organisation, will not collect, store or display LinkedIn member profile data, connections or messages, will not combine this data with Sign In with LinkedIn data, and will not sell or share LinkedIn data with third parties.
- Retention: Access tokens will expire 60 days after they are granted and will not be refreshed automatically — reconnecting will require the admin to re-grant these permissions via LinkedIn’s OAuth flow. Tokens will also be deleted immediately when an admin revokes access or leaves PTC. Post IDs and aggregate metrics will be retained only while the post remains live on our Page (removed no later than 90 days after the post is taken down) and will be permanently deleted within 10 days of a request, matching LinkedIn’s own deletion window for this data.
This integration, once enabled, will be used in accordance with LinkedIn’s Marketing Developer Terms (the agreement that covers LinkedIn’s Community Management APIs).
Data Retention & Deletion
We retain your account data for as long as your account is active. Registration records are kept for accounting and dispute purposes for up to 5 years. You may request deletion of your account and associated data by contacting us at info@punetrainingcompany.com; we act on verified requests within 30 days.
If you request deletion or close your account, we will delete the personal data we received from LinkedIn on your behalf immediately, except where we are required to retain limited records to meet legal obligations; any other account data is deleted within the 30-day window above.
How We Protect Your Data
We take reasonable technical and organisational measures to safeguard your personal data against unauthorised access, disclosure, alteration, or loss:
- Encryption in transit: All traffic to and from our site — including sign-in and data sent to or received from LinkedIn — is encrypted over HTTPS (TLS).
- Access controls: Personal data is stored on access-controlled infrastructure (MongoDB Atlas), and access is limited to authorised personnel who need it to operate the platform.
- Authentication: Accounts are protected by session-based authentication; we never receive or store your LinkedIn password.
- Data minimisation: We collect only the data we need and request the minimum LinkedIn scopes required to sign you in.
No method of transmission or storage is completely secure, but we continually review our practices to protect your information.
Your Rights
Under the Digital Personal Data Protection Act 2023 (DPDPA) and applicable regulations, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate personal data.
- Request erasure of your data (subject to legal retention obligations).
- Withdraw consent where processing is consent-based.
To exercise any of these rights, contact us at info@punetrainingcompany.com.
Cookies
We use session cookies for authentication and a single localStorage key (ptc-feedback-submitted) to track whether you have already submitted feedback for an event. Our analytics providers also set first-party cookies to tell repeat visits apart from new ones — Google Analytics (_ga) and Microsoft Clarity (_clck, _clsk). We do not use advertising or cross-site tracking cookies.
Contact
For privacy-related questions or requests, contact our data controller at:
Pune Training Company Pvt Ltd
Lane 9, Prabhat Road, Pune, Maharashtra 411004
info@punetrainingcompany.com
