Privacy Policy

At Scale Up HR Hub, your privacy matters. This Privacy Policy explains what personal information we collect when you visit our website, register for our webinar, or enroll in our programs — and how we use, store, and protect it. By using our services, you consent to the practices described here. This policy is aligned with India's Digital Personal Data Protection Act (DPDPA) 2023 and applicable data privacy standards.

By continuing to use our website, you consent to our use of cookies as described above. You can adjust your browser settings to refuse cookies, but this may affect your ability to use certain features of our site.

1. Who We Are

Scale Up HR Hub is an online HR coaching and training business operated by Gayathri, based in India. We offer programs, webinars, community access, and coaching services for HR professionals.

For any privacy-related queries, contact us at:

fliptogayathri@gmail.com

2. What We Collect & Why

We only collect data that is necessary to deliver our services and communicate with you. Here is a clear summary:

Data Collected Why We Collect It
Full name To personalise your experience and issue certificates
Email address To send webinar access, program updates, and communications
WhatsApp number To share session links, reminders, and community access
Current role & years of experience To match you to the right program level
Payment information Processed securely via Razorpay — we do not store card details
Session participation data To track attendance and deliver recordings to enrolled participants

How We Use Your Data

Your data is used strictly for the following purposes:

  • Delivering program content, session recordings, and program-related communications
  • Sending you updates about your enrollment, cohort schedule, and program changes
  • Processing your payment through our secure payment partner Razorpay
  • Providing access to community platforms (Graphy, WhatsApp groups)
  • Sending marketing communications about new programs or offers — you can opt out at any time
  • Improving our website experience through anonymised analytics data
  • Issuing certificates of completion where applicable

Third-Party Platforms We Use

To deliver our programs and services, we work with the following third-party platforms. Each has its own privacy policy governing how they handle your data:

  • Graphy — Our course delivery and community platform. Your enrollment data, profile, and learning activity are stored on Graphy's servers. Please review Graphy's Privacy Policy at graphy.com.
  • Razorpay — Our payment gateway. Payment transactions are processed and secured by Razorpay. We do not store your card or banking details. Please review Razorpay's Privacy Policy at razorpay.com.
  • WhatsApp Business — Used for program communications and community groups. Messages shared in WhatsApp groups are visible to all group members. Please use discretion about what personal information you share.
  • Zoom / Video Conferencing — Live sessions are conducted via video conferencing tools. Sessions may be recorded. Recorded sessions are shared only with enrolled participants of that program.
  • Email Marketing Platform — Used to send program updates and communications. You can unsubscribe at any time via the link in any email.
  • Google Analytics — Used on our website to understand visitor behaviour. Data is anonymised and aggregated. No personally identifiable information is shared with Google Analytics.

How Long We Keep Your Data

We retain your personal data only for as long as necessary to provide our services and comply with legal obligations. Here's a detailed breakdown of our data retention policy:

a. Webinar Registration Data: We retain webinar registration information (name, email, contact details) for 12 months from the date of registration. This allows us to send you recordings, follow-up materials, and relevant program updates. After 12 months, this data is securely deleted unless you have enrolled in a paid program.

b. Program Enrollment Data: Your enrollment information, learning progress, certificates, and participation records are retained for the duration of the program plus an additional 2 years. This ensures you can access your certificates and we can maintain records for any future reference or dispute resolution. After this period, data is archived and then deleted.

c. Payment Records: Payment information and transaction records are retained for 7 years in compliance with Indian tax and accounting regulations. This includes invoice details, payment method information (though card details are never stored by us—only by Razorpay), and transaction history. After 7 years, these records are securely destroyed.

d. Community Interaction Data: Your posts, comments, and interactions in community platforms (WhatsApp groups, Graphy community) are retained for 30 days after you remove or delete them. This allows for recovery in case of accidental deletion. After 30 days, deleted content is permanently removed from our systems. Public posts may remain visible to other community members unless you request their removal.

Important Notes: We may retain certain data longer if required by law, for legal proceedings, or to resolve disputes. If you request deletion of your account, we will delete all personal data associated with your account within 30 days, except where retention is legally required. For any questions about how long we retain your specific data, please contact us at fliptogayathri@gmail.com.

4. YOUR CHOICES:

a. Limit the information You provide: You always have an option to choose the information You provide to us, including the option to update or delete Your information. However, please note that lack of certain information may not allow You access to the Platform or any of its features, in part or in full. For example: information required for Your registration on the Platform.

b. Limit the communications You receive from us: Further, You will also have the option to choose what kind of communication You would like to receive from us. However, there may be certain communications that are required for legal or security purposes, including changes to various legal agreements, that you may not be able to limit.

c. Reject Cookies and other similar technologies: You may reject or remove cookies from Your web browser; You will always have the option to change the default settings on Your web browser if the same is set to 'accept cookies'. However, please note that some of the services/products offered on the Platform may not function or be available to You, when the cookies are rejected, removed or disabled.

7. THIRD PARTY WEBSITES

You may find links to the websites and services of our partners, suppliers, advertisers, sponsors, licensors and other third parties. The content or links that appear on these sites are not controlled by us in any manner and we are not responsible for the practices employed by such websites. Further, these websites/links thereto, including their content, may be constantly changing and the may have their own terms of use and privacy policies. Browsing and interaction on any other website, including websites which have a link to our Site, is subject to that terms and policies published on such websites.

8. CROSS-BORDER DATA TRANSFER

Your information including any Personal Information is stored, processed, and transferred in and to the Amazon Web Service (AWS) servers and databases located in India. We may also store, process, and transfer information in and to servers in other countries depending on the location of our affiliates and service providers.

Please note that these countries may have differing (and potentially less stringent) privacy laws and that Personal Information can become subject to the laws and disclosure requirements of such countries, including disclosure to governmental bodies, regulatory agencies, and private persons, as a result of applicable governmental or regulatory inquiry, court order or other similar process.

If you use our Platform from outside India, including in the USA, EU, EEA, and UK, your information may be transferred to, stored, and processed in India. By accessing our Platform or otherwise giving us information, you consent to the transfer of information to India and other countries outside your country of residence.

9. DURATION FOR WHICH YOUR INFORMATION IS STORED

We will retain Your information for as long as it is required for us to retain for the purposes stated hereinabove, including for the purpose of complying with legal obligation or business compliances.

Further, please note that we may not be able to delete all communications or photos, files, or other documents publicly made available by you on the Platform (for example: comments, feedback, etc.), however, we shall anonymize your Personal Information in such a way that you can no longer be identified as an individual in association with such information made available by you on the Platform. We will never disclose aggregated or de-identified information in a manner that could identify you as an individual.

Note: If you wish to exercise any of your rights (as specified in 'Your Rights' section below) to access, modify and delete any or all information stored about you, then you may do so by using the options provided within the Platform. You can always write to us at the email address specified in the 'Grievances' section below

10. MODIFICATION TO PRIVACY POLICY:

We may modify, revise or change our Policy from time to time; when we do, we will revise the 'updated date' at the beginning of this page. We encourage You to check our Platform frequently to see the recent changes. Unless stated otherwise, our current Policy applies to all information that we have about You.

11. GRIEVANCES:

If you have any questions about this Policy, wish to exercise your rights, concerns about privacy or grievances, please write to us with a thorough description via email to fliptogayathri@gmail.com.

COUNTRY SPECIFIC ADDITIONAL RIGHTS

TERMS APPLICABLE IF YOU ARE AN INDIAN RESIDENT

Your Rights: If you are located in India, you may have the following rights under the Personal Data Protection Bill (PDPB) when it becomes a legislation. All requests can be made by using the option provided to you within the Platform upon your login. You may also write to us as stated in the "Grievances" section above, and we will address you concerns to the extent required by law.

Right to Confirmation and Access: You have the right to get confirmation and access to your Personal Information that is with us along with other supporting information.

Right to Correction: You have the right to ask us to rectify your Personal Information that is with us that you think is inaccurate. You also have the right to ask us to update your Personal Information that you think is incomplete or out-of-date.

Right to Data Portability: You have the right to ask that we transfer the Personal Information you gave us to another organisation, or to you, under certain circumstances.

Right to be Forgotten: You have the right to restrict or prevent the continuing disclosure of your Personal Information under certain circumstances.

Right to Erasure: If you wish to withdraw/remove your Personal Information from our Platform, you have the right to request erasure of your Personal Information from our Platform. However, please note that such erasure will remove all your Personal Information from our Platform (except as specifically stated in this Policy) and may result in deletion of your account on the Platform permanently, and the same will not be retrievable.

TERMS APPLICABLE IF YOU ARE A RESIDENT OF UNITED KINGDOM (UK), A EUROPEAN UNION (EU) COUNTRY OR EUROPEAN ECONOMIC AREA (EEA)

Your Rights: If you are located in the United Kingdom (UK) or European Union (EU) or European Economic Area (EEA), you have the following rights under the UK and EU General Data Protection Regulation (GDPR) respectively. All requests should be sent to the address noted in the "Grievances" section above, and we will fulfil requests to the extent required by applicable law.

Right to access Your Personal Information: You have the right to receive confirmation as to whether or not Personal Information concerning you is being processed and, where that is the case, access to the Personal Information can be sought;

Right to Rectification: Our goal is to keep your Personal Information accurate, current and complete. Please contact us if you believe your information is inaccurate or incomplete;

Right to Erasure: In some cases, you have a legal right to request that we erase your Personal Information;

Right to object to Processing: You have the right to object to our processing of your Personal Information under certain conditions;

Right to restrict Processing: You have the right to request that we restrict the processing of your Personal Information, under certain conditions;

Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions;

Right to make a complaint to a government supervisory authority: If you believe we have not processed your Personal Information in accordance with applicable provisions of the GDPR, we encourage you to contact us at email address provided in the 'Grievances' section above. You also have the right to make a GDPR complaint to the relevant Supervisory Authority or seek a remedy through the courts. A list of Supervisory Authorities is available at: https://edpb.europa.eu/about-edpb/board/members_en. If you need further assistance regarding your rights, please contact us using the contact information provided below, and we will consider your request in accordance with applicable law. You can identify the supervising authority of your concern by visiting https://edpb.europa.eu/about-edpb/board/members_en.

Right to not be subject to automated decision-making, including profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects concerning you.

We collect and process Personal Information about you only where we have a legal rationale to do so. Specific legal rationale applied for the same will depend on the type of Personal Information collected and the context in which the same is being processed, including the Services involved.

TERMS APPLICABLE IF YOU ARE A CALIFORNIA STATE RESIDENT

If you are a California state resident, then you have the following rights to the extent, and in the manner, set out in the CCPA:

  • The right to access the Personal Information that we hold on you;
  • The right to know what Personal Information we intend on collecting from them before the point of collection;
  • The right to opt in or out of marketing, analytics, and other similar activities;
  • The right to equal services without discrimination; and
  • The right to request deletion of Personal Information.

The above rights, the manner in which you can exercise the same and the category of and the manner in which we collect your information, are detailed below.

CCPA NOTICE AT COLLECTION:

For purposes of the CCPA, in collecting the information described above, we collect the categories of Personal Information listed below from you:

Identifiers: We may collect your name, email address, mobile number, username, unique personal identifier, and Internet Protocol (IP) address. We use Identifiers as set forth in the "How We Use and Share the Information Collected" section of this Policy, like your name, contact information, and device and online identifiers.

Characteristics of Personal Information described in the California Customer Records statute: We may collect your name, email address, username, unique personal identifier, and gender. We use Categories of Personal Information described in the California Consumer Records statute as set forth in the 'How We Use and Share the Information Collected' section of this Policy.

Internet or other electronic network activity information: We collect cookies as described above, we will automatically receive information from your browser and your device, which includes the date and time of your visit to the Platform as well as your location, Internet Protocol (IP) address, domain server, browser type, access time, and data about which pages you visit on the Platform. We use Internet or other electronic network activity information as set forth in the "How We Use and Share the Information Collected" section of this Policy.

Geolocation data: We may collect your IP address. We may use Geolocation Data as set forth in the "How We Use and Share the Information Collected" section of this Policy.

Audio, electronic, visual or similar information: We may collect your profile picture or other audio or visual information uploaded as content to the Platform. We use audio, electronic, visual or similar information as set forth in the "How We Use and Share the Information Collected" section of this Policy.

Inferences: We may make inferences based upon the Personal Information collected (such as likelihood of retention or attrition). We use Inference information as set forth in the "How We Use and Share the Information Collected" section of this Policy.

CCPA DATA PRACTICES DURING THE LAST 12 MONTHS:

Personal Information collected: As described in this Policy, we have collected the categories of Personal Information listed below during the preceding 12 months:

  • Identifiers
  • Characteristics of Personal Information described in the California Customer Records statute
  • Internet or other electronic network activity information
  • Geolocation data
  • Commercial information
  • Audio, electronic, visual, thermal, olfactory, or similar information Inferences

Categories of sources: We have collected the Personal Information identified in this Policy from you and our payment processors.

Business and commercial purposes for collecting: We have collected the categories of Personal Information listed above for the following purposes:

  • Operate the Platform;
  • Provide our Services to you;
  • Honor our Terms and Conditions and contracts;
  • Ensure the privacy and security of our Platform and Services;
  • Manage our relationships with you;
  • Communicate with you;
  • Analyze use of the Platform and our Services;
  • Enhance your experience;
  • Track visits to the Platform;
  • Provide you with a more personal and interactive experience on the Platform; and
  • Usage analytics purposes.

Personal Information sold: We have not sold categories of Personal Information during the preceding 12 months.

Personal Information disclosed for a business purpose: We have disclosed for a business purpose the categories of Personal Information listed below during the preceding 12 months:

  • Identifiers
  • Characteristics of Personal Information described in the California Customer Records statute
  • Internet or other electronic network activity information
  • Geolocation data
  • Commercial information
  • Audio, electronic, visual, thermal, olfactory, or similar information Inferences

We have disclosed each category of Personal Information to the following categories of third parties: (1) corporate parents, subsidiaries, and affiliates; (2) advisors (accountants, attorneys); (3) service providers (data analytics, data storage, mailing, marketing, website and platform administration, technical support); and (4) operating systems and platforms.

CONSUMER RIGHTS AND REQUESTS UNDER THE CCPA

The CCPA gives consumers the right to request that we (1) disclose what Personal Information we collect, use, disclose, and sell, and (2) delete certain Personal Information that we have collected or maintained. you may submit these requests to us as described below, and we honor these rights where they apply.

If a request is submitted in a manner that is not one of the designated methods for submission, or if the request is deficient in some manner unrelated to our verification process, we will either (i) treat the request as if it had been submitted in accordance with the designated manner, or (ii) provide you with specific directions on how to submit the request or remedy any deficiencies with the request, as applicable.

Request to Know: As a California resident, you have the right to request: (1) the specific pieces of Personal Information we have collected about you; (2) the categories of Personal Information we have collected about you; (3) the categories of sources from which the Personal Information is collected; (4) the categories of Personal Information about you that we have sold and the categories of third parties to whom the Personal Information was sold; (5) the categories of Personal Information about you that we disclosed for a business purpose and the categories of third parties to whom the Personal Information was disclosed for a business purpose; (6) the business or commercial purpose for collecting, disclosing, or selling Personal Information; and (7) the categories of third parties with whom we share Personal Information. Our response will cover the 12-month period preceding our receipt of a verifiable request.

Request to Delete: As a California resident, you have a right to request the erasure/deletion of certain Personal Information collected or maintained by us. As described herein, we will delete your Personal Information from our records and direct any service providers (as defined under applicable law) to delete your Personal Information from their records. However, we are not required to honor a deletion request if an exemption applies under the law.