What we collect, and what we do not
This is the notice required by section 5 of the Digital Personal Data Protection Act, 2023. It is short because there is not much to say, and specific because a notice that could describe any website describes nothing.
The short version
You can take the whole assessment, and the whole course, and see your results without giving us anything. Nothing leaves your browser while you do. We ask for your details at two points only: when you want the full report emailed to you, and when you want your course certificate. If you never ask for either, we never collect anything about you.
Who is responsible
Certinal Software Pvt Ltd is the Data Fiduciary for anything collected here. Questions, requests and grievances go to privacy@certinal.com, which is monitored by the person responsible for answering them.
What is collected, item by item
Every row below applies only when you ask for the report by email, except the organisation name, which you may also give during the assessment so it can be printed on the report.
| What | Why | When |
|---|---|---|
| Your name | To address the report, and to print on a course certificate. | Only if you ask us to email you a report or a certificate. |
| Your email address | To send you the report or the certificate, and to answer questions about it. | Only if you ask us to email you a report or a certificate. |
| Your organisation's name | Printed on the report as the organisation assessed, and on a certificate if you give it. | If you give it. It is optional for a certificate. |
| Your role, and your phone number | So a reply can come from someone who knows your area, or by phone if you prefer that. | Both optional. Leave them blank and everything still works. |
| Your answers and scores | They are what the report is made of, and they let us answer a question about it. | Only if you ask for the report by email. Course answers are never sent to us at all. |
| Your course result | The pass mark and score are printed on a certificate of achievement. | Only if you ask for a certificate. Only the final score, never your answers. |
| The country your request came from | To know which countries the tools reach. It is not linked to anything else about you. | Only if you ask for the report by email. |
What is not collected
- Your IP address. It is not written to any record we keep.
- Any cookie. This site sets none, for any purpose, including analytics.
- Any advertising or tracking identifier, from us or from anyone else.
- Your course progress or quiz answers. They stay in your browser and are never sent to us.
- Anything at all, if you do not ask us to email you a report or a certificate.
One thing we would rather disclose than be caught at
Every page on this site loads two typefaces from Google Fonts, which means your browser contacts Google and Google can see your IP address. We do not receive it and we do not use it. It is a real transfer to a third party and it would be easy to leave out of a notice, so it is in this one. Self-hosting the fonts would remove it.
How long it is kept
24 months from the day you ask, then deleted. If you ask us to delete it sooner, we do that instead and we do not keep a copy. Today nothing is retained at all: the details you give are used to send the email and then discarded, and the report and the certificate are rebuilt from what you send rather than from anything we hold.
There is no second, quieter collection behind this one. The code has a mechanism for storing every response silently and it is switched off, because nothing about this tool needs it.
Who else sees it
Certinal, and the email service that carries the message to you. Nobody else. It is never sold, and never shared for anyone else's marketing. If you ticked the optional box for occasional DPDP updates, that is the only other thing we will send you, and one click stops it.
Your rights, and how to use them
All of these are exercised the same way: email privacy@certinal.com. No form, no account, no reason required.
- Ask what we holdSection 11
- We will send you the record itself, not a summary of it.
- Have it corrected or completedSection 12
- Tell us what is wrong and we will fix it.
- Have it erasedSection 12
- We delete it. No reason is needed and none will be asked for.
- Withdraw your consentSection 6(4) to 6(6)
- One email, or the unsubscribe link in any message. It is as easy to withdraw as it was to give, which is what the Act requires.
- Raise a grievanceSection 13
- Write to the address below. If we have not resolved it, you may then approach the Data Protection Board of India.
- Nominate someoneSection 14
- You may nominate a person to exercise these rights on your behalf in the event of death or incapacity.
Your answers are yours whatever you decide
Both assessments have a "Download my answers" link that needs no email address, no consent and no promise from us, because the file goes straight to your own disk. The course keeps your place the same way, in your own browser. If you would rather keep your work without giving us anything, use those.
Back to the gap assessmentThis notice describes the DPDP Hub assessment tools. It is not legal advice, and it is not Certinal's notice for its own products, which have their own.