Privacy & Cookie Policy

PRIVACY POLICY

1. About Cryptus

Cryptus Cyber Security Pvt. Ltd. is a cybersecurity company providing cybersecurity training, consulting, security assessments, governance, risk and compliance services, cyber awareness programs, and related cybersecurity solutions.

For purposes of applicable data protection law, Cryptus may act as a Data Fiduciary where it determines the purpose and means of processing personal data.

Where Cryptus processes personal data solely on behalf of a client and in accordance with that client's documented instructions in connection with contracted services, Cryptus may act as a Data Processor on behalf of that client. In such circumstances, the relevant contractual arrangements and the client's applicable privacy requirements may also govern the processing.

Cryptus will comply with additional obligations applicable to it if it is notified or classified as a Significant Data Fiduciary under applicable law.

2. Personal Data We Collect

2.1 Information You Provide Directly

When you contact us, request a demo, enquire about a course, register for training, download resources, or otherwise communicate with Cryptus, we may collect:

• Full name
• Email address
• Mobile or telephone number
• Company or organisation name
• Designation
• Course or training program of interest
• Organisation and industry information
• Project requirements
• Cybersecurity requirements or challenges disclosed to us
• Your enquiry or message
• Information provided during counselling or course-related communication
• Registration information
• Communication preferences
• Any other information you voluntarily provide

You should provide only information that is relevant and necessary for your enquiry, registration, or requested service.

2.2 Technical Information

When you visit our website, certain technical information may be collected automatically, depending on the technologies and services enabled on the website. This may include:

• IP address
• Browser type and version
• Device type
• Operating system
• Pages visited
• Date and time of access
• Referring website
• General website interaction information
• Session information
• Cookie and similar technology information

We use such information for website operation, security, analytics, performance improvement, and other legitimate website functions, as applicable.

3. How We Use Personal Data

Enquiry Management

• Receive and understand enquiries
• Respond to contact forms
• Respond to course enquiries
• Respond to demo requests
• Respond to training enquiries
• Schedule consultations or counselling
• Follow up on enquiries
• Provide requested information

Course and Training Communication

• Cybersecurity courses
• Training programs
• Demo classes
• Course schedules
• Counselling
• Registration
• Training-related updates
• Course-related support

Service Delivery

• Understand project requirements
• Scope cybersecurity services
• Deliver requested services
• Provide technical support
• Manage client engagements
• Communicate with clients regarding ongoing projects

Website and Service Improvement

• Website functionality
• User experience
• Training information
• Website content
• Services
• Communications

Website Security

• Protect our website and systems
• Detect suspicious activity
• Prevent misuse
• Investigate security incidents
• Maintain website and infrastructure security
• Detect and mitigate threats

Legal and Regulatory Requirements

We may process or retain personal data where necessary to comply with applicable legal, regulatory, contractual, governmental, or lawful requirements.

4. Itemised Notice and Grounds for Processing

Depending on the circumstances, Cryptus may process the following categories of personal data:

Category	Purpose	Applicable Ground
Identity information	Responding to enquiries, consultations, registrations and service communications	Consent or applicable legitimate use under the DPDP Act, as applicable
Professional information	Understanding requirements and delivering cybersecurity services or training	Consent or applicable legitimate use under the DPDP Act, as applicable
Technical information	Website operation, security, analytics and performance	Applicable legitimate use or consent, as applicable
Marketing information	Newsletters, webinars, reports, events and promotional communications	Consent

Cryptus will process personal data for specified purposes and will not knowingly use personal data for purposes incompatible with the purpose for which it was collected, except where permitted or required by applicable law.

5. Consent

You may withdraw consent at any time where processing is based on consent, through a mechanism that is as easy to use as the mechanism through which consent was given. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Where withdrawal of consent affects information necessary to provide a requested service, certain services, communications, or features may no longer be available.

You may exercise applicable consent-related requests using the contact details provided in this Privacy Policy or through a consent-management mechanism made available by Cryptus, where applicable.

6. Cookies and Similar Technologies

Cryptus may use cookies and similar technologies on its website. Cookies may be used to:

• Enable essential website functionality
• Maintain website security
• Remember preferences
• Understand website usage
• Analyse website performance
• Improve user experience
• Support marketing or advertising activities, where applicable

Some cookies may be necessary for the website to operate, while others may be optional.

Where applicable, our website may provide a cookie consent mechanism allowing you to:

• Accept All — accept all available cookie categories
• Reject Non-Essential — continue with only necessary cookies
• Manage Preferences — choose which optional cookie categories to allow

Optional cookies requiring consent should not be activated before the applicable consent is obtained. For additional information, please refer to our Cookie Policy.

7. Analytics

Where analytics services are enabled on our website, Cryptus may use analytics technologies to understand general website usage and improve our website and services.

Analytics information may include:

• Pages visited
• Approximate session information
• Website interactions
• Traffic sources
• Device information
• Browser information
• General usage patterns

Optional analytics technologies will be managed in accordance with applicable consent and privacy requirements.

8. Marketing and Advertising

Where Cryptus uses advertising or marketing technologies, these technologies may process information relating to website interactions and advertising performance.

Such technologies may be used to:

• Measure campaign performance
• Understand advertising interactions
• Improve marketing activities
• Measure campaign effectiveness
• Provide relevant communications or advertisements, where applicable

Where consent is required for optional marketing technologies, should those technologies be activated until the applicable consent has been obtained.

9. Third-Party Services

Our website may use services provided by third parties for purposes including:

• Website hosting
• Security
• Analytics
• Communication
• Forms
• Advertising
• Embedded content
• Website performance
• Customer or enquiry management

Third-party service providers may process personal data in accordance with the services they provide and their applicable privacy policies.

Where appropriate, Cryptus takes reasonable steps to require service providers processing personal data on our behalf to use the information only for authorised purposes and to implement appropriate security measures.

10. Disclosure and Sharing of Personal Data

Cryptus does not sell personal data.

We may disclose or share personal data, where necessary and permitted, with:

• Authorised employees and personnel on a need-to-know basis
• Technology and cloud infrastructure providers
• Website and security service providers
• Professional advisors, including legal, accounting, and insurance advisors
• Contractors and service providers
• Business partners involved in delivering requested services
• Training and course-related service providers
• Government, regulatory, or law-enforcement authorities where required by law or valid legal process

We may also disclose information where reasonably necessary to protect the rights, property, security, or legitimate interests of Cryptus, our users, or others, subject to applicable law.

11. International Transfer of Personal Data

Personal data may be processed or stored outside India where Cryptus uses cloud infrastructure, technology providers, or other trusted service providers located outside India.

Any transfer or processing outside India will be carried out in accordance with applicable law, including applicable requirements relating to processing of personal data outside India.

Cryptus will comply with restrictions or directions applicable to transfers of personal data under the DPDP Act and applicable rules or notifications.

12. Information Security

Cryptus takes reasonable technical and organisational measures appropriate to the nature of the personal data and processing activities to protect personal data against unauthorised access, misuse, alteration, disclosure, destruction, loss, or other unauthorised processing.

Depending on the nature of the processing, safeguards may include:

• Access controls
• Authentication mechanisms
• Secure communication
• Encryption where appropriate
• Restricted access
• Security monitoring
• Technical safeguards
• Administrative controls
• Vulnerability assessments
• Backup and recovery measures
• Employee security awareness and training

However, no website, network, electronic transmission, or storage system can be guaranteed to be completely secure.

13. Personal Data Breach

In the event of a personal data breach, Cryptus will take appropriate measures to:

• Contain and investigate the incident
• Assess and mitigate potential risks
• Take reasonable remedial measures
• Notify the relevant authority or Board where required
• Notify affected Data Principals where required
• Provide information and safety measures as required by applicable law

Notifications will be made in the form, manner, and within the timelines prescribed by applicable law and rules.

14. Data Retention

Cryptus retains personal data only for as long as reasonably necessary to fulfil the purpose for which it was collected, provide requested services, fulfil contractual obligations, comply with legal or regulatory requirements, resolve disputes, maintain security, or protect legitimate interests.

Indicative retention periods may vary depending on the nature of the information and the applicable legal or contractual requirements.

When personal data is no longer required, Cryptus may securely delete, anonymise, or otherwise dispose of it, subject to applicable legal, regulatory, contractual, and security requirements.

15. Your Rights as a Data Principal

15.1 Right to Access Information

You may request information about the personal data processed by Cryptus and other information required to be provided under applicable law.

15.2 Right to Correction and Erasure

You may request correction, completion, updating, or erasure of personal data where applicable and subject to legal requirements.

15.3 Right to Grievance Redressal

You may raise a grievance concerning the processing of your personal data with Cryptus.

15.4 Right to Nominate

Where applicable under the DPDP Act, you may nominate another individual to exercise your rights in accordance with the applicable legal requirements.

15.5 Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent as described in this Privacy Policy.

Requests may be submitted using the contact details provided in the Contact Us and Grievance Officer sections. Cryptus may require reasonable information to verify your identity before processing certain requests.

16. Accuracy of Personal Data

You are responsible for providing accurate and up-to-date information when submitting information to Cryptus. If you identify that information provided to us is inaccurate, incomplete, or outdated, you may contact us to request appropriate correction or updating.

17. Children's Data and Data of Persons with Disabilities

Our website and services are primarily intended for businesses, professionals, learners, and other users.

Cryptus will process personal data of children only in accordance with applicable legal requirements, including requirements relating to verifiable parental or lawful guardian consent where applicable.

Where applicable law requires consent of a lawful guardian for processing personal data of a person with a disability who has a lawful guardian, Cryptus will comply with those requirements.

We do not knowingly undertake tracking or behavioural monitoring of children in circumstances prohibited by applicable law.

If Cryptus becomes aware that personal data has been collected in violation of applicable legal requirements, we will take appropriate steps in accordance with applicable law.

18. Marketing Communications

Where you have provided the required consent, Cryptus may send:

• Cybersecurity updates
• Course announcements
• Product or service announcements
• Industry reports
• Research papers
• Webinar invitations
• Event information
• Other relevant communications

You may unsubscribe from marketing communications at any time using the unsubscribe mechanism provided in the communication or by contacting us.

19. Third-Party Websites

Our website may contain links to third-party websites, platforms, or services. These websites operate independently from Cryptus and may have their own privacy policies and terms.

Cryptus is not responsible for the privacy practices, security, or content of third-party websites. We recommend reviewing the privacy policy of any third-party website before providing personal data.

20. Grievance Officer

Cryptus has appointed a privacy/grievance contact for privacy-related concerns and grievances. The contact details below are the official contact channel published by Cryptus:

Organisation: Cryptus Cyber Security Pvt. Ltd.
Privacy / Grievance Email: info@cryptus.in
Phone: +91-9911298894
Address: U59, 1st Floor, Shakarpur, Near Laxmi Nagar Metro Station Gate 2, Mother Dairy Road, New Delhi – 110092, India

Cryptus will handle grievances in accordance with the timelines and procedures prescribed under applicable law. Where applicable, you may exercise further remedies available under the DPDP Act and applicable rules after following the grievance mechanism provided by Cryptus.

21. Contact Us

Cryptus Cyber Security Pvt. Ltd.
U59, 1st Floor, Shakarpur,
Near Laxmi Nagar Metro Station Gate 2,
Mother Dairy Road, New Delhi – 110092, India

Email: info@cryptus.in
Phone: +91-9911298894
Alternate: +91-9289578894
Service Enquiry: +91-9582163345
Website: www.cryptus.in

22. Changes to This Privacy Policy

Cryptus may update this Privacy Policy from time to time to reflect changes in our services, website functionality, technology, legal or regulatory requirements, or privacy practices.

When we update this Privacy Policy, the revised version will be published on this page with an updated Last Updated date and, where appropriate, a version number. Where changes are material, Cryptus may provide additional notice through appropriate means.

23. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of India, including applicable provisions of the Digital Personal Data Protection Act, 2023, the Digital Personal Data Protection Rules, 2025, and other applicable laws and regulations.

Subject to applicable law, disputes arising from or relating to this Privacy Policy shall be subject to the jurisdiction of the competent courts at the location of Cryptus's registered office.

---

COOKIE POLICY

This Cookie Policy explains how Cryptus Cyber Security Pvt. Ltd. (“Cryptus”, “we”, “us”, or “our”) uses cookies and similar technologies on its website. This Cookie Policy should be read together with our Privacy Policy.

1. What Are Cookies?

Cookies are small data files that websites may store on a visitor's device when the visitor accesses a website. Cookies and similar technologies may help websites:

• Remember information
• Maintain functionality
• Improve performance
• Understand website usage
• Remember preferences
• Provide relevant functionality
• Maintain security

Cookies may be first-party cookies, placed by Cryptus or services operating on its behalf, or third-party cookies, placed by services integrated into the website.

2. How Cryptus Uses Cookies

Strictly Necessary Cookies

These cookies are required for essential website functionality and security. They may support:

• Website operation
• Security
• Session management
• Form functionality
• Network or technical functions

These cookies may remain active because they are necessary for relevant website features.

Functional Cookies

Functional cookies may help remember preferences and provide enhanced functionality, including website settings, language preferences, user interface preferences, and optional website features.

Analytics Cookies

Analytics cookies may help Cryptus understand how visitors use our website. They may provide information about pages visited, website traffic, general visitor interactions, website performance, and features used. This information may be used to improve the website and user experience.

Marketing Cookies

Where applicable, marketing cookies may be used to measure advertising performance, understand interactions with advertisements, measure campaign effectiveness, and support relevant advertising or communications. Marketing cookies will be treated as optional where applicable law requires consent.

3. First-Party and Third-Party Cookies

First-Party Cookies

These are cookies placed by Cryptus or services operating on behalf of Cryptus.

Third-Party Cookies

Some third-party services integrated into our website may place cookies or use similar technologies. These services may relate to analytics, advertising, security, embedded media, communication, and website functionality. Third-party providers may have their own privacy and cookie policies.

4. Cookie Consent

Where applicable, our website may provide a cookie consent banner allowing visitors to:

• Accept All — accept all available cookie categories
• Reject Non-Essential — continue with only necessary cookies
• Manage Preferences — choose which optional cookie categories to allow

Where consent is legally required, optional cookies should only be activated after the relevant consent has been provided.

5. Managing Cookie Preferences

Visitors may change their cookie preferences through the Cookie Preferences option provided on our website. You may also manage or delete cookies using your browser settings.

Disabling certain cookies may affect the availability or functionality of some website features.

6. Cookies and Personal Information

Cookies themselves do not necessarily identify an individual. However, information collected through cookies or similar technologies may, depending on the circumstances, be associated with information that identifies or relates to an individual. Where this occurs, the information will be handled in accordance with our Privacy Policy and applicable law.

7. Changes to This Cookie Policy

Cryptus may update this Cookie Policy when our website, technologies, services, or applicable legal requirements change. The updated version will be published on this page with a revised Last Updated date.

8. Contact Us

Cryptus Cyber Security Pvt. Ltd.
U59, 1st Floor, Shakarpur,
Near Laxmi Nagar Metro Station Gate 2,
Mother Dairy Road, New Delhi – 110092, India

Email: info@cryptus.in
Phone: +91-9911298894
Website: www.cryptus.in