Introduction
At CSCMM, we value your trust and are committed to protecting your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your data when you interact with us, including through our website, services, and customer support. We prioritize transparency and security, ensuring that your data is handled responsibly and in accordance with applicable laws.By engaging with us, you acknowledge that you have read and understood this policy. This Privacy Policy applies to how the Cyber Security Capability Maturity Model (CSCMM) Platform ("we", "our", "us") collects, uses, stores, and protects personal information.
Information We Collect
We may collect the following categories of information:
Personal Information
- Name
- Email ID
- Mobile number
- Organization details
Sensitive Personal Data or Information (SPDI)
We generally do not collect SPDI unless explicitly required for assessment purposes. SPDI may include:
- User credentials (username, password)
- Billing details
Technical & System Information
- IP address
- Browser type
- Device information
- Access logs
Why We Collect Data
- To deliver and improve our services.
- To respond to your inquiries and provide updates.
- To personalize your experience.
- To protect systems & prevent fraud.
- To send relevant updates and promotions (with consent).
How We Use the Information
- To operate and improve our services.
- To communicate about service-related updates.
- To improve website functionality and user experience.
- To ensure compliance with legal requirements.
- To prevent unauthorized access or security breaches.
We do not process personal data for profiling, marketing, or selling.
Data Sharing and Disclosure
We do not share, sell, or rent personal data.
We may disclose data only:
- To advertisers & third-party service providers bound by confidentiality.
- To government agencies upon lawful request.
- When required for investigations or court orders.
Data Storage and Security Measures
We implement strong security measures to safeguard your information.
Security measures include:
- Encrypted data transmission (HTTPS/SSL)
- Secure authentication controls
- Role-based access permissions
- Regular vulnerability assessments & audits
- Log monitoring and incident response per CERT-In guidelines
Data Retention
We retain personal data only as long as necessary to:
- Provide CSCMM services.
- Comply with legal obligations or deletion requests.
User Rights
You have the right to:
- Access your personal data
- Request corrections
- Request deletion (as permitted by law)
- Withdraw consent
- Know how your data is used
Requests can be made to our Data Protection Officer (DPO).
Changes to This Policy
We may update this Privacy Policy to reflect regulatory changes or improvements. Continued use of the platform implies acceptance of the revised terms.
Consent to Receive Messages
By agreeing to this privacy policy, you consent to receive messages (including promotional) via email, SMS, or electronic means. Consent is not a condition for purchase.
Contact Information
For privacy-related queries, contact:
- Email: cscmm.support@c3ihub.iitk.ac.in
- Data Protection Officer: [Name / Contact / Email ID]
By using the CSCMM Platform, you acknowledge reading and agreeing to this privacy policy.