What we collect, why, how long we keep it, and what you can ask us to do about it.
Last updated: 5 October 2026
This summary is for orientation only. The numbered sections below are the notice itself.
Kwantumworks Ventures Pvt. Ltd. (CIN: U70200MH2025PTC440776), a company incorporated in India with its office at 401, KK Pavilion Business Square, Plot No. 53, SG Barve Marg, Sindhi Society, Chembur East, Mumbai – 400071, trading as skillcapita. In this notice, "skillcapita", "we", "us" and "our" mean that company.
This notice explains what personal data we collect about you, why, how long we keep it, who we share it with, and what you can ask us to do about it. It applies to the skillcapita website, our courses, and the email and messaging channels we operate.
For the purposes of the Digital Personal Data Protection Act, 2023 (the “Act”) and the Digital Personal Data Protection Rules, 2025 (the “Rules”), skillcapita is a Data Fiduciary. We decide why and how your personal data is processed, and we are accountable for it.
You are a Data Principal. The service providers who process data on our instructions are Data Processors, and they act only on our instructions under contract.
| Category | What it includes |
|---|---|
| Account data | Name, email address, mobile number, password (stored hashed) |
| Profile data | Organisation, role, city, country. Optional. |
| Learning data | Chapters and modules completed, quiz responses, assessment score, credential issued, syllabus edition |
| Transaction data | Order reference, amount, tax, payment status, invoice. Card and bank details are handled by our payment gateway and never reach our servers. |
| Communication data | Messages you send us, support tickets, newsletter subscription status and preferences |
| Technical data | IP address, browser and device type, operating system, pages visited, session timestamps |
We do not ask for, and ask you not to send us, data about your health, finances, biometrics, caste, religion, political views or sexual orientation. None of it is needed to teach you a course.
| Purpose | What it involves |
|---|---|
| Delivering the course | Creating your account, giving you access, tracking progress, running assessments |
| Issuing and verifying credentials | Producing your certificate and maintaining the public verification page. See section 19. |
| Taking payment | Processing the transaction, issuing invoices, meeting tax and accounting obligations |
| Supporting you | Answering your questions and resolving complaints |
| Updates and offers | Sending you course launches, offers and subject updates, if you have subscribed |
| Running and securing the service | Keeping the Platform working, preventing fraud and abuse, investigating incidents |
| Improving our courses | Understanding, in aggregate, where learners struggle or drop off |
| Meeting legal obligations | Complying with Indian law and responding to lawful requests |
Most of our processing rests on the consent you give when you create an account, enrol or subscribe. The legal basis for each purpose listed in section 5 is set out below. Before you consent, we give you a notice in plain language describing what data we want, why, and how to exercise your rights. That notice is available in English and in the languages listed in the Eighth Schedule to the Constitution, at your option.
Your consent is limited to what is necessary for the stated purpose. We do not make your consent to one thing conditional on your consenting to something unrelated.
Some processing rests on the legitimate uses permitted by Section 7 of the Act, including where you have voluntarily provided your data for a specified purpose (and have not withdrawn consent or indicated objection), and where we must comply with a legal obligation, a judgment or order of a court, or a direction of a government authority.
For each purpose in section 5, this is the legal basis we rely on:
| Purpose | Legal basis | How it applies |
|---|---|---|
| Delivering the course | Consent | You give it when you create your account and enrol. We use your data only to give you access, track your progress and run assessments. |
| Issuing and verifying credentials | Consent | You give it when you enrol. The notice you see then explains the public verification page, and section 19 explains how to withdraw a credential. |
| Taking payment | Consent | You give it at checkout. Tax and accounting records we are required by law to keep are kept as section 10 explains. |
| Supporting you | Legitimate use (Section 7) | You voluntarily send us a question or complaint so that we can help you. We use it only for that. |
| Updates and offers | Consent | Separate and optional. You give it when you subscribe, and you can withdraw it from any email. Not subscribing never affects your course. |
| Running and securing the service | Consent | You give it when you create your account, as part of the service you ask for. The Rules also require us to keep security logs. |
| Improving our courses | Consent | Website analytics run only if you accept analytical cookies (section 14). Insights about where learners struggle are drawn in aggregate. |
| Meeting legal obligations | Legitimate use (Section 7) | Where a law requires us to disclose information, or a court or government authority directs us to. |
You may withdraw your consent at any time, and it should be as easy to withdraw as it was to give. You can do it from your account settings, by clicking unsubscribe in any email, or by writing to our Grievance Officer.
Withdrawing consent does not affect processing that already took place while consent was valid. It may mean we can no longer provide part or all of the service, and we will tell you clearly if that is the case before acting on it.
We do not sell personal data. We share it only with Data Processors acting on our instructions under contract, and only as much as they need. Where Courses involve mentors or educators, they are engaged under agreements that include data processor obligations:
| Processor | What they do |
|---|---|
| Hosting provider | Runs the infrastructure the Platform sits on |
| Learning platform | Delivers course content and records progress |
| Payment gateway | Processes payments. Handles card data directly; we never see it. |
| Email and messaging provider | Sends account, support and newsletter email |
| Analytics provider | Aggregate usage measurement |
| Support tooling | Manages support tickets |
We may also disclose personal data where we are required by law to do so, to a court, or to the Data Protection Board of India.
If our business is transferred or merged, personal data may transfer with it. We will tell you before that happens, give you an opportunity to withdraw consent or request erasure of your data before the transfer, and your rights under this notice carry across.
Some of our Data Processors operate outside India. Under section 16 of the Act, we may transfer personal data outside India to any country except those the Central Government has restricted by notification, and we do so only under contractual terms that hold the processor to the standards set out here.
The countries our processors currently operate in are: Singapore and the United States.
| Data | Retention |
|---|---|
| Account and profile data | While your account is active, then 3 months after closure |
| Learning and assessment data | While your account is active, then 3 months after closure |
| Credential record | Retained for as long as the credential remains active and verifiable. See section 19. |
| Transaction and tax records | As required under applicable tax and company law. |
| Support correspondence | 3 months from resolution |
| Newsletter subscription | Until you unsubscribe |
| Server and security logs | 1 year |
We erase personal data once the purpose it was collected for is no longer served and no legal obligation requires us to keep it.
If you have not contacted us or used your account for 1 year, we will give you notice before erasing your data, so you have a chance to keep the account open.
Under the Act you have the right to:
To exercise any of these, write to our Grievance Officer in section 22. We respond within 30 days. We may ask you to verify your identity first, so that we do not disclose your data to someone else.
You also have duties under the Act: to give authentic information, not to impersonate anyone when providing personal data, not to suppress material information where required, and not to raise false or frivolous grievances.
You may nominate another individual to exercise your rights on your behalf if you die or become unable to act through incapacity. You can do this from your account settings, or by writing to our Grievance Officer.
Our courses are intended for adults and you must be 18 or over to hold an account. We do not knowingly process the personal data of a child.
If we learn that a child has created an account without verifiable parental consent, we will erase the data and close the account. We do not undertake tracking, behavioural monitoring or targeted advertising directed at children.
Where a Data Principal is a person with a disability who has a lawful guardian, we process their data only on the consent of that guardian, verified in the manner the Rules require.
This section applies to skillcapita.com and to learn.skillcapita.com. Your choice is stored once and shared between them, so you are not asked twice.
We group cookies into four categories. Only the first is set without asking you.
These cookies are necessary for the service to function and cannot be switched off. They are set only in response to actions you take, such as signing in on the learning platform, filling in a form, or setting your privacy preferences. They do not store directly identifiable information and, under the Act, rest on a legitimate use rather than your consent. They are disclosed here rather than requested.
These cookies let the site remember choices you make and provide enhanced features, such as a video player position or a preferred language. If you do not allow them, some of these features may not work as expected. Optional, and switched off unless you turn them on.
These cookies allow us to count visits and see how people move around the site, so we can measure and improve how it performs. They tell us which pages are read most and least, and where learners get stuck. Everything they collect is aggregated. We use Google Analytics for this. Optional, and switched off unless you accept.
These cookies are usually set by advertising partners to build a profile of your interests and show you relevant adverts elsewhere. We do not use any. No advertising cookies, no remarketing, no profiling, and we do not sell or share data for marketing. The category is listed so the picture is complete. If that ever changes, it will appear in the preferences panel switched off until you say otherwise.
Nothing beyond the strictly necessary category is set until you choose. When you do, we record the categories you allowed, the date and time, and the version of this notice you were shown. That last part matters: consent has to be informed, so what counts is the wording in front of you at the time, not just a yes or a no.
If we materially change this notice, the version changes and you are asked again.
To change your mind, use the Cookie preferences link in the Legal section of the footer on any page. Withdrawing is as easy as giving, as the Act requires.
Google acts as a Data Processor for analytics. See section 9 for transfers outside India, and section 8 for the other processors we use.
We take reasonable security safeguards to prevent a personal data breach, including encryption in transit and at rest, role-based access control, logging and monitoring, vendor due diligence, staff training, and periodic review.
We require our Processors to maintain equivalent safeguards under contract. No system is perfectly secure, but we treat this obligation as a first-order one.
If a personal data breach occurs, we will notify the Data Protection Board of India and every affected Data Principal in the form and within the timeframes the Rules require, describing the nature of the breach, its likely consequences, the measures we have taken, and what you can do to protect yourself.
We maintain a documented breach response procedure and a log of incidents.
We do not make decisions about you by automated means that produce legal or similarly significant effects. We do not build behavioural profiles for advertising, and we do not sell or share data for that purpose.
Assessment scoring is automated in the sense that quizzes are marked by the system against a fixed answer key. You can request a human review of any assessment outcome by writing to support.
Where your employer or another organisation has bought your seat, we share your enrolment status, progress, assessment result and credential with that organisation's administrator, because that is what they have purchased.
We tell you this at first sign-in, before you begin. We do not share your support correspondence, your individual quiz answers, or anything you post in a discussion, unless we are legally required to.
The organisation is a separate Data Fiduciary for what it does with that information, and its own privacy notice governs that.
A credential is only worth something if a third party can check it. Each credential we issue carries a unique identifier that resolves to a public page showing the holder's name, the course, the completion date and the syllabus edition. Nothing else appears there.
Because the page exists for that purpose, we retain the minimum record needed to keep it resolvable for as long as the credential exists. If you ask us to erase your personal data, we will erase your account and learning records and keep only that minimum.
You may also ask us to withdraw the credential entirely. If you do, the verification page will show it as withdrawn and your name will be removed from it.
The Platform may link to other websites. We do not control them and this notice does not apply to them. Please read their privacy notices before giving them your data.
We may update this notice. Where a change materially affects how we handle your personal data, we will tell you by email and give you the opportunity to withdraw consent before it takes effect. The date at the top of this page is always the current version.
For anything about your personal data, including exercising any of the rights in section 11, contact our Grievance Officer:
Grievance Officer: Rujuta Patil
Email: grievance@skillcapita.com
Post: 401, KK Pavilion Business Square, Plot No. 53, SG Barve Marg, Sindhi Society, Chembur East, Mumbai – 400071
We acknowledge within 48 hours and respond within 15 days.
If you are not satisfied with our response, or we do not respond in time, you may complain to the Data Protection Board of India. Doing so does not affect any other remedy available to you.
By continuing, you agree to skillcapita's Terms and Privacy Policy.
This site uses cookies. Some are necessary to run it; the rest are optional and are switched off until you allow them. Open a category to see what it covers. Your choice is stored on your own device, applies to learn.skillcapita.com as well, and can be changed at any time from the footer. More information.