Privacy Policy

Last updated: July 28, 2026

1.1 Purpose and Scope

This Privacy Policy explains how Dhimson collects, uses, stores, discloses, and otherwise processes personal data of individuals who use our websites and services. It applies to personal data we collect directly from you (e.g., when you register for an account or communicate with us), from your devices (e.g., through cookies and analytics tools), and from third parties such as business partners and service providers. This policy covers all websites operated by Dhimson Tradespot Private Limited, including but not limited to DhimsonLearn.com.

1.2 What Personal Data We Collect

We collect different types of personal data depending on your interaction with our services. This may include:

  • Identity and Contact Data: your name, date of birth, mailing address, email address and phone number.
  • Account Registration Data: username, password and other account details required to access our services.
  • Communication Data: records of your communication with us (e-mails, chat messages, support tickets).
  • Financial and Transaction Data: information about your purchases of services, such as order history and payment details. Payments are processed by secure payment processors and we do not store your full card details.
  • Usage Data: information about how you use our websites and services, including your course progress, browsing actions and patterns.
  • Technical Data: Internet Protocol (IP) address, device identifiers, browser type and version, time zone setting and location, operating system and platform, and other technology on the devices you use to access our websites.
  • Cookies and Tracking Data: data collected through cookies, web beacons and similar technologies to remember your preferences, analyze usage and personalize content.
  • Sensitive Personal Data: only where strictly necessary and with your explicit consent, such as identity verification or health-related information relevant to assistive services. We do not knowingly collect sensitive personal data unless required for a specific service and permitted by law.

We process your personal data only when we have a legal basis. Depending on your location, such bases may include:

  • Performance of a contract — to deliver courses, manage accounts and provide requested services;
  • Our legitimate interests — such as improving our offerings, monitoring for fraud, conducting analytics and research, and promoting safety;
  • Compliance with legal obligations — to meet reporting obligations, respond to lawful requests and enforce our rights; and
  • Consent — where we rely on your freely given, informed consent, for example for marketing communications or processing any sensitive personal data.

4. How We Use Your Personal Data

We use personal data to manage your account, deliver course content, provide customer support, personalize learning experiences, process payments, conduct research, communicate updates, and enforce our Terms and Conditions. We may combine personal data collected from different sources to improve service quality and develop new products.

5. Sharing and Disclosure of Personal Data

We may share your personal data with:

  • our group companies and affiliates;
  • instructors and content partners to deliver courses;
  • trusted third-party service providers (e.g., payment processors, analytics providers, cloud hosting providers) under contracts requiring them to protect personal data;
  • business partners where you enrol through them or access co-branded offerings;
  • authorities, regulators or law enforcement when required by law or to protect our legal rights; and
  • potential buyers or investors in connection with a merger, acquisition or asset sale.

We do not sell your personal data.

6. International Data Transfers

Our services are provided from India and may involve processing personal data on servers located in other countries. We may transfer personal data outside your country of residence, including to jurisdictions that may not provide the same level of data protection as your own. Pursuant to the Digital Personal Data Protection Act 2023 and applicable foreign laws, we ensure that cross-border transfers occur only to countries not blacklisted by the Government of India and are subject to appropriate safeguards such as standard contractual clauses, binding corporate rules or data transfer agreements. We also will ensure to comply with the EU General Data Protection Regulation (GDPR) where applicable by relying on adequacy decisions or approved contractual safeguards.

7. Data Retention

We retain personal data for as long as needed to fulfil the purposes described in this Privacy Policy, including for the duration of your account and thereafter to comply with legal obligations, resolve disputes and enforce our agreements. When personal data is no longer required, we securely delete or anonymize it. In certain circumstances, residual copies of your personal data may remain in our back-up systems.

8. Security Measures

We implement industry-standard physical, technical and administrative safeguards designed to protect personal data against unauthorized access, use, loss or disclosure. These include encryption, access controls, network firewalls, intrusion detection systems, regular security testing and secure coding practices. However, the Internet is not completely secure and we cannot guarantee the absolute security of your data. You are responsible for maintaining the confidentiality of your account credentials.

9. Your Data Protection Rights

Depending on your jurisdiction, you may have rights to:

  • access the personal data we hold about you;
  • correct inaccurate or outdated data;
  • delete your personal data;
  • restrict or object to processing of your personal data;
  • receive a copy of your data in a structured, machine-readable format and transfer it to another service; and
  • withdraw consent where processing is based on consent.

You can exercise these rights through your account settings or by contacting us using the details below. We will respond within the timeframes required by law.

10. Children's Privacy

Our services are not intended for children under 13 years of age (or higher age thresholds where local law requires). We do not knowingly collect personal data from children. If we learn that a child has provided personal data without verifiable parental consent, we will delete the data as soon as possible. Parents or guardians who believe that their child has provided personal data should contact us.

11. Cookies and Similar Technologies

We use cookies, web beacons and similar technologies to collect usage data, remember preferences, and improve the performance and functionality of our websites. You can control cookies through your browser settings; however, disabling cookies may limit certain features of our services. For more information about our cookie practices, please refer to our separate Cookie Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical or business changes. We will notify you of any material changes by posting the updated policy on our websites and, where appropriate, sending you an email notification. The date of the most recent revision will appear at the top of the policy.

13. Contact Information

If you have any questions, concerns or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer at:

Email: info@dhimson.com