Privacy Policy

01Who we are

This website and the programs described on it are operated by DAYHOM DIGITAL PRIVATE LIMITED, a private limited company incorporated under the Companies Act, 2013 and trading as DayHom Digital, having its registered/principal place of business at 5/219, Purana Kanpur, Kanpur, District Kanpur Nagar, Uttar Pradesh 208002, India, GSTIN 09AAMCD2477R1ZP ("DayHom Digital", "we", "us", "our").

For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act") we are the Data Fiduciary in respect of the personal data described in this policy. You are the Data Principal.

Our Amazon Management Service is delivered and managed by SBD Enterprises. Where you engage that service, personal data you provide for it may be processed by SBD Enterprises as described in clause 08.

02Scope & definitions

This policy applies to personal data we process when you visit dayhomdigital.com and its subdomains, register for or purchase any of our programs, join a live session, contact us on any channel, or interact with our advertising.

Personal data

Any data about an individual who is identifiable by or in relation to such data.

Processing

Any operation performed on personal data — collection, storage, use, sharing, erasure and so on.

Data Principal

The individual the personal data relates to. That's you.

Data Fiduciary

The person who decides the purpose and means of processing. That's us.

Data Processor

A third party that processes personal data on our instructions — for example our payment gateway or hosting provider.

03The personal data we collect

3.1 Information you give us

• Identity and contact data — name, mobile number, email address, city/state, and where relevant your WhatsApp number.
• Enrollment data — the program you selected, registration answers, application-call responses, and any documents you choose to submit.
• Transaction data — amount paid, invoice details, GSTIN if you request a GST invoice, payment reference and status. We do not collect or store your full card number, CVV or UPI PIN — those go directly to our payment gateway.
• Program participation data — attendance, questions asked in sessions, submissions, mentorship notes, and community posts.
• Correspondence — messages, emails, WhatsApp chats and support tickets, including call notes where a call is recorded with your knowledge.

3.2 Information collected automatically

• Device and browser type, operating system, screen size, approximate location derived from IP address.
• Pages viewed, referring URL, time on page, clicks, scroll depth and session recordings or heatmaps where those tools are enabled.
• Advertising identifiers and event data associated with our marketing campaigns (see clause 07).

3.3 Information from third parties

We receive limited data from our processors and platform partners — for example payment status from our gateway, registration and attendance data from our webinar platform, message delivery status from WhatsApp, and aggregated campaign data from advertising platforms.

04How we collect it

Directly from you when you fill a form, register, pay, message us or attend a session; automatically through cookies and similar technologies when you use the website; and from the processors listed in clause 08 acting on our instructions.

Where we or a processor record a live session, mentorship call or support call, we will tell you at or before the start of the recording. If you do not wish to be recorded you may keep your camera and microphone off and participate by text.

05Why we process your data

We do not use your personal data to make any solely automated decision that has a significant legal effect on you, and we do not sell your personal data.

06Consent, and how to withdraw it

Where we rely on your consent, we ask for it through a clear, standalone notice at the point of collection, in English and — where offered — Hindi. You may withdraw consent at any time.

To withdraw consent, write to our Grievance Officer (clause 16), reply STOP to a WhatsApp or SMS message, or use the unsubscribe link in any email. Withdrawal is prospective: it does not affect processing already carried out lawfully, and it does not require us to delete records we must keep by law (clause 10).

07Cookies, pixels and advertising technology

We use cookies and similar technologies that are strictly necessary to run the site, plus — with your consent — analytics and advertising technologies. Subject to what is actually deployed on our site at any time, these may include:

• Meta Pixel and Conversions API — to measure ad performance and build advertising audiences. Event data may include hashed identifiers such as your email or phone number.
• Google Analytics / Google Ads tags — to understand site usage and measure campaigns.
• Behaviour analytics — heatmaps and session replay to see where pages confuse people. We ask our provider to mask input fields.
• Functional cookies — to remember your session, consent choices and checkout state.

You can manage cookies through your browser settings and, where we display one, through our consent banner. Blocking necessary cookies may break checkout or session access.

The tags active on our site change from time to time as campaigns start and end. A current list of the analytics and advertising technologies in use is available on request from our Grievance Officer.

08Who we share your data with

We share personal data only with the following categories of recipient, and only to the extent needed:

• Payment gateways — to take payment, verify it and process refunds.
• Webinar, hosting, email and messaging providers — to run sessions and send you the communications you asked for, including WhatsApp Business messages.
• Analytics and advertising platforms — as described in clause 07.
• Mentors, trainers and support staff — bound by confidentiality, to deliver your program.
• SBD Enterprises — where you engage the Amazon Management Service.
• Professional advisers, auditors and insurers — where reasonably required.
• Government, regulatory or judicial authorities — where we are legally obliged to disclose, or to establish, exercise or defend legal claims.
• An acquirer — if our business or a part of it is reorganised or transferred, subject to this policy continuing to apply.

We require processors to process personal data only on our instructions, keep it secure, and not use it for their own purposes. We do not sell or rent your personal data, and we do not share your contact details with unrelated advertisers.

A current list of our named data processors — payment gateway, webinar platform, email and messaging providers, CRM and hosting — is available on request from our Grievance Officer at grievance@dayhomdigital.com.

09Transfers outside India

Some of our processors store or process data on servers located outside India. Where that happens we transfer personal data only in accordance with section 16 of the DPDP Act and the DPDP Rules, 2025, and we require contractual protections of a comparable standard to those in this policy. Transfers are subject to any restrictions the Central Government notifies from time to time, and we will adjust our arrangements if a restriction applies to a country we use.

10How long we keep it, and erasure

We keep personal data only as long as necessary for the purpose it was collected for, and then erase it — except where a law requires us to keep it longer. Indicatively:

When you withdraw consent or your data is no longer needed, we will erase it, and instruct our processors to erase it, unless retention is required for compliance with law or for establishing or defending a legal claim.

11Security safeguards

We implement reasonable technical and organisational security safeguards intended to prevent a personal data breach, including access controls on a need-to-know basis, encryption in transit, restricted administrative access, monitoring and logging, vendor due diligence, and staff confidentiality obligations.

No system is perfectly secure. We cannot guarantee absolute security, and you are responsible for keeping your own account credentials and one-time passwords confidential and for not sharing program access with anyone else.

12Your rights as a Data Principal

Subject to the DPDP Act and Rules, you have the right to:

1. Access — a summary of the personal data we hold about you and the processing we have carried out.
2. Correction, completion and updating — of inaccurate or incomplete data.
3. Erasure — of data we no longer need, unless retention is required by law.
4. Withdraw consent — as described in clause 06.
5. Grievance redressal — to complain to us first, as set out in clause 16.
6. Nominate — another individual to exercise your rights in the event of your death or incapacity.

To exercise a right, write to our Grievance Officer with enough information for us to identify you and your request. We may ask you to verify your identity before we act, to protect you against impersonation. We will respond within the period prescribed under the DPDP Rules, and in any case will acknowledge your request promptly.

You also have duties under the DPDP Act — including not raising false or frivolous complaints and not furnishing false particulars or impersonating another person.

13Children's data

14Personal data breaches

If a personal data breach occurs, we will inform the Data Protection Board of India and each affected Data Principal in the manner and within the timelines prescribed under the DPDP Rules, 2025 — including notification to affected individuals without delay and in any event within 72 hours of becoming aware, unless a longer period is permitted on request.

Our notice to you will describe, in plain language, the nature and extent of the breach, its likely consequences, the measures we have taken, and the steps you can take to protect yourself.

15Third-party links and platforms

Our site and programs reference third-party platforms — including Amazon, payment gateways, webinar tools and social networks. Those platforms have their own privacy policies and we are not responsible for their practices. Please read their policies before providing them your data.

16Grievance redressal

If you have any question, request or complaint about your personal data, contact our Grievance Officer. This is also the route for consumer grievances under the Consumer Protection (E-Commerce) Rules, 2020.

If you are not satisfied with our response

• Data Protection Board of India — you may complain to the Board about how we have handled your personal data.
• National Consumer Helpline — 1915, or the NCH portal / UMANG app, for consumer grievances.
• Consumer Commission — you may approach the appropriate District, State or National Consumer Disputes Redressal Commission.

17Changes to this policy, and contact

We may update this policy as our services, technology or the law changes. The current version and its effective date are shown at the top of this page. Where a change materially affects how we use your personal data, we will take reasonable steps to notify you and, where required, obtain fresh consent.

General queries: support@dayhomdigital.com. Data protection queries: use the Grievance Officer details in clause 16.