Privacy Notice

Who is responsible for your data

• For learners in India: Wartens Automation Private Limited, NVR Complex, Electronic City, Bangalore 560100, India.
• For learners everywhere else: Wartens Ltd, 8 Lyon Road, Milton Keynes MK1 1EX, United Kingdom (company number 15262249).

The two are group companies and share one learning platform. For anything about your data, write to info@wartens.com with "Privacy" in the subject.

What we collect

When you create an account: your name, email address, phone number, country and, if you choose to tell us, why you are learning.

While you learn: the courses you join, your progress, practice work, assessment attempts and results, certificates and reviews you write.

When you buy a certificate: the order, what you paid and the payment reference. Card and bank details go straight to Razorpay (India) or Stripe (everywhere else); we never see or store them.

If you upload something: a CV or résumé, project files or documents you add to your profile.

When you contact us: your messages and our replies.

When you use the site:

• The pages you view. If you are not signed in, each view is stored with a visitor key that is a one-way hash of your network address and browser, remade every day, so the same visitor cannot be followed from one day to the next. If you are signed in, the pages you open are recorded against your account, so we can see how the courses are used and support you; views earlier the same day from the same browser may be linked to your account too. Your network address itself is not stored.
• The country your network address points to, worked out on our own server from a bundled database. Only the country is kept.
• The type of device (phone, tablet or computer) and the site that sent you, if any.
• If you accept analytics cookies, Google Analytics (see the cookie policy).

When you use an AI tool: the text you enter and the answer, for as long as it takes to produce the answer. If you upload a CV to build your personal plan, its text is sent to an AI provider to draft the plan; the file itself is not stored, and only what you check and save is kept.

Why we use it, and on what legal basis

• To run your account, courses, assessments and certificates, and to take payment: because it is needed for our agreement with you (contract).
• To keep the site secure, prevent fraud and cheating, and understand in aggregate how the site is used: our legitimate interest in running a safe, working service.
• To send you course reminders and account emails: contract, for the service you signed up for. You can turn reminders off in your email settings.
• Analytics cookies and any marketing: only with your consent, which you can withdraw at any time.
• To keep invoices and tax records: because the law requires it.

What is public

If you buy a certificate, anyone with its code or QR can see the name on it, the course, the date and whether it is valid. A review you publish shows your first name. Nothing else about you is public.

Who we share it with

We do not sell your personal data or share it for targeted advertising. We use these providers to run the service, each under a contract that limits what they may do with it:

• Hostinger: hosting; our servers are in Mumbai, India.
• Razorpay (India) and Stripe (elsewhere): payments.
• Resend: sending email.
• Google: YouTube, which plays the lesson videos, and Google Analytics, only if you accept analytics cookies.
• AI providers, only for text you enter in an AI tool, a CV you upload or the course advisor chat: Groq, Cerebras, NVIDIA (NIM), GitHub Models (Microsoft), Mistral, Google (Gemini) and OpenRouter, and the model hosts OpenRouter routes to. Anything carrying your personal details (a CV, a résumé, a cover letter, your profile) goes only to the providers that do not use what they are sent to train their models: Groq, Cerebras, NVIDIA and GitHub Models. The course advisor, which talks about the catalogue, may also use Mistral, Google Gemini and OpenRouter, whose free tiers may use prompts to improve their models, so please do not type personal details into it.
• Our two group companies, which run the platform together.

We also share data where the law requires it, or to protect our rights, our users or the public.

International transfers

Our servers are in India, and some providers are in the United States and elsewhere. When data from the UK, the European Economic Area or another country with transfer rules leaves it, we rely on the safeguards the law recognises, such as standard contractual clauses or an adequacy decision, and we will give you details on request.

How long we keep it

• Your account and learning records: while your account is open. If you ask us to close it, we delete or anonymise them within 30 days, except what we must keep.
• Certificates: the verification record is kept for as long as the certificate is meant to be checkable, which is its purpose. You can ask us to withdraw it.
• Orders, invoices and tax records: as long as tax law requires, usually 6 to 8 years.
• Page-view counts: in pseudonymous form, and only as long as they are useful for understanding use of the site.
• Support messages: up to 2 years after the conversation ends.

Your rights

Wherever you live, you can ask us to:

• tell you what we hold and give you a copy;
• correct it;
• delete it;
• restrict or object to how we use it, including any marketing;
• give it to you, or another provider, in a common format;
• withdraw a consent you gave, without affecting what we did before.

Write to info@wartens.com. We reply within one month, and we may need to confirm who you are first.

If you are in the UK or the EU, you can complain to the Information Commissioner's Office (ico.org.uk) or your local data protection authority. We would like the chance to put things right first.

If you are in India, you have the rights given by the Digital Personal Data Protection Act 2023, including to nominate someone to act for you, and to raise a grievance with us at info@wartens.com (subject "Grievance"); we respond within the time the law sets. You may then take a complaint to the Data Protection Board of India.

If you are in the United States, we do not sell your personal information or share it for cross-context behavioural advertising. You can ask for access or deletion as above.

If you are in Brazil, Nigeria, South Africa, the UAE or elsewhere, the rights above apply to you too, alongside any your own law gives, and you can use the same address.

Children

You must be 16 or over to create an account. If you are 16 or 17, you need a parent's or guardian's consent, which you confirm when you sign up. We do not knowingly collect data from anyone under 16. If you think someone under 16 has given us their data, write to us and we will delete it.

Security

We use encrypted connections, hashed passwords, access controls and regular backups, and we limit who on our team can see your data. No system is perfectly secure; if a breach puts you at high risk, we will tell you without undue delay.

Changes

We will post any change here with a new date, and email account holders about any significant change.

Contact

info@wartens.com (subject "Privacy"). Post: Wartens Ltd, 8 Lyon Road, Milton Keynes MK1 1EX, United Kingdom.