Privacy Policy

Who we are?

This Privacy Policy outlines the practices of SCM CONNECT PRIVATE LIMITED regarding the collection, use, and disclosure of your information when you use our service. Our aim is to provide clarity and transparency about how your data is handled. We are committed to protecting your privacy in accordance with applicable laws and regulations.

Our website address is: https://scmconnect.in

What personal data we collect and why do we collect it?

We collect various types of information to provide and improve our services to you. This includes:

• Personal data: Such as your name, email address, contact number, and any personal account preferences you set when interacting with our services (e.g., when you register an account, fill out a contact form, or make a purchase).
• Transactional data: Information related to your purchases, including product details, order history, and payment information (though we do not directly store sensitive payment card details; these are handled by secure third-party payment processors).
• Technical data: This includes information automatically collected when you visit our website, such as your IP address, browser type, operating system, referral source, length of visit, and pages viewed. This data helps us understand how users interact with our site, diagnose problems, and improve user experience.

We collect this data for the following purposes:

• To process your orders and provide the products/services you request (e.g., delivering e-books, granting access to training programs).
• To communicate with you regarding your account, purchases, and enquiries.
• To personalize your experience on our website and offer content relevant to your interests.
• To analyze and improve the performance, functionality, and user experience of our website and services.
• To comply with legal obligations and protect our legitimate business interests.

Your data is collected either based on your explicit consent (e.g., when you submit a form) or where necessary for the performance of a contract with you (e.g., processing a purchase) or for our legitimate business interests (e.g., website analytics to improve our services).

Comments

Our site allows visitors to leave comments. We collect the data shown in comments form, and also the visitors IP address and browser user agent string to help spam detection.

Media

If you upload images or other media to our website (e.g., for profile pictures or specific service interactions), please be aware that all uploaded files may be accessible to certain personnel or publicly visible depending on the context.

If you upload images to the website, you should avoid uploading images with embedded location data included. Visitors to the website can download and extract any location data from images on the website.

Contact Forms / Cookies

If you use a contact form or leave a comment on our site, you may opt-in to saving your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment or submit a form.

If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select "Remember Me", your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article (applicable to administrators or content contributors), an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles, training materials, or other content on this site may include embedded content (e.g., videos from YouTube, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website directly.

These external websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

We may use analytics services (e.g., Google Analytics) to understand how visitors engage with our website. These services collect anonymous data such as page views, time spent on pages, and navigation paths. This information helps us to improve our website's design, content, and functionality.

You can typically opt out of analytics tracking by adjusting your browser settings or by using browser add-ons provided by the analytics service providers. Please refer to their respective privacy policies for more details on their data collection practices and opt-out options.

Who we share your data with?

We respect your privacy and do not sell, trade, or otherwise transfer your personally identifiable information to outside parties except as described in this policy. We may share your data with:

• Service Providers: We may employ third-party companies and individuals to facilitate our service (e.g., payment processors like Razorpay, email service providers, hosting partners, customer support platforms). These third parties have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
• Legal Requirements: We may disclose your data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
• Business Transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred. We will provide notice before your personal data is transferred and becomes subject to a different Privacy Policy.

By default, we do not share any personal data with anyone, but plugins and third-party integrations may introduce data sharing. We strive to only use trusted third-party providers whose privacy practices align with our commitment to data protection.

How long we retain your data?

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention periods vary depending on the type of data and its purpose:

• Contact form entries: Retained for one year for customer service purposes.
• Analytics records: Typically retained indefinitely to analyze long-term trends.
• Customer purchase records: Retained for ten years to comply with financial and legal obligations.
• Comments: If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
• Registered user data: For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data?

You have certain rights regarding your personal data. Depending on your location and applicable laws, these rights may include:

• Right to Access: You have the right to request copies of your personal data.
• Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• Right to Erasure (Right to be Forgotten): You have the right to request that we erase your personal data, under certain conditions. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• Right to Object to Processing: You have the right to object to our processing of your personal data, under certain conditions.
• Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. To exercise any of these rights, please contact us using the information provided below.

Where we send your data?

Our operations are primarily based in India. However, some of our service providers (e.g., cloud hosting, email service providers, analytics tools) may be located outside of India. When your data is transferred outside of India, we ensure that appropriate safeguards are in place to protect your privacy and security, consistent with applicable data protection laws. These safeguards may include: ensuring the recipient country has adequate data protection laws, using standard contractual clauses approved by relevant authorities, or ensuring the service provider is certified under an approved data transfer mechanism.

Visitor comments may be checked through an automated spam detection service (e.g., Akismet), which may involve data transfer to the service provider for analysis.

Contact information

For any privacy specific concerns, questions about this Privacy Policy, or to exercise your data rights, please contact us at:

Email: support@scmconnect.com

Additional information

If our services involve more complex collection or processing of personal data for commercial purposes, the following additional information applies:

How we protect your data?

We implement a variety of security measures to maintain the safety of your personal information when you place an order or enter, submit, or access your personal information. These measures include:

• Technical Measures: Use of SSL/TLS encryption for data transmission, secure server environments, and regular security audits.
• Organizational Measures: Limiting access to personal data to authorized personnel only, conducting regular staff training on data protection, and implementing strict internal data handling procedures.
• Data Minimization: Collecting only the data that is necessary for the stated purposes.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

What data breach procedures we have in place?

In the unlikely event of a data breach, we have established procedures to address it promptly. This includes:

• Internal reporting and escalation protocols to identify and assess the breach.
• Measures to contain the breach and mitigate potential harm.
• Notifying affected individuals and relevant authorities as required by applicable laws.
• Implementing corrective actions to prevent future occurrences.

What third parties we receive data from?

Currently, we primarily collect data directly from you. If we begin to receive data about users from third parties, such as advertising partners or data brokers, we will update this section of our Privacy Policy to specify the categories of data received, the source of the data, and the purposes for which it is used.

What automated decision making and/or profiling we do with user data?

We do not currently engage in automated decision making or profiling that would have a significant legal or similar effect on individuals. If we were to implement such processes (e.g., for automated credit applications or extensive user profiling for personalized advertising), this section would be updated to clearly explain:

• The logic involved in the automated decision-making.
• The significance and the envisaged consequences of such processing for the data subject.
• The rights users have in relation to decisions made without human intervention, including the right to obtain human intervention, express their point of view, and contest the decision.

Industry regulatory disclosure requirements

As a company operating in India, SCM CONNECT PRIVATE LIMITED adheres to the provisions of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 under the Information Technology Act, 2000, and other applicable Indian laws concerning data protection.

Disclaimer:

The above content is created at SCM CONNECT PRIVATE LIMITED's sole discretion.