Privacy Policy

Who we are

Vistra Mind Innovation LLP operates vistramind.com and delivers cyber security training from 4th Floor, No. 93/9, Novel MSR Park Office, Munnekolala Village, Varthur Hobli, Bengaluru Urban, Karnataka 560037, India.

For the purposes of India's Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described in this policy. We hold ISO/IEC 27701:2025 certification for privacy information management; the certificate number and independent verification link are published on our About page.

What we collect

We only collect what we need to answer your enquiry and deliver training. Specifically:

Enquiry details you give us through the contact form, WhatsApp, email or phone: your name, email address, phone number, the course you are interested in, your current background, and anything else you choose to tell us.
Learner records, if you enrol: attendance, assessment results, lab activity, and the certificate issued to you.
Billing information needed to process fees and issue invoices.
Correspondence between you and our counsellors or instructors.

We do not run advertising trackers on this website, we do not build behavioural profiles, and we do not buy personal data from third parties.

What this website collects automatically

This is a static website. It sets no cookies of its own and runs no analytics or advertising scripts. See our cookie policy for the detail, including the two third-party services the pages contact.

Our hosting provider keeps standard server logs (IP address, timestamp, page requested, browser type) for security and troubleshooting. These are generated by the hosting infrastructure rather than by us, and we access them only when investigating a fault or a security event.

Why we use your data, and on what basis

We process personal data for these purposes:

To respond to your enquiry and advise you on which course fits your background. Basis: your consent, given when you contact us.
To deliver training you have enrolled in, including lab access, assessment and certification. Basis: performance of our agreement with you.
To administer fees and invoices, and to meet accounting and tax obligations. Basis: legal obligation.
To provide placement assistance, where you have asked us to share your profile with a hiring contact. Basis: your specific consent, given each time.
To keep our systems secure and investigate misuse. Basis: our legitimate interest in protecting learners and infrastructure.

We do not use your enquiry details to send marketing you did not ask for. If we ever introduce a mailing list, it will be opt-in and separately consented to.

We do not sell personal data. We share it only where necessary:

EC-Council, where you choose to sit a certification exam and we register you or supply a voucher. They process your data under their own privacy terms.
Prospective employers, only with your specific consent for each introduction, and only the information you have agreed to share.
Service providers who host our website, deliver lab environments or process payments, under contracts requiring them to protect your data and use it only on our instructions.
Authorities, where we are legally required to disclose.

How long we keep it

We keep personal data no longer than we need it:

Enquiries that do not lead to enrolment: kept only while there is a realistic prospect of you enrolling, and deleted once there is not. You can ask us to delete them sooner at any time.
Learner records: for as long as you may reasonably need us to verify your certificate or training history, and thereafter as required by law.
Financial records: for the period required under Indian accounting and tax law.

You can ask us to erase your data sooner. Where a legal obligation requires us to keep a record, we will tell you which one and for how long.

Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

Confirm what personal data of yours we hold, and how we have used and shared it.
Correct anything inaccurate, complete anything incomplete, or update anything out of date.
Erase personal data where we no longer need it for the purpose you gave it for.
Withdraw consent you previously gave. This does not affect anything we did lawfully before you withdrew it, and it may mean we can no longer provide a service.
Nominate another person to exercise these rights on your behalf if you are unable to.

To exercise any of these, write to us at the contact address below. We will respond within a reasonable period and will not charge you for it.

How we protect it

We hold ISO/IEC 27701:2025 certification for privacy information management and ISO 9001:2015 for quality management, both independently audited. In practice that means access to learner data is restricted to staff who need it, our processes are documented and reviewed, and the whole system is subject to annual surveillance audits.

No organisation can promise that data is completely secure, and we will not claim otherwise. What we can say is that our controls are externally assessed rather than self-declared, and that both certificates can be verified independently.

Children

Our courses are intended for adults and for students aged 18 and over. We do not knowingly collect personal data from children. Where a learner is under 18, we require verifiable consent from a parent or lawful guardian before enrolment, as the Digital Personal Data Protection Act requires.

Contact and grievances

For any question about this policy, to exercise your rights, or to raise a complaint about how we have handled your data, contact:

Email: sales@vistramind.com, marking your message for the attention of the data protection contact
Phone: +91 916-464-2338
Post: Vistra Mind Innovation LLP, 4th Floor, No. 93/9, Novel MSR Park Office, Munnekolala Village, Varthur Hobli, Bengaluru Urban, Karnataka 560037

Your request will be routed to the person responsible for data protection at Vistra Mind Innovation LLP, who will respond to you directly. If you are not satisfied with that response, you may complain to the Data Protection Board of India.

Changes to this policy

We will update this page when our practices change, and the date at the top will tell you when it last happened. Where a change materially affects how we use data you have already given us, we will tell you directly rather than relying on you noticing.