Privacy Policy

This Privacy Policy applies to eprcertificate.online and all related services, including training, consulting, marketplace, support, and communication workflows.

For the purpose of applicable data protection laws, EPR Certificate is the data controller for personal data collected directly through our platforms and interactions.

• Identity and business profile data, including name, company, role, GST/registration details where required for services.
• Contact data such as email address, phone number, city/state, and communication preferences.
• Transaction and billing data including invoices, order history, payment status, and refund records.
• Service data including course progress, consulting notes, support requests, and onboarding/workflow status.
• Technical and usage data including device information, IP-derived location, browser type, and platform interaction logs.

• Performance of contract: to deliver purchased training, consulting, and support services.
• Legitimate interests: to improve service quality, platform security, fraud prevention, and business analytics.
• Legal obligations: to comply with tax, accounting, regulatory, and dispute-handling requirements.
• Consent: for optional promotional communications and certain cookies/trackers where required by law.

• To provide and administer services, including account management, learning delivery, and consulting execution.
• To process payments, refunds, and financial reconciliations through secure partners.
• To communicate operational updates, policy changes, invoices, and support responses.
• To measure performance, improve content and user experience, and maintain platform reliability.

• We use necessary cookies for platform functionality and optional analytics/marketing tools to understand engagement and campaign effectiveness.
• Where legally required, optional trackers are used only with consent and can be withdrawn through browser or consent settings.
• You may opt out of promotional emails at any time using the unsubscribe link. Service communications may still be sent when necessary.

• We share personal data only with vetted service providers (for example payments, communication, hosting, analytics, and CRM) under contractual safeguards.
• We may disclose data to regulators, law enforcement, or courts when required by law.
• If data is transferred across jurisdictions, we use appropriate legal safeguards such as contractual clauses and security controls.
• We do not sell personal data and do not share personal data for third-party behavioral advertising without an appropriate legal basis.

• We retain personal data only for as long as needed for service delivery, legal compliance, dispute resolution, and legitimate business records.
• We implement administrative, technical, and organizational security controls appropriate to the risk profile of the data.
• No transmission or storage method is completely risk-free; however, we continuously monitor and improve security controls.

• Subject to applicable law, you may request access, correction, deletion, portability, restriction, or objection to processing.
• You may withdraw consent where processing is consent-based, without affecting prior lawful processing.
• You may request closure of your account and deletion/anonymization of data not required for legal retention.
• You may lodge a complaint with the relevant supervisory or data protection authority in your jurisdiction.

Our services are designed for business and professional users and are not directed to children. We do not knowingly collect personal data from children where prohibited by law.

• We may update this policy periodically. Material updates will be posted on this page with a revised effective date.
• For privacy requests or complaints, contact: info@eprcertificate.online.
• To help us process requests efficiently, include your full name, registered email, and request details.