Draft prepared: 18 October 2026 · Language: English · Jurisdiction: Jaipur, Rajasthan
ScorpioSec Privacy Policy
Effective Date: 18 October 2026
Last Updated: 18 October 2026
1. Introduction
Welcome to ScorpioSec (“ScorpioSec”, “we”, “our”, or “us”).
ScorpioSec operates https://scorpiosec.org/, an online cybersecurity education and learning platform offering cybersecurity-related courses, educational content, digital products, and learning resources.
This Privacy Policy explains how we collect, use, store, process, disclose, and protect personal information when you visit our website, register for an account, browse courses, purchase digital products, access learning materials, or contact us.
We aim to handle personal information responsibly and in accordance with applicable Indian laws, including relevant provisions of the Digital Personal Data Protection Act, 2023, the rules and notifications made under it, the Information Technology Act, 2000, and other applicable legal requirements.
Where applicable law requires consent for a particular processing activity, we will seek that consent separately. Merely visiting our website or reading this policy does not replace consent where consent is legally required.
2. About ScorpioSec
Platform Name: ScorpioSec
Website: https://scorpiosec.org/
Contact Page: https://scorpiosec.org/contact/
Privacy Contact Email: privacy@scorpiosec.org
Legal Business Name, if applicable: ScorpioSec (MSME certified)
Registered or Correspondence Address, where applicable: Jaipur, Rajasthan
ScorpioSec provides online cybersecurity education and learning resources. Our website may allow visitors to explore courses, register for accounts, purchase digital products, download learning materials, and submit enquiries.
Online-Only Operations and Physical Location Disclaimer
ScorpioSec currently operates as an online-only cybersecurity education and learning platform.
At present, ScorpioSec does not operate or represent itself as having a publicly accessible physical office, campus, classroom, training centre, or dedicated offline teaching facility.
No Offline Classes: ScorpioSec does not currently offer in-person classroom teaching, physical training sessions, or offline classes at a physical location.
No Walk-In Facility: Visitors, students, customers, and other individuals should not assume that they can visit a physical office or training centre for classes, admissions, payments, or support.
Online Learning and Services: Educational services and learning activities offered through ScorpioSec are intended to be delivered online through our website and applicable digital communication or learning platforms, subject to the details of the specific course or service.
Online Enquiries and Support: Course enquiries, customer support, and other communications are handled through the online contact channels provided on our website.
Future Changes: If ScorpioSec establishes a physical office, training centre, or offline educational service in the future, relevant details will be communicated through appropriate official channels.
This statement describes our current operating model. It does not remove any legal obligations that may apply to the business, including any requirement to disclose a registered business address or other legally required contact details.
3. Personal Information We May Collect
Depending on how you use our website, we may collect the following categories of personal information.
3.1 Account and Registration Information
When you create an account, we may collect:
- Name or display name.
- Email address.
- Username.
- Password credentials, stored using appropriate security protections rather than in plain text.
- Profile details and account preferences you choose to provide.
3.2 Course and Purchase Information
When you enrol in a course or purchase a digital product, we may process:
- Course and product names.
- Order numbers and purchase dates.
- Transaction references and payment status.
- Billing information, where required.
- Order history and purchase records.
- Course enrolment, access, and download records.
- Relevant customer support communications.
3.3 Payment Information
Payments may be processed through third-party payment gateways, banks, UPI services, or other supported payment providers.
Depending on the payment method, we may receive transaction identifiers, payment status, order details, and information necessary to verify and reconcile a payment.
We do not intentionally store complete payment card details, UPI PINs, banking passwords, or payment authentication credentials on our website. Such information should be entered only into the relevant authorised payment interface.
Payment providers may independently process information under their own privacy policies and terms.
3.4 Contact and Support Information
If you contact us through a form, email, or another communication channel, we may collect your name, email address, message, enquiry details, and information you voluntarily provide.
Please do not send passwords, UPI PINs, banking credentials, or unnecessary sensitive information through our contact forms.
3.5 Technical and Usage Information
Our hosting provider, website software, or security tools may process technical information such as:
- IP address.
- Browser type and version.
- Device and operating system information.
- Pages visited and timestamps.
- Referral information.
- Website error and security logs.
- Cookie and session information, where applicable.
We use this information for appropriate purposes, such as website operation, security, troubleshooting, and service improvement, subject to applicable law.
3.6 Information from Third-Party Services
If you use an integrated payment gateway, analytics service, embedded content provider, or other third-party service, that provider may share relevant information with us.
The information received depends on the service, its configuration, your settings, and the permissions or consent applicable to that service.
4. How We Use Personal Information
Subject to applicable law, we may use personal information to:
- Create and manage user accounts.
- Provide access to purchased courses and digital products.
- Process orders and verify payments.
- Deliver purchase confirmations, receipts, and service-related emails.
- Respond to enquiries and provide customer support.
- Maintain website security and prevent fraud or unauthorised access.
- Maintain transaction records and meet legal obligations.
- Improve website functionality and the learning experience.
- Communicate important service or policy changes.
- Send promotional communications where permitted and, where required, with consent.
We will not use personal information for a materially different purpose without an appropriate lawful basis and any additional notice or consent required by applicable law.
5. Legal Basis and Consent
We process personal information in accordance with the legal grounds applicable to the relevant activity under Indian law.
Where consent is required, we will seek consent through an appropriate mechanism and provide information about the relevant purpose. Where another lawful basis or statutory exception applies, processing may take place in accordance with that basis.
You may withdraw consent for processing that relies on your consent by contacting us through the details in this policy.
Withdrawal does not invalidate processing that lawfully occurred before withdrawal. It may also affect our ability to provide a service that depends on the relevant information.
We will handle consent withdrawals and related requests subject to applicable legal requirements and lawful retention obligations.
6. Cookies and Similar Technologies
Our website may use cookies and similar technologies to support functionality and security.
These may include:
- Essential cookies: Support login sessions, account security, shopping cart functionality, and checkout.
- Preference cookies: Remember settings and preferences, where enabled.
- Analytics cookies: Help measure website usage, where an analytics service is installed and its use is permitted.
- Marketing cookies: May be used by advertising or marketing integrations if enabled.
The cookies actually used depend on our installed WordPress theme, plugins, hosting configuration, and third-party integrations.
You can manage cookies through your browser settings and, where provided, our cookie preference controls. Blocking essential cookies may prevent certain features, such as login or checkout, from working correctly.
Where required by law, we will obtain consent before using non-essential cookies or similar technologies.
7. Sharing and Disclosure of Personal Information
We do not sell personal information as a business practice.
We may disclose relevant information to the following categories of recipients when necessary and legally permitted.
7.1 Hosting and Website Providers
Our hosting provider and technical service providers may process information to host, maintain, secure, and operate our website.
7.2 Payment Providers
Payment gateways, banks, and supported payment services may process information needed to authorise, verify, settle, or investigate transactions.
7.3 Website and Course Tools
We may use WordPress plugins and service providers for account management, course delivery, digital downloads, email notifications, security, backups, and customer support.
7.4 Professional Advisers and Authorities
Information may be disclosed to professional advisers or competent authorities where reasonably necessary or legally required.
7.5 Business Transfers
If our business or relevant assets are transferred, reorganised, or acquired, information may be handled as part of that transaction, subject to applicable law and appropriate safeguards.
Where a third party processes personal information on our behalf, we will seek appropriate contractual and security arrangements as required by applicable law.
8. Third-Party Websites and Services
Our website may contain links to external websites, payment interfaces, videos, learning platforms, or other third-party services.
We do not control the privacy practices of independent third parties. Their collection and use of information are governed by their own policies and terms.
We encourage you to review those policies before providing personal information to an external service.
9. Storage, Retention, and Deletion
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, subject to applicable legal, accounting, tax, dispute-resolution, security, and other retention requirements.
Retention periods may vary by category:
- Account information: While an account remains active and for a reasonable period afterwards where necessary.
- Order and transaction records: For the period required by applicable law.
- Support communications: For as long as needed to resolve an enquiry and maintain appropriate records.
- Technical and security logs: For a proportionate period based on security, troubleshooting, and legal requirements.
- Consent and compliance records: For as long as reasonably necessary to demonstrate compliance with applicable obligations.
When information is no longer required and no lawful retention obligation applies, we will take appropriate steps to delete it or render it unusable in accordance with applicable law.
Deleting an account may not immediately delete transaction records that must be retained by law.
10. Security Measures
We take reasonable technical and organisational measures appropriate to the information we handle and the risks involved.
Depending on the systems in use, these measures may include access restrictions, secure authentication, encrypted connections, software updates, backups, security monitoring, and protections against unauthorised access or disclosure.
No website, internet transmission, or electronic storage system can be guaranteed to be completely secure. We cannot promise absolute security, but we aim to manage risks responsibly and respond to security incidents in accordance with applicable legal requirements.
If a personal data breach occurs, we will take appropriate response measures and provide notifications to affected individuals and authorities where required by applicable law.
11. Your Privacy Rights
Subject to applicable law, eligibility requirements, and lawful exceptions, you may have the right to:
- Request information about personal data being processed about you.
- Request correction of inaccurate or incomplete personal information.
- Request completion or updating of relevant information.
- Request deletion of personal information where legally applicable.
- Withdraw consent where processing relies on consent.
- Raise a grievance about the handling of your personal information.
- Nominate another individual to exercise applicable rights in circumstances permitted by law.
You may exercise applicable rights by contacting us using the details in this policy.
Please provide enough information for us to identify the relevant account or request. We may need to verify your identity before acting on a request to protect against unauthorised disclosure.
We will respond within the time limits required by applicable law. Some requests may be limited where information must be retained to comply with law, establish or defend legal claims, protect security, or fulfil another lawful obligation.
12. Children and Minors
Our website and educational resources may be accessible to students of different ages. We do not intend to collect children’s personal information in violation of applicable law.
Where the Digital Personal Data Protection Act, 2023 and its applicable provisions require verifiable parental consent or impose restrictions concerning children, we will follow those requirements as they apply to our processing activities.
We will not knowingly undertake processing prohibited by applicable law, including prohibited tracking, behavioural monitoring, or targeted advertising directed at children where such restrictions apply.
Parents or lawful guardians who believe that a child has provided personal information inappropriately may contact us to request review and appropriate action.
13. International Data Processing
Some service providers may store or process information on servers located outside India.
Where personal information is transferred outside India, we will comply with applicable Indian legal requirements, including any restrictions, directions, or safeguards that apply to the relevant transfer.
The countries and locations involved depend on the providers and services actually used on our website.
14. Promotional Emails and Communications
We may send transactional messages relating to account registration, purchases, payment verification, course access, security, and customer support.
Where permitted and appropriate, we may also send course announcements or promotional communications. We will obtain consent where required by applicable law.
You can opt out of promotional emails by using the unsubscribe mechanism provided in the message or contacting us.
Opting out of marketing will not necessarily stop essential transactional or legally required communications.
15. Grievance Redressal and Privacy Complaints
If you have a concern about how ScorpioSec handles your personal information, please contact us first using the details below.
Privacy / Grievance Contact: [Insert responsible contact person’s name or role]
Email: founder@scorpiosec.org
Please include a description of your concern and enough information to help us investigate it. Do not include passwords, payment PINs, or unnecessary identity documents.
We will review and address complaints within the time required by applicable law and our applicable grievance-handling procedures.
Where a statutory remedy or regulatory complaint mechanism is available, you may also use it in accordance with the relevant law.
16. WooCommerce, Orders, and Digital Downloads
If our website uses WooCommerce or a similar e-commerce system, information necessary to manage customer accounts, carts, orders, payments, refunds, and digital product access may be processed.
Depending on the configured settings and extensions:
- Customer details may be used to create and manage orders.
- Order information may be retained for accounting and customer support.
- Download permissions may be associated with an order or customer account.
- Transactional emails may be sent regarding purchases and digital access.
- Security controls may be used to detect suspicious transactions or misuse of download links.
Customers should keep account credentials and private download links secure. We may restrict access or investigate suspicious activity where reasonably necessary to protect customers and our services.
The exact data collected depends on the plugins and checkout fields enabled on the website.
17. Payment Verification and Fraud Prevention
Where online payment methods, including UPI, are supported, we may process transaction references, payment status, order details, and information supplied by the payment provider to confirm whether an order has been paid.
We may use this information to prevent duplicate processing, investigate failed or disputed payments, and provide access to purchased products.
We do not ask customers to disclose their UPI PIN, banking password, or one-time authentication code to ScorpioSec staff. Never share these credentials by email, contact form, or support message.
18. Online-Only Service Delivery
ScorpioSec currently provides its educational offerings and related services through online channels. No physical classroom, offline training centre, or walk-in teaching facility is currently offered.
Students and customers should review the details of each course to understand the delivery format, access method, included resources, and any applicable requirements.
Questions about courses, digital products, account access, and purchases should be submitted through our website’s online contact channels.
This section describes our present service delivery model and may be updated if our operations change.
19. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our website, services, technical systems, or applicable law.
The latest version will be published on this page with an updated “Last Updated” date. Where required by law, we will provide additional notice or seek fresh consent before implementing a material change.
We encourage users to review this page periodically.
20. Applicable Law
This Privacy Policy is intended to be interpreted in accordance with the laws of India, including applicable provisions of the Digital Personal Data Protection Act, 2023, the rules and commencement notifications made under it, the Information Technology Act, 2000 and applicable rules, and relevant consumer protection and e-commerce laws.
The application and commencement of particular legal obligations may depend on the relevant statutory provisions, notifications, and transitional timelines. Nothing in this policy excludes rights or remedies that cannot lawfully be excluded.
21. Contact ScorpioSec
For privacy questions, requests concerning personal information, or complaints about this policy, contact:
ScorpioSec
Website: https://scorpiosec.org/
Contact Page: https://scorpiosec.org/contact/
Privacy Email: privacy@scorpiosec.org
Legal Business Name, if applicable: ScorpioSec
Registered or Correspondence Address, where applicable: Jaipur, Rajasthan
We appreciate your trust and are committed to handling personal information responsibly as you use our online cybersecurity learning platform.
ScorpioSec — Defend | Educate | Evolve.