Privacy Policy
What we collect, why, who we share it with, how long we keep it, and how to make us delete it.
1. Who we are
Hypermind Lab Private Limited ("Hypermind Lab", "we", "us") operates hypermindlab.in and provides corporate training, consulting, scriptwriting and self-paced courses. Under the Digital Personal Data Protection Act, 2023 we are the Data Fiduciary for personal data collected through this website and our engagements.
Registered office: Mumbai, Maharashtra, India.
Registration details are being finalised and will be published here on completion.
Data protection contact: privacy@hypermindlab.in
2. What we collect
We keep this deliberately small. We do not buy data, and we do not build profiles beyond what is needed to answer you and run an engagement.
| Category | What it includes | Where it comes from |
|---|---|---|
| Enquiry data | Name, work email, company, role, team size, industry, city, and what you tell us in the message field | Forms on this website |
| Engagement data | Attendee names and roles, session notes, call recordings where agreed in advance, baseline and outcome metrics you choose to share | You, during a programme |
| Course data | Enrolment, progress and completion | The platform hosting the course (currently Udemy) |
| Billing data | Billing entity, address, GSTIN, invoice records | You; our payment processor |
| Technical data | IP address, browser and device type, pages viewed, referring source | Analytics on this website |
We do not knowingly collect sensitive personal data. Please do not include health information, government identifiers, financial account numbers or any special-category data in a form field or an email to us.
3. Why we use it
Each purpose below is tied to a specific use. We do not repurpose data collected for one reason to do something unrelated.
- To answer your enquiry and prepare a diagnostic or proposal.
- To deliver an engagement you or your employer has commissioned.
- To issue invoices and meet tax and accounting obligations.
- To improve the site and our material using aggregate analytics.
- To send occasional updates, only where you asked for them. Every message carries an unsubscribe link, and unsubscribing does not affect an active engagement.
We rely on your consent for enquiries and marketing, on contractual necessity for delivering paid work, and on legal obligation for tax records.
4. Who we share it with
We do not sell personal data. We never have and it is not part of our model. We share only with processors who help us operate:
| Processor | Purpose | Where processed |
|---|---|---|
| Form and email delivery provider | Delivering website form submissions to our inbox | Outside India |
| Google (Workspace, Analytics) | Email, documents, aggregate website analytics | Outside India |
| Hosting provider | Serving this website | Outside India |
| Payment gateway | Processing payments and issuing receipts | India |
| Course platform | Hosting and delivering self-paced courses | Outside India |
We may disclose data where required by law, a court, or a regulator. If we are ever party to a merger or acquisition, personal data may transfer as part of that transaction, and you will be told.
Cross-border transfer. Some processors above store data outside India. We transfer only what is necessary and only to jurisdictions not restricted by the Central Government under the DPDP Act.
5. How long we keep it
| Data | Retention |
|---|---|
| Enquiries that do not become engagements | 24 months, then deleted |
| Client engagement records | Duration of the engagement plus 3 years |
| Invoices and tax records | 8 years, as required by Indian tax law |
| Marketing list | Until you unsubscribe, then removed within 30 days |
| Session recordings | 12 months, unless you ask us to delete them sooner |
| Website analytics | 14 months, in aggregate |
6. Your rights
Under the DPDP Act you may:
- Access a summary of the personal data we hold about you and how we process it.
- Correct or complete anything inaccurate, and update it.
- Erase your data where we no longer need it for the purpose it was collected.
- Withdraw consent at any time, as easily as you gave it. Withdrawal is not retrospective.
- Nominate another person to exercise these rights if you die or become incapacitated.
- Complain to us, and escalate to the Data Protection Board of India if we do not resolve it.
Write to privacy@hypermindlab.in. We respond within 30 days. We may ask you to verify your identity first, which protects you rather than us.
7. Grievance Officer
As required under the DPDP Act and the Information Technology Rules:
The Grievance Officer
Hypermind Lab Private Limited
Mumbai, Maharashtra, India
privacy@hypermindlab.in
Acknowledgement within 24 hours · resolution within 15 days
8. Cookies and analytics
This site uses a small number of cookies and similar technologies. We do not run advertising pixels or cross-site tracking.
- Strictly necessary — required for the site and forms to work. These cannot be switched off.
- Analytics — aggregate measurement of which pages are read and where visitors arrive from. IP addresses are anonymised where the tool supports it.
You can block or delete cookies in your browser. The site will still work; some measurement will not.
9. Security
We use access controls, encrypted transport (HTTPS), reputable processors and least-privilege access to our systems. No system is perfectly secure, and anyone claiming otherwise is selling something. If we become aware of a personal data breach affecting you, we will notify you and the Data Protection Board as required by law.
10. Children
Our services are for working professionals and organisations. We do not knowingly process the personal data of anyone under 18. If you believe a child has provided us data, contact us and we will delete it.
11. Changes to this policy
We will update this page when our processing changes, and revise the "last updated" date. If a change is material, we will tell anyone on our list directly rather than relying on you to notice. Questions: privacy@hypermindlab.in.