Skip to main content
Back to Legal & Compliance Hub
DPDP Act 2023 Compliant

Privacy Policy & Candidate Data Protection

Last updated: April 2026 · Formulated in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act, India) and the Information Technology Act, 2000.

Our Data Fiduciary Commitment

Arzon Global acts as a responsible Data Fiduciary. We process personal data solely for lawful educational, assessment, and career enablement purposes with explicit candidate consent. We strictly prohibit the commercial sale or unauthorized rental of candidate information to third parties.

1. Identity of the Data Fiduciary

The entity responsible for the collection, storage, and processing of your personal data under the DPDP Act is:

Arzon Global
Registered Office: 1st floor, S Chandra Reddy Towers, 100 Feet Rd, Ayyappa Society, VIP Hills, Jaihind Enclave, Madhapur, Hyderabad, Telangana 500081, India
Enterprise Standing: Registered MSME under UDYAM, Government of India
Email for Privacy Matters: privacy@arzonglobal.com

2. Categories of Personal Data Collected

We collect only the minimum personal data necessary to provide career intelligence and training services:

  • Identity & Contact Data: Name, email address, mobile number, current city, academic institution, and degree background (e.g. B.Pharm, M.Pharm, B.Tech, Life Sciences).
  • Career Assessment Responses: Responses submitted during the Career Engine diagnostic and ACRI™ scenario tests, including situational triage choices and clinical coding attempts.
  • Academic & Enrolment Data: Cohort selection, capstone project submissions, attendance telemetry, and mentor assessment scores.
  • Technical Logs: IP address, device operating system, browser type, and timestamps recorded for cybersecurity defense and fraud prevention.

3. Lawful Grounds & Purpose of Data Processing

Your data is processed based on your explicit, informed consent for the following specific purposes:

  • To evaluate role readiness and generate your personalized Career Engine diagnostic report.
  • To administer training cohorts, assign dedicated industry mentors, and review weekly project assignments.
  • To verify the authenticity of credentials, digital badges, and ACRI™ scorecards through our open-ledger public verifier.
  • To facilitate structured candidate introductions to verified enterprise hiring partners (strictly with candidate opt-in).

4. Absolute Data Protections: What We Never Do

  • Zero Data Brokerage: We never sell, lease, or trade candidate contact numbers, email lists, or resumes to data brokers or third-party advertisers.
  • No Telemarketing Spam: We never send automated commercial marketing robocalls or spam SMS. Official updates are sent only via registered WhatsApp business channels and transactional emails.
  • No Hidden Tracking: We do not deploy third-party advertising tracking pixels that monitor candidate browsing across unrelated websites.

5. Security Infrastructure & Storage Architecture

We implement industry-grade technical and organizational safeguards to ensure data integrity:

  • Encryption: All data in transit is encrypted using Transport Layer Security (TLS 1.3). Data at rest is encrypted using Advanced Encryption Standard (AES-256).
  • Database Isolation: Production databases are secured via granular Row-Level Security (RLS) policies within Supabase infrastructure, ensuring learners can access only their own records.
  • Access Governance: Administrative access is restricted to verified personnel via multi-factor authentication (MFA) following least-privilege principles.

6. Your Statutory Rights under DPDP Act 2023

As a Data Principal under Indian law, you possess comprehensive statutory rights:

  • Right to Access: You can request a summary of the personal data processed by Arzon Global and the identities of any data processors involved.
  • Right to Correction & Erasure: You can request the correction of inaccurate details or the complete deletion of your profile and assessment telemetry from our active databases.
  • Right to Withdraw Consent: You may withdraw your consent for future data processing at any time by writing to our privacy desk.
  • Right to Grievance Redressal: You have the right to register a formal grievance with our designated Grievance Officer regarding any data protection concern.

7. Data Retention & Erasure Policy

Candidate application and assessment data is retained for the duration of the candidate's active learning lifecycle and for a maximum period of 36 months following certification, to facilitate recruiter credential verification.

Upon receipt of a verified deletion request, personal identifying data is permanently scrubbed from production tables within 30 calendar days.

8. Privacy Grievance Officer & Contact Information

For exercising your data rights or escalating privacy inquiries, please contact our designated Data Protection & Grievance Cell:

Officer: Grievance Officer (Data Protection & Privacy)

Entity: Arzon Global

Address: 1st Floor, S Chandra Reddy Towers, 100 Feet Rd, Madhapur, Hyderabad, Telangana 500081, India

Email: privacy@arzonglobal.com / grievance@arzonglobal.com

Statutory Response Window: Acknowledged within 48 hours; written determination within 15 working days.

WhatsApp counsellor