Privacy Policy

CELA Legal operates POSH India Help and is responsible for this public website and the platform activities described in this Policy, except where a written client agreement identifies a different allocation of responsibilities.

Notice address

CELA Legal, Level 3B, DLF Centre, Sansad Marg, Connaught Place, New Delhi - 110001

Privacy contact

contact@poshindia.help

Grievance contact

Shashi Singh — contact@poshindia.help

We process only information reasonably needed for the relevant website, onboarding, learning, certification, service-delivery, security or support purpose. Depending on the feature, this may include:

• contact and identity details supplied in an enquiry, access request, account or profile;
• organisation affiliation, role, course assignment and access-permission details;
• learning progress, assessment attempts, completion outcomes and certificate lifecycle records;
• communications, support requests and operational records necessary to respond or maintain service continuity;
• where first-party managed commercial messaging is offered, the contact details, organisation context and plain-text enquiry messages needed to respond to an organisation or general enquiry; and
• technical and security information required to authenticate sessions, prevent misuse, investigate incidents and operate the service.

We use this information to respond to requests, review onboarding, create and administer authorised accounts, provide learning and certificates, support client arrangements, meet applicable obligations, protect the platform, and maintain auditable service records.

Information may be provided directly by you, by an authorised organisation administrator, or generated through your use of the platform. Organisations are responsible for ensuring that the user and learner information they provide may lawfully be shared for the agreed service purpose.

For organisation-sponsored services, the written agreement and the actual processing activity determine the parties’ respective responsibilities. This Policy does not replace a client-specific data-processing, confidentiality or service agreement.

Anyone using the public certificate-verification tool submits a certificate number. For a valid certificate, the tool may display the certificate number, learner name, course title, issue date, organisation name where available, and whether the certificate is active, revoked or superseded.

For an unrecognised number, the tool returns only that no matching certificate was found. We may rate-limit verification requests and record minimal operational information needed to protect the verification service.

We do not sell personal data. We may share information with authorised users within the relevant organisation, service providers that help us operate the platform, and authorities or professional advisers where required or reasonably necessary under applicable law. Access is limited to the relevant role, purpose and service arrangement.

First-party managed commercial messaging, where enabled, is restricted to named staff capabilities. It is designed for organisation and general enquiries and is not a complaint, evidence, medical, counselling or confidential survivor-support channel. Messages are protected in storage, access-controlled, and made available through a secure access link rather than exposed in ordinary notification email.

We use access controls, hashed passwords, database-backed sessions, rate limiting and other reasonable technical and organisational safeguards. No system can guarantee absolute security; promptly report suspected unauthorised access to us.

We retain information only for as long as reasonably necessary for the purpose collected, the agreed service, security, recordkeeping, dispute management or an applicable legal requirement. We will delete or anonymise information when it is no longer required where reasonably practicable.

For managed commercial messaging, we retain only the information needed for the enquiry and operational record, under the applicable reviewed retention policy. Access links expire and may be revoked. To ask about your information or raise a privacy concern, email contact@poshindia.help. Please do not send detailed complaint narratives, evidence, medical information or identity documents through ordinary email, public forms, managed commercial messaging, or WhatsApp. Use the Private Guidance Desk or another secure authorised channel where one is provided.

Account-based platform access is for people aged eighteen years or older. We collect date of birth when an invited or draft account is activated to enforce that rule. A separate programme for minors is available only if expressly approved with an appropriate safeguarding and privacy process.

The public site may use strictly necessary browser storage for preferences such as cookie-consent choices. We will update this Policy when material processing practices or legal requirements change. The current version and effective date appear above.

For the terms governing use of the site and platform, read the Terms of Use and Service.