Introduction and Scope

At Savlusto Dirbdine, we understand that your privacy is fundamental to building trust in our web application security services. This comprehensive privacy policy explains how we collect, use, protect, and manage your personal information when you interact with our platform, services, and educational programs.

This policy applies to all users of our website (purepathwaynet.sbs), participants in our learning programs, clients of our security consulting services, and anyone who communicates with us through our various channels. By using our services, you acknowledge that you have read and understood this privacy policy.

Information We Collect

Our data collection practices are designed to provide you with personalized security training and consulting services while maintaining strict privacy standards. We collect several types of information through different interactions:

How We Use Your Information

Your information helps us deliver exceptional web application security education and consulting services. We've found that personalized approaches significantly improve learning outcomes in complex technical fields like cybersecurity.

We use your personal information to enroll you in appropriate courses, track your learning progress, issue certificates upon completion, and recommend advanced training paths. For our consulting clients, we use professional information to understand your organization's security posture and deliver targeted recommendations.

Technical data helps us maintain platform security, detect potential threats, optimize website performance, and ensure our systems can handle the demands of our growing user base. We also use aggregated, non-identifiable data to improve our course content and develop new security training modules.

Data Sharing and Third Parties

We maintain strict control over your personal information and never sell your data to third parties. However, we do work with carefully selected partners to deliver our services effectively.

In rare circumstances, we may be required to share information due to legal obligations, such as responding to court orders or law enforcement requests. We will notify you of such requests unless legally prohibited from doing so.

Data Security Measures

As a web application security company, we apply the same rigorous security standards to protect your personal data that we teach in our courses. Our security infrastructure includes multiple layers of protection.

All data transmission occurs over encrypted HTTPS connections using TLS 1.3 or higher. Our databases are encrypted at rest using AES-256 encryption, and access is strictly limited to authorized personnel who have undergone background checks and security training.

We implement regular security audits, penetration testing, and vulnerability assessments on our systems. Our staff follows secure coding practices, and we maintain detailed security logs for monitoring and incident response purposes.

Your Rights and Control

You have significant control over your personal information and can exercise various rights regarding your data. We believe that data privacy should be transparent and user-controlled.

You can access your personal information at any time through your account dashboard or by contacting our support team. You have the right to correct inaccurate information, update your preferences, or request that we delete your account and associated data.

If you wish to receive a copy of all personal data we hold about you, we can provide this in a structured, machine-readable format within 30 days. You can also request that we transfer your learning records to another educational platform if you choose to continue your training elsewhere.

Data Retention and Deletion

We retain your personal information only as long as necessary to provide services, comply with legal obligations, and maintain security records. Different types of data have different retention periods based on their purpose and legal requirements.

Course enrollment and completion data is typically retained for seven years to support certification verification and continuing education tracking. Payment records are kept for tax and accounting purposes as required by law. Website usage logs are generally deleted after two years unless they're part of a security investigation.

When you request account deletion, we begin the removal process within 30 days. However, we may retain certain information longer if required for legal compliance, fraud prevention, or legitimate business interests such as maintaining the integrity of our certification programs.

International Data Transfers

While our primary operations are based in India, we work with international partners and may transfer data across borders to provide our services. We ensure appropriate safeguards are in place for any international data transfers.

Our cloud infrastructure providers have data centers in multiple regions, but all maintain equivalent security standards and privacy protections. We use standard contractual clauses and other legal mechanisms to ensure your data receives adequate protection regardless of where it's processed.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and provide personalized content. We use both session cookies that expire when you close your browser and persistent cookies that remain until deleted.

Essential cookies are necessary for website functionality, including login sessions and security features. Analytics cookies help us understand how users navigate our site and which content is most valuable. Marketing cookies enable us to show relevant content and measure the effectiveness of our educational campaigns.

You can control cookie settings through your browser preferences, though disabling certain cookies may limit website functionality. We respect browser "Do Not Track" signals and provide cookie preference centers where available.

Changes to This Policy

We regularly review and update this privacy policy to reflect changes in our services, technology, and legal requirements. When we make significant changes, we'll notify you through email and prominent website notices at least 30 days before the changes take effect.

Minor updates, such as clarifications or contact information changes, may be made without advance notice. We encourage you to review this policy periodically to stay informed about how we protect your privacy.