Privacy Policy

Effective Date: February 01, 2026
Last Updated: February 01, 2026

1. Introduction

Forte India Enterprises Private Limited (“Forte India,” “We,” “Us,” or “Our”), a company registered under the Companies Act, 2013, with registered office at 119/23, Naseemabad Rd, Gumti No.5, Darshan Purwa, Kanpur, Uttar Pradesh 208012, India, is committed to protecting the privacy and personal data of all visitors, users, and registrants (“You,” “Your,” or “Data Principal”).

This Privacy Policy applies to our website https://forteindia.co.in/ and all services offered through the website, including workshop registrations for ITI (Industrial Training Institute) students, skill development programs, visitor inquiries, and user account management (collectively, “Services”).

By accessing, browsing, registering on, or using Our Services, You acknowledge that You have read, understood, and agree to be bound by this Privacy Policy and consent to the collection, use, processing, storage, and disclosure of Your personal data as described herein.

This Privacy Policy complies with:

Digital Personal Data Protection Act (DPDPA) 2023, Government of India
Information Technology Act, 2000 and IT Rules, 2011

2. Definitions

Personal Data: Any information relating to an identified or identifiable natural person, including name, email, phone, address, date of birth, ITI enrollment details, Aadhaar number (if provided), photograph, and other identifying information.

Data Fiduciary: Forte India Enterprises Private Limited, which determines the purpose and means of processing personal data.

Data Principal: The individual (You, including ITI students, workshop participants, or registrants) to whom the personal data relates.

Processing: Any operation performed on personal data, including collection, storage, use, disclosure, or deletion.

Consent: A clear affirmative action signifying freely given, specific, informed agreement to processing of personal data.

Verifiable Parental Consent: Consent obtained from parent or lawful guardian for processing data of a child (under 18 years), verified through reliable means under DPDPA 2023.

Child / Minor: Any person under 18 years of age as defined under DPDPA 2023.

3. Data Fiduciary and Contact Information

Data Fiduciary:
Forte India Enterprises Private Limited
119/23, Naseemabad Rd, Gumti No.5, Darshan Purwa,
Kanpur, Uttar Pradesh 208012, India
Website: https://forteindia.co.in/
Email: Email :[email protected]
Phone: +91 63869 02979

Grievance Officer (DPDPA 2023 Compliance):
Name: Mr. Ritesh Sharma
Designation: Manager – Compliance
Email: [email protected]
Phone: 0512 221 2509
Address: 119/23, Naseemabad Rd, Kanpur, UP 208012

4. Applicability and Scope

This Privacy Policy applies to:

• All visitors to https://forteindia.co.in/

• ITI/ other institutions students registering for workshops and skill development programs

• Parents or guardians providing consent for minor students (under 18 years)

• Educational institutions, ITI/ other institution administrators, and partner organizations

• Any individual submitting inquiries, feedback, or contact forms

• Personal data processed in digital form or digitized thereafter

5. Personal Data We Collect

We collect the following categories of personal data:

5.1 Registration Data (ITI Students & Workshop Participants)

When You register for workshops or training programs, We may collect:

Full Name
Date of Birth / Age
Gender
Email Address
Mobile Number / Phone Number
Postal Address (City, State, PIN Code)
ITI Name/ Institution and Trade/Course Details
Year of Study / Enrollment Year
Educational Qualifications
Aadhaar Number (optional, only if required for government scheme eligibility)
Photograph (for ID card or certificate generation)
Parent/Guardian Name and Contact Details (for minors under 18)

5.2 Inquiry and Contact Form Data

Name
Email Address
Phone Number
Message / Inquiry Details

5.3 Technical Data (Automatically Collected)

IP Address
Browser Type and Version
Device Type and Operating System
Date and Time of Visit
Pages Viewed and Duration
Cookies (see Cookie Policy)

5.4 Information from Third Parties

• ITI institutions and educational authorities (student lists, enrollment data)
• Government agencies (for verification of eligibility)
• Partner organizations and training facilitators

6. Purpose of Processing and Legal Basis

We process Your personal data for the following purposes:

Purpose	Legal Basis (DPDPA 2023)
Workshop and training registration	Consent (Verifiable Parental Consent for minors)
Student identification and attendance	Consent and Legitimate Purpose (educational service)
Certificate issuance	Consent and Contract Performance
Communication regarding workshops and updates	Consent
Responding to inquiries and support	Consent and Legitimate Interest
Website functionality improvement	Legitimate Interest
Analytics and usage monitoring	Consent
Compliance with legal requirements	Legal Obligation

Consent is obtained through clear affirmative action: checking consent boxes, clicking “I Agree,” or parent/guardian signing consent forms for students under 18.

7. Special Provisions for Student Data (Minors Under 18)

Given that most ITI students or students from other institutions may be under 18, We comply with Section 9 of DPDPA 2023:

7.1 Verifiable Parental Consent

We obtain verifiable consent from parent/guardian through:

Verification using information already available (e.g., ITI student records)
Parent/guardian providing government-issued ID and signing consent form
Digital verification through DigiLocker or government platforms
Physical or digital consent form signed by parent/guardian

7.2 Prohibition on Detrimental Processing

We do NOT process student data in ways that may cause harm:

Behavioral tracking for advertising
Profiling that could lead to discrimination
Sharing data for commercial marketing

7.3 Educational Purpose Exemption

Parental consent is not required when processing is necessary for educational services mandated by law or government schemes (Section 9(1) exemption).

8. How We Use Your Personal Data

Register You for workshops and training programs
Verify identity and eligibility
Communicate schedules, updates, and reminders
Issue certificates and credentials
Track attendance and program completion
Provide support and respond to inquiries
Improve website, programs, and services
Conduct surveys and feedback (with consent)
Comply with legal obligations and government reporting
Prevent fraud and unauthorized access

9. Data Sharing and Disclosure

We do not sell or trade Your data. We may share data with:

9.1 Data Processors and Indemnity

(a) Use of Data Processors. We may appoint third‑party vendors and service providers (data processors) to process personal data on Our behalf for purposes such as hosting, communications, analytics, certificate generation, and IT support, strictly in accordance with Our documented instructions and subject to confidentiality and security obligations consistent with the Digital Personal Data Protection Act, 2023.

(b) Contractual Safeguards. We enter into written data‑processing arrangements with all such data processors, requiring them to implement reasonable technical and organizational measures, comply with applicable data protection laws, promptly notify Us of any personal data breach, and assist Us in fulfilling Our obligations towards Data Principals.

(c) Indemnity by Data Processors (Contractual Responsibility). Each data processor engaged by Us is contractually required to indemnify and hold Us harmless from and against any fines, penalties, claims, losses, damages, and reasonable legal costs arising directly from: (i) the processor’s breach of its data protection or security obligations under its agreement with Us, or (ii) the processor’s violation of applicable data protection laws, to the extent such breach or violation is attributable to the processor.

(d) No Limitation of Your Rights. The engagement of data processors and any indemnity arrangements between Us and such processors do not limit Your rights as a Data Principal under DPDPA 2023 or Our responsibility, as Data Fiduciary, towards You under applicable law.

9.2 ITI Institutions and Educational Authorities

• Student registration, attendance, and certificates shared with ITI institutions or institutions whose students have participated in the programme and government education departments.

9.3 Government Agencies

Ministry of Skill Development, DGT, State Skill Development Missions for compliance and reporting.

9.4 Service Providers

Cloud hosting providers
Email/SMS platforms
Payment processors (if applicable)
Certificate generation vendors

All processors bound by data processing agreements ensuring DPDPA compliance.

9.5 Legal Authorities

• Courts, law enforcement, tax authorities when required by law.

9.6 Partner Organizations

• Training facilitators and partners (with Your consent).

10. Data Retention

We retain data only as long as necessary or required by law:

Data Category	Retention Period
Student registration data	Program duration + 5 years
Workshop attendance records	5 years
Certificates	Permanent (verification)
Inquiry/contact data	2 years after last contact
Technical logs	1 year

After retention period, data will be securely deleted or anonymized.

11. Your Rights as a Data Principal

Under DPDPA 2023, You have the right to:

1. Right to Access: Request summary of data We process about You

2. Right to Correction: Request correction of inaccurate or incomplete data

3. Right to Erasure: Request deletion (subject to legal retention)

4. Right to Withdraw Consent: Withdraw consent anytime (does not affect prior processing)

5. Right to Nominate: Nominate another person to exercise rights in case of death/incapacity

6. Right to Grievance Redressal: File complaint with Grievance Officer or Data Protection Board

11.1 How to Exercise Rights

Email: [email protected]
Grievance Officer: [email protected]
Written request to registered office
Phone: +91 63869 02979

We will acknowledge within 7 days and respond within 30 days.

12. Data Security

We implement security safeguards including:

Encryption (SSL/TLS in transit, encryption at rest)
Secure authentication and access controls
Regular security audits
Firewall and intrusion detection
Secure backups
Employee training on data protection
Restricted access on need-to-know basis

However, no system is 100% secure. We use commercially reasonable efforts but cannot guarantee absolute security.

13. Data Breach Notification

In the event of a breach, We will:

Notify Data Protection Board of India immediately
Provide follow-up report within 72 hours
Notify affected Data Principals without delay
Take corrective actions to contain breach

14. Cookies and Tracking Technologies

We use cookies to enhance Your experience. See Our Cookie Policy for details. You may manage cookies through browser settings or Our cookie consent tool.

Our use of cookies and similar technologies is described in more detail in our separate Cookies Policy, which forms an integral part of this Privacy Policy. You can review it at the “Cookies Policy” link available in the footer of our website or directly at: [insert cookies policy URL]. By continuing to use our website, you acknowledge that you have been provided with clear information about cookies and that you can manage your preferences in accordance with our Cookies Policy.

15. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for their privacy practices. Please read their privacy policies.

16. Children’s Privacy

As Our audience includes ITI students (many under 18) or students from other institutions or any visitor who has not attained age of a major, We obtain verifiable parental consent before processing data of minors, except where necessary for educational services.

Parents/guardians may review, correct, delete, or withdraw consent for their child’s data.

Contact [email protected] for concerns.

17. Updates to This Privacy Policy

We may update this Policy. We will notify You by:

Posting updated Policy with new “Last Updated” date
Email/SMS to registered users
Prominent website notice

Continued use after changes constitutes acceptance.

18. Governing Law and Jurisdiction

Governed by:

Digital Personal Data Protection Act 2023
Information Technology Act 2000
Indian Contract Act 1872

Disputes subject to exclusive jurisdiction of courts in Kanpur, Uttar Pradesh.

19. Contact Us

Forte India Enterprises Private Limited
119/23, Naseemabad Rd, Gumti No.5, Darshan Purwa,
Kanpur, Uttar Pradesh 208012, India
Website: https://forteindia.co.in/
Email: [email protected]
Grievance Officer: [email protected]
Phone: +91 63869 02979

20. Grievance Redressal Mechanism

Grievance Officer:
Name: Mr. Ritesh Sharma
Email: [email protected]
Phone: +91 63869 02979
Address: 119/23, Naseemabad Rd, Kanpur, UP 208012

Grievances acknowledged within 7 days, resolved within 30 days.

Data Protection Board of India: www.dpb.gov.in

21. Acknowledgment and Consent

By registering or using Our Services, You acknowledge You have:

Read and understood this Privacy Policy
Provided informed consent for data processing
If under 18, obtained verifiable parental consent

If You disagree, please do not register or use Our Services.

Document Control

Document Title	Forte India Enterprises Privacy Policy
Version	1.0 (DPDPA 2023 Compliant)
Effective Date	February 17, 2026
Last Updated	February 17, 2026
Prepared For	Forte India Enterprises Private Limited
Review Frequency	Annually or as required
Jurisdiction	India (Kanpur, UP)