EarthTree LMS Privacy Policy


Purpose of this Policy

This policy outlines how Earthtree Pvt Ltd and its affiliated companies, including Earthbanc and ETDS (“we”, “our”, or “EarthTree”) collects, uses, stores, shares, and processes personal information when individuals (“you’’, “your” or “users”) access the EarthTree Learning Management System (LMS) for training purposes. 

 We respect your privacy, and are committed to protecting and handling your information in accordance with applicable data protection laws including, Information Technology Act, 2000 (IT Act, 2000) and Sensitive Personal Data or Information (SPDI) Rules, 2011.

Effective Date: November 2025

EarthTree LMS Privacy Policy

1. Purpose of this Policy

This policy outlines how Earthtree Pvt Ltd and its affiliated companies, including Earthbanc and ETDS (“we”, “our”, or “EarthTree”) collects, uses, stores, shares, and processes personal information when individuals (“you’’, “your” or “users”) access the EarthTree Learning Management System (LMS) for training purposes. 

 We respect your privacy, and are committed to protecting and handling your information in accordance with applicable data protection laws including, Information Technology Act, 2000 (IT Act, 2000) and Sensitive Personal Data or Information (SPDI) Rules, 2011.

2. What Data We Collect

We collect and receive personal data only for lawful purposes connected to the provision of training services including but not limited to:

  • First Name

  • Last Name

  • Email Address

  • Phone Number

  • Password

  • Technical information such as device type and user agent, Internet Protocol (IP) address, system logs, connection data, and usage logs.

 

3. How we collect and receive data

We collect and receive your personal data when you interact with the Learning Management System (LMS). This may include, but is not limited to:

  • Registering to access training or enrolling in the LMS (including through the WhatsApp tokenised link).

  • Updating or modifying personal details in your account.

  • Accessing training content and completing course activities.

  • Generating engagement records, such as login activity, time spent on modules, progress tracking, and completion status.

  • Submitting posts or messages through the platform, including surveys, questionnaires, forms, assessments, or responses to interactive features.

 

4. Why We Collect Your Data

We use the information collected only where it is necessary for lawful purposes, including to:

  • Deliver and administer training programs;

  • Enable secure access, and authenticate users to LMS and assigned training modules;

  • Monitor participation, track progress, and completion of learning activities;

  • Respond to enquiries, troubleshoot issues, provide support, and handle grievances;

  • Comply with applicable legal and regulatory obligations.

 

5. How Long We Retain Your Data 

  • Personal data is retained only as long as necessary for lawful purposes and to comply with applicable legal and regulatory obligations, following which it will be securely deleted in accordance with our data retention policy and applicable laws.

  • System and access logs are retained for 180 days, then securely deleted unless needed for compliance.

  • Training records may be retained as long as required for compliance, unless earlier deletion is requested.

  • Accounts inactive for 12 months may be deleted, and we will notify you before deletion.

6. Disclosure of Information

We do not sell, rent, or publish your personal information. Data may be disclosed only to:

  • Our authorised employees of a related entity under contractual safeguards;

  • Service provider, including moodle, ensuring equivalent protection;

  • Law enforcement or regulators if required by law or valid legal process;

Third parties receiving data are prohibited from further disclosure.

 

7. Data Hosting and Transfers

We keep all data in secured servers. Some data may also be transferred outside your country of residence in compliance with applicable data protection laws.

All such transfer shall be undertaken solely for lawful purposes under this policy and subject to equivalent confidentiality, integrity, and availability safeguards.

By using the LMS, you consent to your data being transferred and stored in jurisdictions with different privacy laws.

 

8. Data Security Measures

We employ reasonable security practices and procedures as required under Rule 8 of the IT (SPDI) Rules, 2011, including:

  • Role-based access control;

  • Secure login protocols and session management;

  • Data encryption and SSL/TLS communication;

  • Logging and audit trails;

  • Regular backups;

  • Retention and deletion policies;

 

9. Consent 

We obtain your consent in writing or electronically before collecting or using your personal information. By accepting enrollment and participating in training, you acknowledge this  privacy policy.

 

10. User Rights

 You may have the right to:

  • Access your personal data and training records;

  • Correct or update inaccurate or outdated information;

  • Withdraw consent at any time by notifying us in writing;

  • Request deletion or anonymisation of your data (subject to legal obligations).

Once a deletion request is made, all data will be removed within 30 days.

However, please note that doing so may limit our ability to provide or manage the training required for your role

To exercise these rights or If you have questions or concerns about this Privacy Policy please contact: privacy@earthtree.in

 

11. Policy Updates

We may update or modify this Policy at any time, and changes will be posted on our communication channels. Significant updates or new policies will require users to review and provide consent upon their next login. Minor formatting changes will not require renewed consent but will be logged and timestamped for transparency.