Privacy Policy

1. Who we are

The Sakalya (“we”, “us”) is a training and development organisation based in New Delhi, India. This policy explains how we handle personal data on thesakalya.com and its pages, including enquiries, user accounts, our blog and the Campus to Corporate mentorship programme. We process personal data in line with India’s Digital Personal Data Protection Act, 2023 and other applicable law.

We collect only what we need to run these services. We do not sell personal data, and we do not use advertising or tracking tools on this website.

2. What we collect

3. How we use it

• To reply to enquiries and arrange training you ask about.
• To create and secure your account, confirm your email and let you log in.
• To run Campus to Corporate: review registrations, match students with mentors, record the journey, send the emails each step needs, and issue the report card and certificate.
• To publish blog content you submit (after review) and moderate comments.
• To keep the site safe: detecting spam and bots, limiting repeated login attempts and investigating misuse.
• To improve our programmes using overall figures (for example average ratings), and — only if you agree — to quote your feedback as a testimonial.

We rely on your consent (which you give when you register, apply or submit a form, and which you can withdraw) and on legitimate uses permitted by law, such as keeping the service secure and meeting legal obligations.

4. Who can see your information

• The Sakalya team — staff who run the programme see what they need to do so. Each staff member has only the access their role requires, and their actions are logged.
• Your mentor (students) — sees your profile and your journey: intake answers, goals, sessions, reviews, messages and reflection. Mentors agree to keep what students share confidential.
• Your students (mentors) — see your mentor profile, unless the team hides your identity, in which case they see a mentor ID only. A mentor’s private session notes are never shown to students.
• Report cards and certificates — prepared and sent only by authorised Sakalya staff. Your mentor writes the final evaluation but does not receive the documents.
• Certificate verification — anyone who has your certificate number can confirm on our website that it is genuine. The check shows only your name, the programme, the completion date and the date of issue.
• The public — sees blog posts and comments you publish, under the name on your account, and testimonials only if you agreed and in the form you chose (full name and institution, first name only, or anonymous).

We may disclose information if required by law or a valid order of a court or authority, or to protect someone’s safety.

5. Services we rely on

These providers process data on our behalf or when you use their features:

• Our web hosting provider — stores the website, the database and our email.
• Google — Sign in with Google (only if you choose it); reCAPTCHA on forms, to tell people from bots (it collects device and usage data under Google’s own Privacy Policy); and Google Fonts, which loads our typefaces.
• Video platforms such as YouTube — only when you play a video embedded in a page or post.
• LinkedIn — only if you press Add to LinkedIn for your certificate.

6. Cookies

We use one essential cookie that keeps you logged in and protects forms from forgery. It is deleted when your session ends or you log out. We don’t use advertising or analytics cookies. Google reCAPTCHA and embedded videos may set their own cookies when they load.

7. How long we keep it

• Enquiries — for up to 2 years, unless they lead to an engagement.
• Accounts — while your account is active. You can ask us to delete it at any time.
• Campus to Corporate records — for the programme and for up to 3 years after it ends, so we can reissue documents and answer verification requests. A certificate’s verification record (name, programme, dates and number) is kept for as long as the certificate may be relied on, unless you ask us to withdraw it.
• Security logs — for up to 1 year, unless needed to investigate misuse.

8. Security

The site uses HTTPS throughout. Sensitive details — mobile numbers, dates of birth, intake answers and reflections, session notes, messages and mentors’ evaluations — are encrypted in our database, with the key kept separately from it. Passwords are stored only as secure hashes; one-time links expire; staff accounts can require two-step verification; uploaded images are re-processed by the server; and stored documents are kept outside the public web folders. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a personal data breach as the law requires.

9. Your rights

You can ask us to:

• give you a summary of the personal data we hold about you and how we use it;
• correct or update it — students can change most profile details from My profile;
• delete it, or withdraw your consent (this may end your participation in a programme);
• nominate someone to exercise these rights for you in case of death or incapacity.

Write to us at the address below. We will reply within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

10. Young people

Our accounts and the Campus to Corporate programme are intended for people aged 18 and over. If you are under 18, please don’t register; contact us, and we will only proceed with verifiable consent from a parent or guardian. Our POCSO and school programmes are delivered offline, under agreements with the institutions concerned.

11. Changes to this policy

We will update this page when our practices change and revise the date at the top. Significant changes will be notified to registered users by email or on the site.

See also our Terms of Use.