Privacy Policy

1. Who We Are

“ICR”, “we”, “us”, and “our” refer to Vinfraa Pvt Ltd, India.

2. Scope of This Policy

This Policy applies to ICR services, including Supplier Mart, the Job Portal, Mentorship, Learning and Assessments, Digital Library, Discussion Forum, Chapters and Councils, Events, Benchmarking, Partner Institutions, Memberships, and related services.

Specific services may have additional privacy notices or terms.

3. Personal Data We Collect

Depending on your use of ICR, we may collect:

• Identity and contact data: Name, email address, phone number, professional details, and business address.
• Profile and account data: Login credentials, preferences, qualifications, experience, and profile information.
• Professional and service data: Job applications, employer listings, mentoring interactions, course enrolments, assessment results, certificates, event registrations, and marketplace activity.
• Transaction data: Subscription details, payment records, invoices, and purchase history.
• Technical and usage data: IP address, device and browser details, login records, cookies, and platform usage.
• Communications and preferences: Enquiries, feedback, support requests, and marketing preferences.
• Location data: Location information you provide or select to access relevant services.

We ask users not to submit sensitive personal information unless specifically required and supported by an appropriate lawful basis.

We may also receive relevant information from employers, partner institutions, service providers, or other users where lawful and necessary to deliver our services.

4. How We Use Personal Data

We process personal data, as permitted by applicable law, to:

• Create and manage accounts, profiles, and memberships.
• Provide marketplace, recruitment, mentorship, learning, and other ICR services.
• Administer courses, assessments, certificates, events, and institutional programmes.
• Process payments, subscriptions, and transactions.
• Verify information, maintain platform integrity, prevent fraud, and protect security.
• Respond to enquiries, provide support, and improve our services.
• Meet legal, regulatory, accounting, and contractual obligations.
• Send marketing communications where required consent or another lawful basis applies.

Where required, we will obtain consent before processing personal data or sending marketing communications. You may withdraw consent or opt out of marketing in accordance with applicable law.

5. How We Share Personal Data

We may share relevant data with:

• Other users where necessary for the service—for example, employers and applicants, buyers and vendors, or mentors and mentees.
• Partner institutions, training providers, event organisers, and service partners.
• Technology, hosting, communications, analytics, and customer-support providers.
• Payment processors, including PayU, for payment processing.
• Professional advisers, auditors, regulators, courts, and law-enforcement authorities where legally required or permitted.
• Relevant entities involved in a merger, restructuring, or business transfer, subject to applicable law.

We limit sharing to what is reasonably necessary and require service providers to protect personal data through appropriate contractual and security measures.

ICR does not store payment card details on its systems where payments are processed directly by the payment provider.

6. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including service delivery, legal compliance, dispute resolution, and recordkeeping.

Transactional records may be retained for up to seven years, where required or justified by applicable legal and business requirements. Other records may be retained for different periods depending on their purpose.

Where appropriate, data may be anonymised for research, statistical analysis, or benchmarking.

7. Your Privacy Rights

Subject to applicable law, you may have the right to:

• Request access to your personal data.
• Request correction or updating of inaccurate information.
• Request deletion of personal data where applicable.
• Withdraw consent where processing is based on consent.
• Raise objections or exercise other applicable privacy rights.
• Submit a complaint or grievance concerning data processing.

Requests may be made to info@icr.org.in. We may need to verify your identity before acting on a request. Certain data may need to be retained to meet legal obligations or establish, exercise, or defend legal claims.

8. International Data Transfers

Personal data may be processed or accessed in India and other jurisdictions through our service providers or technology infrastructure. Where international transfers occur, we will apply safeguards and comply with applicable legal requirements.

9. Data Security

We implement reasonable technical and organisational safeguards to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. Measures may include access controls, encryption where appropriate, confidentiality obligations, and security monitoring.

No method of electronic transmission or storage can be guaranteed to be completely secure.

10. Cookies and Similar Technologies

ICR may use essential cookies for authentication and session management, and analytics technologies to understand platform usage and improve performance.

Where required, we will provide appropriate notice and choices for non-essential cookies. You may also manage cookies through your browser settings.

11. Grievances and Complaints

For privacy-related questions or grievances, contact:

• Grievance Officer: Mr. Mahesh
• Email: info@icr.org.in

We will address grievances within the timelines prescribed by applicable law and our grievance-handling procedures. You may also approach the relevant competent authority where permitted by law.

12. Changes to This Policy

We may update this Policy to reflect changes in our services, practices, or legal obligations. Material changes will be communicated through the platform or by email where appropriate. The revised date will appear at the top of this Policy.