Privacy Notice

P3M.ai is a technology company that builds audit management and training analytics software. This website is operated by P3M Technologies Pvt Ltd, trading as P3M.ai, with its office at 174/8, NSC Bose Road, Kolkata - 700040, West Bengal, India.

For the personal data described in this notice, we act as the Data Fiduciary. That means we decide why and how your data is processed, and we carry the legal responsibility for handling it properly. You are the Data Principal, the person the data is about.

This notice covers the public P3M.ai website only. If your organisation uses our IMPACT platform, the handling of data inside that platform is governed by the agreement between us and your organisation, and your organisation determines what is collected there.

We only collect personal data that you type into a form and submit. We do not buy data, we do not scrape it, and we do not ask for more than the purpose needs.

We do not use your data to train machine learning models, and we do not make automated decisions about you based on it.

Under s.6 of the Act, we process the personal data you submit through this website on the basis of your consent. Every form on this site carries a consent checkbox that is unticked by default. Ticking it is a deliberate act by you, and the form will not submit without it.

Your consent, as the Act requires, is:

• Free. You are never required to consent in order to browse this site or read anything on it.
• Specific and informed. The checkbox states the purpose and links to this notice before you agree.
• Limited. We use the data only for the purpose stated at the point of collection, and nothing else.
• Reversible. You can withdraw it at any time, as easily as you gave it.

When you consent, we record that consent was given, the date and time, and the version of this notice in force at that moment (currently version 1.0). We keep that record so we can demonstrate the consent was properly obtained.

Email nivedita@p3m.ai and say you are withdrawing consent. You do not need to give a reason, use a particular form of words, or justify the request.

We will stop processing your data and erase it, unless we are required by law to keep it. Withdrawal does not undo processing that already happened while your consent was valid, and if you withdraw consent for something we need in order to continue a conversation with you, that conversation naturally ends there.

We do not sell your personal data. We do not share it for anyone else's marketing. We share it only with the service providers below, who process it on our instructions as Data Processors:

Because these providers operate globally, your data may be processed on servers outside India. We rely on the contractual and security commitments each provider offers, and we do not transfer data to any country the Central Government has restricted under s.16 of the Act.

We may also disclose data where a law, a court, or a lawful government request requires it.

This site uses Google Analytics to count visits and see which pages get read. It sets cookies in your browser and collects usage data in a form that does not identify you by name. We do not use advertising cookies, we do not build behavioural profiles, and we do not track you across other websites.

You can switch this off in either of two ways:

• Install the Google Analytics opt-out browser add-on, which blocks it on every site you visit.
• Block or clear cookies in your browser settings, or use your browser's private browsing mode.

Blocking analytics does not affect your ability to use any part of this site.

The Act gives you the following rights over the data we hold about you. All of them are exercised the same way: email nivedita@p3m.ai. There is no charge.

• Access (s.11). Ask for a summary of the personal data we hold about you, what we are doing with it, and who we have shared it with.
• Correction (s.12). Ask us to correct data that is wrong, or complete data that is missing.
• Erasure (s.12). Ask us to delete your data. We will do so unless a law requires us to keep it, and we will tell you if that is the case.
• Grievance redressal (s.13). Complain to us about how we have handled your data, and get an answer. See clause 10.
• Nomination (s.14). Nominate another person to exercise these rights on your behalf if you die or become incapacitated.

We may ask you to confirm your identity before we act, so that we do not hand your data to someone else. We aim to respond within 30 days.

The Act also asks something of you (s.15): please give accurate information, and do not file false or frivolous complaints or impersonate someone else.

This website is intended for adults acting in a professional capacity. We do not knowingly collect personal data from anyone under 18 through this site.

Under s.9 of the Act, processing a child's data requires verifiable consent from a parent or lawful guardian, and we are not permitted to track children, monitor their behaviour, or direct advertising at them. We do none of those things.

If you believe a child has submitted personal data to us, email nivedita@p3m.ai and we will delete it.

Under s.8(5) of the Act we are required to take reasonable security safeguards. In practice that means:

• The site is served over HTTPS, so what you type into a form is encrypted in transit.
• Form submissions are delivered to a single mailbox with access limited to the people who need it, protected by strong authentication.
• We collect the minimum data each purpose requires, and delete it when the purpose is served.
• Our service providers are established vendors with their own published security programmes.

No system is perfectly secure. If a breach occurs that affects your personal data, we will notify you and the Data Protection Board of India as s.8(6) requires.

If you are unhappy with how we have handled your personal data, contact our Grievance Officer. We will acknowledge your complaint and respond within 30 days.

If we do not resolve your complaint to your satisfaction, you may escalate it to the Data Protection Board of India under s.13(3) of the Act.

We update this notice when what we do with data changes. The effective date and version at the top always tell you which version you are reading.

If a change materially alters what you agreed to, we will ask for your consent again rather than rely on the consent you gave to the earlier version.