Privacy Policy — GTM Playroom

Last Updated: 12 January 2026

This Privacy Policy explains how GTM Playroom (“GTM Playroom”, “we”, “us”, “our”) collects, uses, shares, and protects personal data when you use our website, course platform, consulting services, hiring services, and our communities/communication channels (collectively, the “Services”).

This Privacy Policy is intended to comply with applicable Indian law, including the Digital Personal Data Protection Act, 2023 and related rules.

If you do not agree with this Privacy Policy, please do not use our Services.

Scope

This Policy applies to:

• gtmplayroom.com and its subdomains/pages
• course portals, forms, assessments, and internal dashboards we operate
• GTM Playroom-managed communities (e.g., WhatsApp groups) and communications (email/SMS/phone) used to deliver Services
• consulting engagements and hiring facilitation conducted by GTM Playroom

This Policy does not apply to third-party websites, tools, or platforms linked from our Services (they have their own policies).

Our Role (Important)

For most activities, GTM Playroom acts as a Data Fiduciary (we decide why and how personal data is processed). We may use third-party vendors as Data Processors to help us run our Services (hosting, email, analytics, payment gateways, etc.).

In certain consulting engagements, if we process personal data strictly on a client’s documented instructions, we may act as a Data Processor for that client (and the client may be the Data Fiduciary). This will be clarified in the consulting agreement where relevant.

What Personal Data We Collect

We collect only the data we need to provide Services. Depending on what you use, we may collect:

Information you provide directly

• Identity & contact: name, email, phone number, city/state, country
• Profile & professional details: LinkedIn URL, education, work experience, role/designation, skills
• Course participation: assignment submissions, quiz/test answers, mentor session scheduling details, feedback
• Hiring/placements (if you opt in): resume/CV, interview availability, portfolio links, role preferences, compensation expectations (optional), hiring pipeline updates
• Consulting (business clients): business contact details, company information, project inputs shared with us, meeting notes, deliverables feedback
• Support communications: messages sent to us via email/WhatsApp/forms
  
  

Information collected automatically (“Usage Data”)

• IP address (general location derived from IP), device/browser type, pages visited, clickstream, referral/exit pages, timestamps, approximate location
• cookies and similar technologies (see Section 9)

Payment information

Payments are processed by third-party payment gateways. We do not store full card details. We may receive payment confirmation metadata (transaction status, amount, timestamp, reference ID).

Why We Collect/Use Your Data (Purposes)

We process personal data for the following purposes:

Courses

• create and manage your account and course access
• deliver lessons, assignments, evaluations, certificates (if applicable)
• provide coordinator/mentor support
• prevent misuse (account sharing, cheating, fraud)

Consulting

• deliver consulting services, communicate with client stakeholders
• create and share deliverables and recommendations
• manage project execution and support

Platform operations & improvement

• analytics, troubleshooting, security monitoring, abuse prevention
• improve content, curriculum, and user experience

Communications

• service updates, admin notices, policy changes
• marketing (only where permitted and with opt-out)

Legal & compliance

• comply with applicable laws, respond to lawful requests
• resolve disputes and enforce our agreements

Consent, Notice & Lawful Basis

Where required, we process data based on:

• your consent (for example, marketing communications, sharing profile with employers, optional profile fields), and/or
• performance of a contract (to provide the course/consulting/hiring support you requested), and/or
• legitimate uses permitted by law (security, fraud prevention, legal compliance)

You can withdraw consent where applicable (see Section 8). DPDP requires clear, purpose-specific notice and consent practices, and Data Fiduciaries must provide clear contact points and respond to rights requests within prescribed timelines.

Hiring Partners — How Sharing Works (Explicit)

We may help employers discover suitable candidates.

• Employers may see limited/anonymized profile details in certain contexts.
• We share identifiable data (resume, email, phone) with hiring partners only with your explicit consent, or when you explicitly respond/opt in to a specific opportunity.

Opt-out: Email us at richa@gtmplayroom.com with subject: “Hiring Opt Out”.