Ankur Chandrakant Logo
// PRIVACY & DATA PROTECTION

PRIVACY POLICY

Our commitment to safeguarding your digital privacy, personal data, and cyber identity in full compliance with the Digital Personal Data Protection Act (DPDP) 2023.

Last Revised
October 2026
Jurisdiction
Republic of India (Dehradun, Uttarakhand)
Document Rev
v2.4 (DPDP Act 2023 Compliant)
Statutory Status
Active & Binding
Official DocumentGov. ID: AC-LEGAL-2026

Data Protection Charter & Privacy Governance

Learn how your personal details, Cyber Warrior registrations, and quiz assessment results are encrypted, handled, and defended.

CLAUSE 01DPDP Act 2023

Privacy Commitment & Statutory Framework

Summary: We treat privacy as a fundamental right. Our data handling strictly adheres to the Digital Personal Data Protection Act, 2023 and IT Act, 2000.

At AnkurChandrakant.com and The Better Planet Society (TBPS), digital privacy and cyber defense are not merely legal obligations—they are the foundational mission of our work. Founded by a cybersecurity and digital forensics specialist, our systems are built on principles of Privacy by Design and Data Minimisation.

This Privacy Policy outlines how we collect, process, store, and protect your digital personal data in strict compliance with:

  • The Digital Personal Data Protection Act, 2023 (DPDP Act), enacted by the Parliament of India.
  • The Information Technology Act, 2000 (as amended) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
  • Applicable directives issued by the Indian Computer Emergency Response Team (CERT-In) regarding cybersecurity logging and incident response.
CLAUSE 02Fiduciary Details

Identity of the Data Fiduciary

Summary: Ankur Chandrakant and The Better Planet Society act as Data Fiduciary under the DPDP Act 2023.

Under the provisions of the Digital Personal Data Protection Act, 2023, the Data Fiduciary responsible for determining the purpose and means of processing your personal data is:

Data Fiduciary: Ankur Chandrakant & The Better Planet Society (TBPS)
Entity Type: Social Impact Non-Profit & Professional Cybersecurity Practice
Official Communications: info@ankurchandrakant.com
Registered Base: Dehradun, Uttarakhand, India
CLAUSE 03Data Collection

Categories of Personal Data We Collect

Summary: We collect only what is strictly necessary: registration fields, quiz results, and technical diagnostics.

We do not collect unnecessary personal information. Depending on how you interact with our platform, we may collect the following categories of data:

1. Project Cyber Warriors Registration Data

When enlisting in Mission 1 Million Cyber Warriors, we collect: Full Legal Name, Email Address, Mobile Contact Number, Date of Birth, Current Profession, City / State of Residence, and Highest Educational Qualification.

2. Cyber Security Quiz & Certificate Data

When you participate in our Cyber Quiz, we collect: Name to print on the Certificate of Digital Awareness, chosen answer responses, percentage score, timestamp, and unique Certificate Hash ID.

3. Advisory & Keynote Inquiries

When corporations, universities, or media outlets submit booking or speaking requests, we collect: Organizer Name, Official Email, Organization/Institution, Contact Phone, Proposed Event Dates, and nature of the engagement.

4. Security & Telemetry Logs

To defend our infrastructure against cyber attacks and fulfill CERT-In statutory requirements, our web servers log: IP addresses (truncated/anonymized where feasible), browser user-agent, operating system, and request timestamps.

CLAUSE 04Lawful Purpose

Lawful Grounds & Purpose of Data Processing

Summary: Data is processed exclusively with your informed consent or to deliver training, issue certificates, and protect platform security.

Under Section 4 and Section 6 of the DPDP Act 2023, personal data is processed solely on the following lawful grounds:

  • Freely Given, Specific Consent: Provided when you check the consent agreement on the Cyber Warriors registration form or submit a quiz assessment.
  • Performance of Educational Service: Processing your name and score to generate and issue your cryptographically verified Certificate of Digital Awareness.
  • Training Communications: Transmitting notifications regarding upcoming masterclasses, free training sessions, cyber scam alerts, and educational materials.
  • Cyber Defense & Legal Compliance: Maintaining audit trails to prevent fraud, automated bot abuse, or cyber security breaches as mandated under Section 70B of the IT Act, 2000.
CLAUSE 05Core Charter

Absolute Zero Data Brokering & Commercial Sale Policy

Summary: We never sell, broker, monetize, or rent personal data to third-party advertisers or marketing agencies.
Strict Anti-Commercialization Guarantee:Under no circumstances will your personal information, phone number, or email address ever be sold, rented, monetized, leased, or traded to data brokers, advertising networks, or telemarketing firms.

Our mission is to combat cyber extortion and digital vulnerability, not profit off personal data. All information provided to Ankur Chandrakant and The Better Planet Society remains confidential and restricted to authorized mission operations.

CLAUSE 06Mission Protection

Specific Safeguards for Cyber Warriors Participants

Summary: Special protections for students and female participants enrolled in digital self-defense bootcamps.

Project Cyber Warriors is committed to training vulnerable users, with over 23,000+ women and 100,000+ students empowered to date. To ensure maximum safety:

  • Confidential Directory: Contact information of participants is never published, displayed publicly, or shared with other attendees.
  • Controlled WhatsApp / Broadcast Groups: When joining official training broadcast groups, settings are configured to admin-only transmission to prevent unauthorized scraping of numbers by fellow members.
  • Immediate Unsubscribe: Every broadcast message provides an immediate, hassle-free opt-out mechanism.
CLAUSE 07Cookies Policy

Cookies, Telemetry & Local Storage

Summary: We use minimal, privacy-respecting cookies for site functionality and do not run invasive cross-site tracking pixels.

Our website uses minimal, non-invasive cookies to optimize your browsing experience:

  • Strictly Essential Cookies: Required for site navigation, CDN caching, and security header verification.
  • Client LocalStorage: Used solely to temporarily store your Cyber Quiz answers and dark mode preferences locally on your browser. This information never leaves your device unless you submit the quiz.
  • No Third-Party Retargeting: We do not deploy Facebook Meta Pixels, ad-tech fingerprinting, or cross-site tracking scripts.

You can configure your browser to reject cookies or clear local storage at any time through your browser settings without losing access to core public content on this site.

CLAUSE 08Data Processors

Authorized Third-Party Processors & Infrastructure

Summary: We only partner with trusted enterprise cloud infrastructure providers bound by rigorous data confidentiality agreements.

To deliver a modern, resilient, and fast web experience, we engage reputable infrastructure providers under strict Data Processing Addendums (DPAs):

  • Cloud Hosting & CDN: Vercel / Cloudflare for global content delivery, DDoS mitigation, and edge caching.
  • Transactional Email Infrastructure: Resend / SendGrid / AWS SES for sending confirmation emails and digital certificates.
  • Embedded Media: YouTube / Vimeo for streaming TEDx keynotes and press video clips. Interacting with embedded videos is governed by Google's privacy policies.
CLAUSE 09Forensic Hardening

Technical Security & Encryption Standards

Summary: All communications are encrypted via modern TLS 1.3 with rigorous access controls and forensic audit logs.

Because our work focuses on digital forensics and ethical hacking, we implement enterprise-grade security controls:

TLS 1.3 In Transit

All data transmitted between your browser and our servers is encrypted using modern TLS 1.3 cryptographic suites with HSTS enforced.

Role-Based Access (RBAC)

Participant data is accessible only to vetted core coordinators with multi-factor authentication (MFA) and hardware keys.

Encrypted Storage

All stored participant databases are encrypted at rest using AES-256 standard encryption algorithms.

Forensic Audit Trails

Every data access request is logged and monitored for anomaly detection and unauthorized access attempts.

CLAUSE 10Retention Timeline

Data Retention & Cryptographic Disposal

Summary: Data is retained only as long as necessary to serve its training purpose, then safely purged.

We retain personal data strictly for the duration necessary to fulfill the educational purposes for which it was collected:

  • Cyber Warriors Records: Maintained for the duration of the 1 Million Cyber Warriors training cohort (maximum 24 months), after which records of non-active participants are permanently purged.
  • Certificate Verification Records: Retained indefinitely in hash format to enable employers, colleges, and participants to authenticate verified certificates.
  • Security Server Logs: Retained for 180 days in compliance with CERT-In cybersecurity directives, after which logs are automatically overwritten.
CLAUSE 11Data Principal Rights

Your Statutory Rights under the DPDP Act 2023

Summary: You have full legal rights to access, correct, erase your data, or withdraw consent at any time.

As a Data Principal under the Digital Personal Data Protection Act, 2023, you enjoy statutory rights:

1. Right to Access & Summary:You may request a copy of the personal data we hold about you and the processing activities undertaken.
2. Right to Correction & Updating:You may request the correction of inaccurate or incomplete personal details in our records.
3. Right to Erasure / "Right to be Forgotten":You have the right to request the complete deletion of your registration and contact records from our active databases.
4. Right to Withdraw Consent:You may withdraw previously given consent at any time. Withdrawal does not affect the legality of processing carried out prior to withdrawal.
5. Right to Nominate:You may nominate another individual who, in the event of your death or incapacity, may exercise your data rights.

To exercise any of these rights, simply email our compliance team at info@ankurchandrakant.com with the subject line "DPDP Data Principal Request". All verified requests are processed within statutory timeframes.

CLAUSE 12Child Safety

Special Protections for Minors & Children

Summary: Strict compliance with Section 9 of the DPDP Act: no tracking, behavioral profiling, or harmful targeting of children.

In accordance with Section 9 of the DPDP Act 2023:

  • We do not undertake tracking, behavioral monitoring, or targeted advertising directed at individuals below the age of 18.
  • When conducting school workshops and student cybersecurity sessions, participation is arranged through authorized educational institutions and with parental/institutional consent.
  • If a parent or guardian discovers that a child has submitted personal details without appropriate consent, they may contact us for immediate deletion of that data.
CLAUSE 13CERT-In Protocol

Incident Response & Breach Notification Protocol

Summary: Prompt incident response and mandatory statutory notification within 6 hours to CERT-In and the Data Protection Board.

In the unlikely event of any security anomaly or data breach affecting personal data, we adhere to statutory response protocols:

  • Immediate containment, forensic isolation, and root-cause analysis by our digital forensics team.
  • Mandatory notification to the Data Protection Board of India and the Indian Computer Emergency Response Team (CERT-In) within mandatory reporting windows.
  • Direct notification to affected Data Principals outlining remedial steps and preventive advice.
CLAUSE 14Official Redressal

Data Protection & Grievance Redressal Desk

Summary: Dedicated Grievance Officer details for filing questions, inquiries, or statutory notices.

In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines) Rules, 2021 and Section 13 of the DPDP Act 2023, our designated Grievance Officer is:

Grievance & Data Protection Secretariat
Office of Ankur Chandrakant & The Better Planet Society
Email: info@ankurchandrakant.com
Response Time: Within 48 hours for acknowledged queries
Location: Dehradun, Uttarakhand, India

Questions or Clarifications?

Our legal advisory team is available to assist you with compliance inquiries, institutional agreements, or privacy rights.

Contact Legal Desk