Privacy & Cookie Policy

About this policy

BlueSky Learning Pvt. Ltd. ("BlueSky Learning", "we", "us" or "our") respects your privacy. This Privacy & Cookie Policy explains how we collect, use, share and protect personal information when you visit blueskylearning.in, contact us, or take part in our learning programmes, games and platforms, including Kairos and Koach.AI (together, the "Services").

This policy is published in line with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act"). Where the EU or UK General Data Protection Regulation ("GDPR") applies to you, this policy also explains your rights under it.

By using our website or Services, you acknowledge that you have read this policy. If you do not agree with it, please do not use our website or Services.

Who we are

BlueSky Learning Pvt. Ltd. is an experiential, game-based learning company incorporated in India. For personal information collected through this website, we are the "Data Fiduciary" under the DPDP Act and the "data controller" under the GDPR.

Registered office: House No. I-28, Ground Floor, Ivory Emerald Hills, off Golf Course Extension Road, Sector 65, Gurugram, Haryana 122018, India.

Information we collect

Information you give us

• Contact and enquiry details, such as your name, work email, organisation, phone number and message, when you fill in a form, email or call us.
• Business details shared while we plan, deliver or invoice a programme, such as your role, team and billing contact.
• Feedback, survey responses and testimonials you choose to share.

Information from programmes and platforms

When your organisation engages us, we may receive participant names, work email addresses and roles, along with activity, responses and assessment results generated during workshops, games, simulations and coaching on Kairos or Koach.AI. We process this information to deliver the programme and report on learning outcomes, in line with our agreement with your organisation.

Information collected automatically

When you browse our website we collect technical and usage data, such as pages visited, links and buttons clicked, time on page, referring website, campaign tags, approximate location derived from your IP address, browser and device type. We collect this through cookies and similar technologies, described in the Cookies section below.

Information from third parties

Our website platform uses third-party business data services to recognise the organisations, and in some cases the business contacts, that visit our website. This can include company name, industry, size, and a professional name, job title and business contact details. We use this only for business-to-business marketing and sales follow-up. It is never applied to visitors who decline cookies.

We do not knowingly collect sensitive personal data such as passwords, financial account details, health or biometric information through this website.

How we use your information

We use personal information to:

• Respond to enquiries and proposal requests.
• Plan, deliver, personalise and evaluate our programmes and platforms.
• Send service communications, invoices and important notices.
• Send news, insights and event invitations about our work, where you have agreed or where the law allows. You can opt out at any time.
• Understand how our website is used, measure our marketing and improve our content.
• Keep our website and Services secure and prevent misuse.
• Meet legal, tax, accounting and regulatory obligations.

Our legal basis

Under the DPDP Act, we process personal data based on your consent, or for legitimate uses permitted by law, such as information you provide voluntarily for a specified purpose, or compliance with legal obligations. Under the GDPR, we rely on performance of a contract, our legitimate interests in running and promoting our business, compliance with legal obligations, and your consent where required.

Cookies and similar technologies

Cookies are small text files stored on your device when you visit a website. We also use local storage, which works in a similar way. We use them to keep the website working, to understand how it is used, and to measure our advertising.

Your choices

When you first visit our website, a banner lets you accept or decline analytics and advertising cookies. These cookies are active unless you decline them. If you decline:

• Google Analytics and Google Ads tags will not be loaded.
• Our website analytics stops storing a visitor ID on your device and counts your visit anonymously, with an ID that resets every day.
• We will not try to identify you or your organisation.

You can change your choice at any time using Cookie settings in the website footer. You can also block or delete cookies in your browser settings, though some parts of the website may not work as intended.

Cookies we use

Google may set additional cookies. See how Google uses cookies for details. Embedded content, such as YouTube videos, may also set cookies under the provider's own policy.

How we share information

We do not sell your personal information. We share it only with:

• Service providers who help us run our business, such as website hosting and analytics, email, cloud storage, and learning platform partners. They may use the information only to provide services to us.
• Advertising and analytics partners, such as Google, as described in the Cookies section, unless you decline cookies.
• Your organisation, where you take part in a programme it has commissioned, for reporting on participation and learning outcomes.
• Professional advisers, auditors, courts, regulators or law enforcement, where required by law or to protect our rights.
• A buyer or successor, if our business is merged, acquired or restructured, subject to this policy.

International transfers

We are based in India, and some of our service providers store or process information in other countries. When personal information is transferred outside India, we do so as permitted under the DPDP Act. Where the GDPR applies, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

How long we keep information

We keep personal information only for as long as needed for the purposes described in this policy, including to meet legal, tax and accounting requirements. Enquiry records are generally kept for as long as there is an active business relationship and for a reasonable period afterwards. Programme data is kept in line with our agreement with the client organisation. When information is no longer needed, we delete or anonymise it.

How we protect information

We use reasonable technical and organisational security practices to protect personal information from loss, misuse and unauthorised access, including encrypted connections (HTTPS), access controls and limiting access to people who need it. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security. If a personal data breach occurs, we will notify affected people and authorities as required by law.

Your rights

Depending on where you live, you have the right to:

• Access a summary of the personal information we hold about you and how it is used.
• Correct, complete or update inaccurate information.
• Ask us to erase your information when it is no longer needed.
• Withdraw consent at any time, including for marketing and cookies.
• Nominate another person to exercise your rights in case of death or incapacity (DPDP Act).
• Object to or restrict certain processing, and receive your data in a portable format (GDPR).
• Raise a grievance with us, and then with the Data Protection Board of India or your local data protection authority.

To exercise any of these rights, email siddhant@blueskylearning.in. We may need to verify your identity, and we aim to respond within 30 days. Withdrawing consent does not affect processing that took place before you withdrew it.

Children's privacy

Our website and Services are designed for organisations and working professionals. They are not directed at children under 18, and we do not knowingly collect their personal information. If you believe a child has given us personal information, please contact us and we will delete it.

Links to other websites

Our website links to other websites and social media platforms, such as LinkedIn, Instagram, Facebook and YouTube. We are not responsible for their privacy practices, so please read their policies before sharing information with them.

Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated. If we make significant changes, we will take reasonable steps to let you know.

Contact and grievance officer

For questions, requests or complaints about this policy or how we handle your personal information, please contact our Grievance Officer:

We will acknowledge your grievance promptly and aim to resolve it within 30 days.