Skip to content
Career Klub
Log in

Privacy

Privacy policy

Last updated 24 October 2026

This policy explains what personal data Career Klub collects, why we collect it, who processes it, how long we keep it, and the rights you have over it.

At a glance

  • We collect the details you give us (name, email address and phone number), what you use on Career Klub, and limited technical data.
  • We use them to run your account, deliver resources and purchases, send the emails you agreed to, and keep the service secure.
  • We never sell your data. Razorpay handles your card and bank details. We don't see them.
  • Analytics cookies and Meta Pixel run only if you accept them.
  • You can access, correct or delete your data, or withdraw consent, at any time by writing to contact@careerklub.com.
On this page
  1. Who we are
  2. What this policy covers
  3. Personal data we collect
  4. Why we use it
  5. Marketing emails
  6. Who we share it with
  7. Payments
  8. International transfers
  9. How long we keep it
  10. How we protect it
  11. Your rights
  12. If you're outside India
  13. Children
  14. Cookies
  15. Links to other sites
  16. Changes to this policy
  17. Grievance Officer and contact

Who we are

Career Klub (“Career Klub”, “we”, “us”) is a partnership firm based in Mumbai, India. We decide why and how your personal data is used, which makes us the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the controller under the EU and UK General Data Protection Regulation (“GDPR”).

Legal name
Career Klub, a partnership firm
Address
Flat No. 1006, Building 18 Daisy, Vasant Oasis, Makwana Road, JB Nagar, Marol, Andheri (E), Mumbai 400059, Maharashtra, India
Email
contact@careerklub.com
Phone
+91 95572 03492
GSTIN
Registration in progress

What this policy covers

This policy applies to careerklub.com, your Career Klub account, our emails, free resources, paid courses and programmes, live sessions, mentoring, community features and support. It is our notice under the DPDP Act and the Digital Personal Data Protection Rules, 2025, and our privacy policy under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

It does not cover other websites or services that we link to or embed. Their own privacy policies apply. On request, we will provide this notice in English or any language listed in the Eighth Schedule to the Constitution of India.

Personal data we collect

Account details

What it includes
Name, email address, phone number and password. We store passwords only as a salted, one-way hash and never see them. Phone numbers are checked for format only.
Where it comes from
You, when you sign up

Google sign-in

What it includes
Name, email address, profile photo and Google account ID.
Where it comes from
Google, only if you choose “Continue with Google”

Learning activity

What it includes
Resources you unlock, view or download, courses and sessions you join, and when.
Where it comes from
Your use of Career Klub

Purchases

What it includes
Products bought, price, currency, date, order and payment IDs, payment method type, payment status and refunds. If you ask for a GST invoice: billing name, address and GSTIN.
Where it comes from
You and Razorpay. We never receive your full card number, CVV, UPI PIN or net-banking password.

Communications

What it includes
Emails and messages you send us, support and grievance requests, feedback, and whether our emails were delivered, opened or clicked.
Where it comes from
You and our email platform

Consent records

What it includes
The notice you were shown and its version, the date, and the campaign link you arrived from (for example “linkedin”).
Where it comes from
Your use of Career Klub

Technical and security data

What it includes
A keyed, one-way hash of your IP address (we don't store raw IP addresses in our database), browser user-agent, bot-check results and cookie identifiers.
Where it comes from
Your device and browser

Cookies and advertising

What it includes
Only with your consent: a random visitor ID for analytics, and Meta Pixel data (pages visited, your browser details and Meta cookie IDs).
Where it comes from
Your device. See the cookie policy.

We don't ask for sensitive data such as health, biometric, caste, religion or financial account details. Passwords are treated as sensitive personal data under the 2011 IT Rules and are protected as described in How we protect it.

Why we use it

We use each type of data only for the purposes below. Under the DPDP Act we rely on your consent or on a legitimate use (data you provided voluntarily for that purpose, or processing required by law). For the GDPR basis, see If you're outside India.

Create and run your account, confirm your email and sign you in

Data used
Account details, Google sign-in, security data
Basis
Consent and data you provide for this purpose

Give you access to free resources and to the products you buy

Data used
Account details, learning activity, purchases
Basis
Data you provide for this purpose; our contract with you

Take payments, issue invoices, handle refunds and prevent payment fraud

Data used
Purchases, account details
Basis
Our contract with you; tax and accounting laws

Send service emails: sign-in codes, receipts, access details, policy changes

Data used
Account details, purchases
Basis
Needed to provide the service you asked for

Send marketing emails and regular updates about resources, programmes and events

Data used
Name, email address, interest tags
Basis
Consent, given when you create an account or subscribe. Withdraw it any time (see Marketing emails).

Answer questions, support requests and grievances

Data used
Communications, account details
Basis
Data you provide; Consumer Protection and DPDP obligations

Understand which resources help, using view and download counts

Data used
Learning activity; visitor ID only with consent
Basis
Consent for analytics cookies; otherwise aggregate counts only

Measure our ads on Facebook and Instagram

Data used
Meta Pixel data
Basis
Consent for marketing cookies

Protect Career Klub, our members and our content from bots, fraud and misuse

Data used
Security data, account details
Basis
Data you provide; legal obligations to keep systems secure

Meet legal obligations and respond to lawful requests

Data used
Any data needed for that obligation
Basis
Required by law

We do not sell your personal data, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

Marketing emails

When you create a Career Klub account, by email or with Google, we show you this notice:

By continuing, you agree to our Terms and Privacy Policy, and to receive emails about new resources, programmes and events. Unsubscribe anytime.

By continuing, you consent to receiving marketing emails and regular updates about new resources, career insights, programmes and events. If you subscribe to our newsletter separately, you opt in with a one-time code sent to your email address.

  • Unsubscribe any time using the link in any of our emails, or by writing to contact@careerklub.com. Withdrawing consent is as easy as giving it.
  • Unsubscribing doesn't close your account or remove your access to resources or purchases.
  • We'll still send service emails you need, such as sign-in codes, receipts and important changes to our terms.
  • We send these emails through SendFox, our email platform. Once your email is verified, SendFox stores your name, email address, phone number and tags describing the resources and topics you're interested in, and records whether our emails are opened or clicked.
  • We don't send marketing by SMS, WhatsApp or phone calls. We use your phone number only for account support, for example if you can't sign in.

We keep a record of the notice you saw, its version and the date, so we can show what you agreed to.

Who we share it with

We share personal data only with the service providers below, who process it for us under contract, and only as much as they need. Where a provider uses data for its own purposes, its own privacy policy applies.

Cloudflare

What they do and what they receive
Hosting, database, file storage, security and bot protection (Turnstile). Processes all data stored on Career Klub.
Where
Global network, including the United States

SendFox

What they do and what they receive
Our email platform. Name, email address, phone number, interest tags and email engagement. Sends sign-in codes and our emails.
Where
United States

Google

What they do and what they receive
“Continue with Google” sign-in, and our business email when you write to us.
Where
United States and global

Razorpay

What they do and what they receive
Payment processing for purchases. Name, email address, phone number, amount and the payment details you enter at checkout. Razorpay is regulated by the Reserve Bank of India and also handles payment data under its own privacy policy.
Where
India

Meta Platforms

What they do and what they receive
Only if you accept marketing cookies: Meta Pixel data, used to measure our ads. Meta also uses it under its own data policy.
Where
Ireland and the United States

Microsoft

What they do and what they receive
Only when you preview a Word, Excel or PowerPoint file: Microsoft's viewer fetches that file through a temporary link and sees your IP address.
Where
Global

Embedded content providers

What they do and what they receive
YouTube (in privacy-enhanced mode), Vimeo, Loom, Google Docs, Sheets, Slides and Drive, and Notion, only when you open a resource that embeds their content.
Where
Mostly the United States

Video meeting platforms

What they do and what they receive
For live sessions and mentoring: your name, email address and anything you share in the session.
Where
Depends on the platform

We may also share personal data:

  • with our chartered accountants, auditors and lawyers, who are bound by confidentiality;
  • with government authorities, regulators, courts or law enforcement when the law requires it, including tax authorities for GST and income tax;
  • to protect the rights, safety or property of Career Klub, our members or others, or to prevent fraud;
  • if Career Klub is reorganised, merged or acquired, with the new owner, who must protect it as this policy describes. We'll tell you first.

Payments

Payments on Career Klub are processed by Razorpay Software Private Limited. When you pay, you enter your card, UPI, net-banking or wallet details on Razorpay's secure checkout, not on our servers. Razorpay is PCI DSS compliant and handles card storage and tokenisation under Reserve Bank of India rules.

We receive only what we need to confirm and record your order: the order and payment IDs, amount, currency, payment status and method type (for example “card” or “UPI”), and, for cards, the network and last four digits. International payments may also be processed by card networks and banks outside India.

International transfers

Some of our providers process data outside India, including in the United States and the European Union. The DPDP Act allows this except to countries the Government of India restricts, and we will follow any such restriction. For people in the European Economic Area or the United Kingdom, we rely on our providers' transfer safeguards, such as the European Commission's Standard Contractual Clauses.

How long we keep it

Account and profile

How long
While your account is open. If you ask us to delete it, we delete it within 30 days, except the records below that the law requires us to keep.

Marketing contact details

How long
Until you unsubscribe or ask us to delete them. We keep your unsubscribe as a suppression record so we never email you by mistake.

Consent records

How long
While we process your data on that basis, and for up to 3 years afterwards, so we can show what you agreed to.

Orders, invoices, payments and refunds

How long
At least 8 years, as tax and accounting laws require.

Support and grievance emails

How long
Up to 3 years after the matter is closed.

Security logs

How long
At least one year, as the DPDP Rules require for detecting and investigating misuse, then deleted when no longer needed.

One-time codes

How long
10 minutes. Codes are stored only as one-way hashes.

Usage statistics

How long
Kept as counts or in pseudonymised form.

When we no longer need personal data, we delete it or anonymise it so it can no longer identify you.

How we protect it

We follow reasonable security practices under section 43A of the IT Act, 2000 and the DPDP Rules, including:

  • HTTPS on every page, with strict transport security;
  • passwords and one-time codes stored only as salted or keyed one-way hashes, and IP addresses stored only as keyed hashes;
  • API keys encrypted at rest, and resource files kept in private storage behind short-lived signed links;
  • admin access protected by Cloudflare Access, with each team member given only the access they need;
  • rate limits and bot checks on sign-up, sign-in and other forms;
  • providers bound by contracts to keep personal data secure and confidential.

No system is completely secure. If a personal data breach affects you, we will tell you and the Data Protection Board of India without delay, as the DPDP Act and Rules require, and report it to CERT-In where required.

Your rights

Under the DPDP Act, you have the right to:

  • Access a summary of the personal data we hold about you, how we use it, and who we have shared it with;
  • Correct, complete, update or erase your personal data;
  • Withdraw consent at any time, as easily as you gave it. Processing done before you withdraw stays lawful. If you withdraw consent that your account depends on, we may have to close the account.
  • Have your grievances resolved by our Grievance Officer;
  • Nominate another person to exercise these rights if you die or become unable to.

You can update your name and phone number, change your password or sign out of all devices from your account page. For anything else, write to contact@careerklub.com from the email address on your account, with the subject “Data request”. We may ask you to confirm your identity. We acknowledge requests within 48 hours and complete them within 30 days.

The DPDP Act also asks you to give accurate information and not to file false or frivolous complaints. If you're not satisfied with our response, you can complain to the Data Protection Board of India.

If you're outside India

If you're in the European Economic Area or the United Kingdom, the GDPR also applies. Our legal bases are: performing our contract with you (account, resources and purchases); your consent (marketing emails, analytics and marketing cookies); our legitimate interests (security, fraud prevention and understanding which resources help, balanced against your rights); and legal obligations (tax and accounting records).

You have the right to access, correct or erase your data, restrict or object to processing (including direct marketing at any time), receive your data in a portable format, withdraw consent, and complain to your local data protection authority. Contact us first and we'll do our best to help.

We apply the same protections to everyone, wherever you are.

Children

Career Klub is built for students and professionals, and we don't set a minimum age. Under the DPDP Act, anyone under 18 is a child. If you're under 18, you may use Career Klub only with the consent and supervision of your parent or lawful guardian, who agrees to this policy and our terms of use on your behalf. Purchases must be made by a parent or guardian.

We do not knowingly track, monitor the behaviour of, or target ads at children. If you're under 18, please choose “Essential only” in cookie settings. If you're a parent or guardian and believe your child gave us personal data without your consent, write to contact@careerklub.com and we'll delete it.

Cookies

We use essential cookies to keep you signed in and protect the site. Analytics cookies and Meta Pixel run only if you accept them in the cookie banner. You can change your choice at any time.

The cookie policy lists every cookie.

Changes to this policy

We may update this policy as Career Klub or the law changes. The date at the top shows the latest version. If we make a significant change, we'll tell you by email or on the site before it takes effect, and we'll ask for fresh consent where the law requires it.

Grievance Officer and contact

For questions about this policy, to exercise your rights, or to raise a complaint about how we handle your personal data, contact our Grievance Officer:

Grievance Officer
Ratik Katheriya
Designation
Founder
Email
contact@careerklub.com
Phone
+91 95572 03492
Address
Flat No. 1006, Building 18 Daisy, Vasant Oasis, Makwana Road, JB Nagar, Marol, Andheri (E), Mumbai 400059, Maharashtra, India
Response times
We acknowledge every complaint within 48 hours and resolve it within one month of receiving it.

If you're not satisfied with how we resolve your grievance, you may complain to the Data Protection Board of India under the DPDP Act.