Privacy Policy

Scope

This policy applies to all users who:

• Browse our Platform
• Register for our services (as a Subscribed User)
• Interact with our customer support
• Participate in our verification processes

User / You / Your: Any individual accessing or using the Platform.

We / Us / Our: Refers to GHA STEP.

Platform: Includes our website and mobile applications.

SPDI: Sensitive Personal Data or Information as defined by Indian laws (e.g., biometric data, financial details).

Personal User Information: Includes your name, email, contact, device info, academic details, etc.

Consent

By providing your information, you consent to:

• Collection and use of your data
• Sharing with third parties for verification, analytics, or legal purposes
• Storage and processing as per Indian data protection laws

You may withdraw consent anytime by writing to support@ghastep.com. However, this may affect your access to services.

Information We Collect

a. Personal Data

We collect personal information when you:

• Visit our offices
• Interact via email/post/phone
• Register on the Platform

This may include:

• Full Name, Email, Phone Number
• Address and location
• College/institution name and graduation year
• Uploaded documents/photos (e.g., ID proof)
• Device & network info, IP address
• Demographics, preferences, feedback
• Selfies or live video (for verification)

SPDI is collected only when required and with explicit consent.

b. Third-Party Sources

We may also collect your data from:

• Public sources
• Business partners
• Facebook (if used to register)

Data Storage & Account Security

• Username, specialty, and country are stored in plain form
• Passwords are hashed; emails are encrypted
• Users are responsible for keeping credentials safe

We are not liable for loss due to credential misuse or unauthorized access caused by negligence.

Use of Collected Information

Your data may be used for:

• Account creation and login
• Identity verification
• Content personalization
• Marketing and updates
• Analytics and fraud prevention
• Compliance with legal obligations

ID data submitted is encrypted, accessed only for verification, and not shared for any other purposes.

Cookies and Web Tracking

We use cookies to:

• Analyze usage and enhance user experience
• Measure marketing effectiveness

Cookies can be disabled in browser settings. Third-party cookies may also be used and are beyond our control.

Information Sharing and Disclosure

We may share data with:

• Payment gateways and service providers
• Regulatory authorities
• Analytics and marketing partners
• Business partners during mergers or acquisitions

We do not sell or rent personal information.

Data Retention

Data is retained as long as necessary for business or legal purposes. Once not needed, it is anonymized or securely destroyed.

You may request account deletion at support@ghastep.com.

Information Security

• Password-protected systems
• Encrypted storage for SPDI
• Role-based access control

We strive to protect data but cannot guarantee 100% security over the internet.

Cross-Border Data Transfer

When transferring data internationally, we ensure:

• Equivalent protection standards
• Contracts with third parties to enforce security

Your Choices & Opt-Out

• Opt-out of marketing emails
• Request deletion or correction of data
• Refuse to share optional personal data
• Disable cookies via your browser

Note: Some restrictions may apply if certain data is withheld.

Third-Party Links

We are not responsible for third-party websites or their privacy practices. Please review their policies independently.

Employee Data

This Policy does not apply to our employees. Internal policies govern employee data separately.

Policy Updates

This Policy may be updated from time to time. Please check this page regularly. Continued use after updates implies consent.