Privacy Policy

We use the information we collect to:

• Deliver, operate, and improve our training, consulting, and assessment services.
• Provision lab access, verify enrolment, and issue certifications or attendance records.
• Process payments and maintain accounting records as required by law.
• Communicate scheduling, support, or service-related information.
• Detect, prevent, and respond to fraud, abuse, or security incidents.

We use a small number of essential cookies to keep the website functional (theme preference, session continuity). We may also use privacy-respecting analytics to understand aggregate usage patterns and improve content; analytics data does not include personally identifying details.

You can disable non-essential cookies via your browser settings. Disabling essential cookies may affect site functionality.

For learners, we maintain records of enrolment, attendance, assessment scores, lab activity, and certification status. This information is used to verify completion, issue credentials, and support continuing education or employer-reimbursement requests.

Trainer comments and progress notes are confidential to the learner and authorised Armour Infosec staff.

We apply ISO 9001:2015 aligned operational controls and industry-standard technical safeguards including TLS 1.2+ in transit, encrypted storage at rest, role-based access control, principle of least privilege for staff access, and regular security review of our infrastructure.

No system can guarantee absolute security. If you suspect a vulnerability or breach, please contact us immediately at info@armourinfosec.com.

We share personal data only with the following categories of recipients, and only as needed:

• Payment processors and accounting providers, to bill and reconcile fees.
• Email and communication providers, to deliver service-related messages.
• Cloud and hosting providers under contractual data-processing agreements.
• Legal, regulatory, or law-enforcement bodies where required by applicable law.

We do not sell, rent, or trade personal data to data brokers or advertisers.

We retain personal data only for as long as necessary to deliver the services and to comply with legal, tax, and regulatory obligations.

• Training and certification records: up to seven (7) years to support credential verification.
• Billing and accounting records: as required by applicable tax law (typically 7 years).
• Marketing data: until you unsubscribe or request deletion.
• Engagement deliverables: per the relevant Statement of Work, typically 24 months after delivery.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion where there is no overriding legal obligation to retain.
• Withdraw consent for any processing based on consent.
• Receive a portable copy of data you have provided to us.
• Lodge a complaint with the relevant data-protection authority.

To exercise these rights, email info@armourinfosec.com with sufficient information for us to verify your identity. We respond to verified requests within 30 days where feasible.

Where the EU General Data Protection Regulation, UK GDPR, or India’s Digital Personal Data Protection Act applies, our lawful bases for processing include contract performance, legitimate interest in delivering and securing our services, and consent where explicitly obtained.

For cross-border transfers, we rely on appropriate safeguards including standard contractual clauses and contractual data-processing agreements with our sub-processors.

For privacy questions, data-subject requests, or to report a concern, please contact us:

• Email: info@armourinfosec.com
• Address: 674, Sudama Dwar, Narendra Tiwari Marg, Sudama Nagar, Indore, Madhya Pradesh 452009
• Or use the contact form.