Privacy Policy

1. Scope

INNOCOX Consulting and Research Private Limited acts as the Data Fiduciary for personal data it determines the purpose and means of processing. This Privacy Policy applies to information handled through our website, INNOCOX Android application, assessment portal, assessor applications, candidate assessments, contact forms and related services. Where a client, awarding body or government authority determines the processing purpose, INNOCOX may act on its documented instructions. A specific project may provide an additional privacy notice where required.

2. Information we may collect

• Contact and identity information, such as name, address, phone number, email address, date of birth and government-issued identification where required.
• Candidate and assessor information, including registration details, qualifications, experience, job role, attendance, assessment responses, scores and certification records.
• Assessment evidence, which may include photographs, video, signatures, documents, practical-work evidence and monitoring records where authorised by the relevant programme.
• Website, app and technical information, such as IP address, browser type, device model, operating-system version, app version, device identifiers, diagnostic logs, pages or screens visited and cookies.
• Android app permissions and assessment evidence, such as camera, photographs, video, media files, microphone or location, only where the feature is enabled, relevant to an assessment and permitted through your device settings.
• Communications submitted through forms, email, telephone or support channels.

3. How we use information

We use information to register candidates and assessors; verify identity and eligibility; schedule, conduct, monitor and report assessments; maintain records; communicate about services; respond to enquiries; prevent fraud and malpractice; improve our processes; meet contractual obligations; and comply with legal, government, awarding-body and regulatory requirements.

4. Lawful handling and consent

We process personal data only for lawful purposes connected with a requested service, contract, legal or programme requirement, permitted use or valid consent. Where consent is required, we aim to provide clear notice describing the data and purpose before collection. Consent may be withdrawn through the contact details below; withdrawal will not affect processing already lawfully completed and may limit services that require the information.

5. Sharing and disclosure

Information may be shared, only as reasonably necessary, with clients, training partners, awarding bodies, government authorities, assessors, auditors, technology providers and other service providers supporting assessment delivery. We may also disclose information where required by law, legal process or to protect rights, safety and service integrity. INNOCOX does not sell personal information.

6. Data retention

Information is retained only for as long as necessary for assessment, certification, operational, contractual, audit, dispute-resolution and legal purposes. Retention periods may vary by programme, client, awarding body and applicable law. Information is securely deleted or anonymised when it is no longer required, where reasonably practicable.

7. Data security

We use reasonable administrative, technical and organisational safeguards to protect information against unauthorised access, alteration, disclosure or loss. Measures may include role-based access, confidentiality controls, secure transmission, logging, backups, vendor oversight and periodic review. If a personal-data breach occurs, we will investigate, contain and document it and provide notifications to affected individuals or authorities when applicable law requires. No online system is completely secure, so absolute security cannot be guaranteed.

8. Cookies and website analytics

Our website may use essential cookies and similar technologies to support functionality, remember preferences, measure usage and improve performance. Browser settings can be used to block or delete cookies, although some features may then work differently.

9. Your choices and rights

Subject to applicable law and programme obligations, you may request a summary of your personal data and processing activities, correction or updating of inaccurate data, erasure where retention is not required, withdrawal of consent, and grievance redressal. Where applicable, you may nominate another individual to exercise rights in the event of death or incapacity. We may verify identity and may decline or limit a request where law, assessment integrity, audit, certification or contractual obligations require retention.

10. Your responsibilities

When providing personal data, you should supply authentic information, avoid impersonation, respect other individuals' privacy and not submit false or frivolous requests. Candidates and assessors must keep login credentials confidential and promptly report suspected misuse.

11. Grievance redressal

Privacy complaints may be sent to info@innocox.org with the subject “Privacy Grievance”. Please include your name, relationship with INNOCOX, relevant project or assessment details and a clear description of the concern. We will acknowledge and address grievances within the period required by applicable law.

12. Children and candidate data

Where a programme includes minors, information will be handled in accordance with applicable law and the requirements of the relevant client, awarding body or government scheme. Consent from a parent or lawful guardian will be obtained where required.

13. Android app and assessment portal

This policy also applies when you use the INNOCOX Android application or the INNOCOX Assessment Portal. Depending on your role and the assessment workflow, the app may request access to the camera, media or file storage, microphone, notifications or device location. Permissions are requested only when needed for a relevant feature and may be managed through Android settings. Disabling a required permission may prevent the related assessment feature from working.

App and portal data may be used for identity verification, attendance, geotagged or time-stamped assessment evidence, practical-assessment recording, monitoring, fraud prevention, technical support and audit requirements. INNOCOX does not use app permissions to access unrelated personal content. Users may request account or app-data deletion by emailing info@innocox.org with the subject “Android App Data Deletion”. Some records may be retained where required for certification, audit, contract, dispute resolution, programme rules or applicable law.

14. Third-party links

Links to external websites or portals are governed by their own privacy policies. INNOCOX is not responsible for the privacy practices of third parties.

15. Policy updates

We may update this policy when our services, technology or legal obligations change. Updates will be posted on this page with a revised date.

16. Privacy enquiries

For questions, rights requests or grievances regarding personal data, email info@innocox.org with an appropriate subject line, call 011-42147338, or write to the Privacy Contact, INNOCOX Consulting and Research Private Limited, Second Floor, A-41, Krishna Park, Devli Road, Khanpur, New Delhi 110080. This policy is designed to align with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as their provisions become applicable, together with other applicable Indian law.