- Last Updated: 23 Nov, 2025
- Effective Date: 23 Dec, 2025
PMC Lounge (“we,” “our,” or “us”) operates the pmclounge.com website and associated social media channels (collectively, the “Service”). We are committed to protecting your privacy and handling your personal data responsibly in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), General Data Protection Regulation (GDPR), and other applicable data protection laws.
This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our Service. By using pmclounge.com, you consent to the data practices described in this policy.
1. Information We Collect
We collect personal information that you voluntarily provide to us when you use our Service. The categories of personal data we collect include:
Information You Provide Directly:
- Name and contact information (email address, phone number, postal address)
- Account credentials (if you create an account)
- Payment information (processed securely through third-party payment processors)
- Communication data (messages, inquiries, feedback submitted through contact forms)
- Professional information (job title, company, certification status when voluntarily shared)
- Content you submit (testimonials, PMP experience stories, comments)
Information Collected Automatically:
- Log data: IP address, browser type and version, device information, operating system
- Usage data: pages visited, time and date of visits, time spent on pages, clickstream data
- Cookies and tracking technologies (see Section 6 below)
- Referral source (how you arrived at our website)
Information from Third-Party Sources:
- Social media profile information (if you interact with us on social media platforms)
- Analytics and advertising partners
2. How We Use Your Information
We process your personal data for the following purposes:
To Provide and Improve Our Services:
- Deliver requested content, resources, and services (PMP Study Plan, newsletters, free tutorials)
- Process course enrollments and payments
- Respond to your inquiries and provide customer support
- Schedule and conduct Lounge Access consultations
- Improve website functionality, user experience, and content quality
Marketing and Communications:
- Send educational content, updates, and announcements about PMC Lounge services
- Deliver personalized recommendations based on your interests and behavior
- Send promotional offers for courses and training programs (with your consent)
Analytics and Performance:
- Analyze website usage patterns and user behavior
- Conduct A/B testing to improve website design and content
- Monitor website performance and security
Legal and Compliance:
- Comply with legal obligations and regulatory requirements
- Protect against fraud, security threats, and illegal activities
- Enforce our Terms and Conditions
We will only process your personal data where we have a lawful basis, including consent, contractual necessity, legal obligation, or legitimate interest.
3. How We Share Your Information
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information in the following circumstances:
Service Providers and Processors:
We engage trusted third-party companies to perform functions on our behalf, including:
- Email marketing platforms (e.g., Mailchimp, ConvertKit)
- Payment processors (e.g., Stripe, PayPal, Razorpay)
- Analytics services (e.g., Google Analytics)
- Hosting and infrastructure providers
- Customer relationship management (CRM) systems
These service providers have access to your personal information only to perform specific tasks on our behalf and are obligated to protect your data and not use it for other purposes.
Legal Requirements:
We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to:
- Comply with legal processes
- Protect the rights, property, or safety of PMC Lounge, our users, or the public
- Investigate fraud or security issues
Business Transfers:
In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity.
With Your Consent:
We may share your information with third parties when you have provided explicit consent to do so.
4. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.
Specific Retention Periods:
- Email addresses and marketing communications: Until you unsubscribe or request deletion
- Account information: For the duration of your account plus 2 years for legal compliance
- Payment records: 7 years for tax and accounting purposes
- Website usage logs: 12-24 months
- Security and breach detection data: At least 1 year as required by DPDP Rules
After the retention period expires, we will securely delete or anonymize your personal data.
5. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and deliver personalized content.
Types of Cookies We Use:
Strictly Necessary Cookies: Essential for website functionality (e.g., session management, security). These cannot be disabled.
Functional Cookies: Remember your preferences and settings to enhance user experience.
Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics) to improve content and performance.
Marketing/Advertising Cookies: Track your browsing activity to deliver targeted advertisements and measure campaign effectiveness.
Managing Cookies:
You can control and manage cookies through your browser settings. You can choose to accept or refuse cookies, and most browsers automatically accept cookies unless you change your settings. Note that disabling certain cookies may affect website functionality.
For more information about how we use cookies, please refer to our separate Cookie Policy.
6. Third-Party Links and Services
Our Service may contain links to third-party websites, including affiliate links, social media platforms, and external resources. We are not responsible for the privacy practices or content of these third-party sites.
When you click on third-party links, you will be directed to their websites, which are governed by their own privacy policies. We strongly advise you to review the privacy policies of any third-party sites you visit.
Social Media Integration:
If you interact with us through social media platforms (Facebook, LinkedIn, YouTube, Twitter), those platforms may collect information about your activity according to their own privacy policies.
7. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal data:
Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete personal data.
Right to Erasure (Right to be Forgotten): Request deletion of your personal data under certain circumstances.
Right to Restrict Processing: Request that we limit how we use your personal data.
Right to Data Portability: Request transfer of your data to another service provider in a structured, machine-readable format.
Right to Object: Object to processing of your personal data based on legitimate interests.
Right to Withdraw Consent: Withdraw your consent for data processing at any time (e.g., unsubscribe from marketing emails).
Right to Nominate: Under India’s DPDP Act, you may nominate another individual to exercise your rights in the event of your death or incapacity.
Right to Grievance Redressal: Under DPDP Act, you have the right to file a complaint with our Data Protection Officer or the Data Protection Board of India.
To Exercise Your Rights:
Contact us at admin@pmclounge.com with your request. We will respond within the timeframe required by applicable law (typically within 30 days for GDPR, 7 days for DPDP Act acknowledgment).
For EU Residents: You have the right to lodge a complaint with your local data protection authority.
For California Residents: You have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete, and the right to opt-out of the sale of personal information (we do not sell personal information).
8. Email Marketing and Communications
We collect email addresses through forms on our website (e.g., PMP Study Plan requests, newsletter subscriptions, consultation bookings, contact inquiries).
How We Use Your Email:
- Send requested materials (PMP Study Plan, free resources)
- Deliver newsletters with educational content and industry insights
- Provide updates about PMC Lounge services, courses, and events
- Send promotional offers (with your consent)
Your Rights:
- You may unsubscribe from marketing emails at any time using the unsubscribe link in our emails
- We do not sell, rent, or share your email address with third parties for their marketing purposes
- You can update your email preferences by contacting us at admin@pmclounge.com
9. Children’s Privacy
Our Services are not intended for individuals under the age of 13 (or 18 under India’s DPDP Act). We do not knowingly collect personal information from children.
If we discover that a child has provided us with personal information, we will immediately delete it from our servers. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can take necessary action.
Under India’s DPDP Act, for users between 13-18 years, we will obtain verifiable parental consent before processing personal data.
10. Data Security
We implement commercially reasonable technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.
Security Measures Include:
- Encryption of data in transit (SSL/TLS)
- Secure storage with access controls
- Regular security audits and vulnerability assessments
- Access logs monitoring and review
- Data backup systems to ensure continuity
- Contractual obligations with service providers to safeguard data
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
In the event of a data breach that poses risk to your rights and freedoms, we will notify you and the relevant authorities as required by law (within 72 hours for DPDP Act compliance).
11. International Data Transfers
PMC Lounge is based in India. If you access our Service from outside India, your information may be transferred to, stored, and processed in India or other countries.
For EU residents, we ensure adequate safeguards are in place for international data transfers, including Standard Contractual Clauses (SCCs) approved by the European Commission.
Under India’s DPDP Act, we will not transfer personal data to countries specified in the government’s negative list without appropriate safeguards.
12. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors.
When we make changes:
- We will post the updated Privacy Policy on this page with a new “Last Updated” date
- For material changes, we will notify you via email or prominent notice on our website
- Changes are effective immediately upon posting
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.
13. Contact Us and Data Protection Officer
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: admin@pmclounge.com
Data Protection Officer (DPO): [Insert Name if designated, as required for Significant Data Fiduciaries under DPDP Act]
For GDPR-related inquiries (EU residents): admin@pmclounge.com
For DPDP Act grievances (India residents): admin@pmclounge.com
We will respond to your inquiries within the timeframes required by applicable law.
14. Legal Basis for Processing (GDPR)
For EU residents, our legal bases for processing personal data include:
- Consent: You have given explicit consent for specific processing activities
- Contract: Processing is necessary to fulfill our contractual obligations to you
- Legal Obligation: Processing is required to comply with legal requirements
- Legitimate Interest: Processing is necessary for our legitimate business interests, provided your rights do not override these interests
15. Automated Decision-Making
We may use automated tools and analytics to personalize content recommendations and improve user experience. These automated processes do not result in legal or similarly significant decisions about you.
If we implement AI or automated decision-making that significantly affects you, we will provide notice and an opportunity to contest such decisions as required by law.
Consent
By using pmclounge.com, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with this Privacy Policy, please discontinue use of our Service immediately.