Explore Courses

Legal

Privacy Policy

Last updated: 20 September 2026

This Privacy Policy explains how S.R. Caterers & Event Management Pvt. Ltd. ("S.R. Caterers", "we", "us" or "our") collects and uses your personal data when you use this website, submit an enquiry, register for a webinar, or enrol in our Hotel Management Academy. We follow the principles of India's Digital Personal Data Protection Act, 2023 (DPDP Act): we collect only what we need, use it only for the purposes described here, and keep it no longer than necessary.

If anything here is unclear, please contact us — details are at the end of this policy.

Who we are

S.R. Caterers & Event Management Pvt. Ltd. is a catering, hospitality and event-management company based in Nashik, Maharashtra, India, which also runs an online Hotel Management Academy. For the purposes of the DPDP Act, we are the Data Fiduciary responsible for the personal data described below.

Registered office: Shop No 12, D Wing, Shrijay Nagar, Vadala Pathardi Road, Indira Nagar, Nashik 422009.

What personal data we collect and why

We only collect data that you choose to give us, or that is technically necessary to run the website securely.

Event enquiries (Contact page)

When you send an event enquiry, we collect your name and phone number (required), and optionally your email address, event type, event date, approximate guest count and message. We use this only to understand and respond to your enquiry. We also record the submission's IP address and time to help prevent spam and misuse of the form.

Webinar registration

When you register for a live webinar, we collect your name, phone number and email address, together with your consent to be contacted about that webinar. We use these details to send you the joining link, reminders and related updates for the session. We also record the IP address and time of registration to help prevent misuse.

Academy accounts (registration & sign-in)

To create a student account you provide your name, email address and a password, and optionally a phone number. Passwords are never stored in readable form — they are stored only as a secure one-way hash. We use your account data to give you access to your courses, track your learning progress, and communicate with you about your account.

Course enrolment, learning activity and payments

When you enrol in a course we record your enrolment and your lesson progress. If you purchase a paid course, your payment is processed by our payment gateway (see "Third-party services" below); we store a record of the transaction (such as order and payment reference, amount, status and date) and generate an invoice containing your name and the billing details you provide. We do not store your full card, UPI or bank credentials on our servers.

Technical and security data

To keep the site working and secure, our server processes standard technical information such as your IP address and browser request details, and applies rate-limiting to forms and sign-in. We use one strictly necessary cookie (a session cookie named srca_session) to keep you signed in and to protect forms against cross-site request forgery. This cookie is essential for the site to function and is not used for advertising or analytics.

Cookies and tracking

This website does not use analytics, advertising pixels, or third-party tracking cookies, and it does not build advertising profiles of visitors. The only cookie we set is the essential session cookie described above. Because we do not run non-essential tracking, we do not show a tracking-consent banner.

Legal basis for processing

  • Your consent — for event enquiries and webinar registration, which you submit voluntarily.
  • Performance of the service you request — for creating and running your Academy account, enrolments and course access.
  • Legal obligation — for retaining transaction and invoice records where tax and accounting law requires it.
  • Legitimate use for security — for spam prevention, rate-limiting and keeping the platform secure.

How we use your data

  • To respond to your enquiries and requests.
  • To send you webinar joining details and reminders you signed up for.
  • To provide, personalise and support your Academy account and course access.
  • To process payments and issue invoices for paid courses.
  • To keep the website and accounts secure and prevent abuse.
  • To meet our legal and record-keeping obligations.

We do not sell your personal data, and we do not use it for automated decision-making or profiling.

Who we share your data with

We share personal data only with service providers who help us run the website and the Academy, and only to the extent needed for that purpose. These currently include:

  • Our web hosting provider, which stores the website and its database on our behalf.
  • Our email provider, used to send account emails (such as password resets) and enquiry/webinar notifications.
  • Vimeo, which hosts and streams course videos inside the student learning area; when you play a lesson, your browser connects to Vimeo to load the video.
  • Our payment gateway (for example Razorpay or an HDFC-provided gateway), used only when you purchase a paid course, to process your payment securely.
  • Content delivery networks (Google Fonts and Cloudflare's cdnjs) and an image service (Unsplash) that deliver fonts, scripts and some images; when a page loads, your browser requests these files and the provider receives your IP address as part of that request.

Each of these providers processes data under its own terms. A link to Google Maps is offered on our Contact page; if you click it, Google's own privacy terms apply. We may also disclose data where required by law or to protect our rights.

Where your data is stored and how we protect it

Your data is stored in our website's database with our hosting provider. We use reasonable technical and organisational safeguards, including encrypted (HTTPS) connections, hashed passwords, prepared database queries, access controls that restrict administrative areas to authorised staff, and cross-site-request-forgery protection on forms. No method of transmission or storage is completely secure, but we work to protect your data against unauthorised access, loss or misuse.

How long we keep your data

We keep personal data only as long as it is needed for the purpose it was collected, and then delete or anonymise it:

  • Enquiries and webinar registrations — kept while we act on them and for a reasonable follow-up period, after which they can be deleted on request or during routine clean-up.
  • Academy accounts and learning records — kept while your account is active; course access itself is time-limited (see below).
  • Payment and invoice records — retained for as long as required under applicable Indian tax and accounting laws.

Course access is time-boxed: when you enrol in a course, your access remains active for a limited period (currently 3 months from enrolment) after which you can re-enrol. Enrolment and progress records may be retained beyond that period so your history is preserved if you return.

Your rights

Subject to the DPDP Act, you may:

  • Ask for access to the personal data we hold about you.
  • Ask us to correct or complete inaccurate or incomplete data.
  • Ask us to erase your personal data where it is no longer needed.
  • Withdraw a consent you previously gave (this does not affect processing already carried out).
  • Nominate another individual to exercise your rights in the event of death or incapacity.
  • Raise a grievance about how we handle your data.

To exercise any of these rights, or to withdraw consent, contact us at support@sr-consultants.in # grievance / data-rights contact. Because we currently handle these requests manually, please allow us reasonable time to verify your identity and respond. Account holders can also update their own profile details and change their password from within their account.

Children's data

Our services are intended for adults — prospective students, professionals and clients — and are not directed at children. We do not knowingly collect personal data from anyone under the age of 18 without verifiable parental or guardian consent. If you believe a child has provided us personal data, please contact us and we will delete it. Note for the business: the current sign-up and enquiry forms do not verify age; if you begin enrolling minors, additional parental-consent safeguards will be required under the DPDP Act.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. When we do, we will revise the "Last updated" date at the top of this page. Significant changes will be highlighted where appropriate.

Contact & grievances

For any questions about this policy or your personal data, or to raise a grievance, contact:

See also our Terms & Conditions.