Privacy Policy

Effective date: 17 September 2026

1. Who we are

This website is operated by Earth5R Environmental Services Private Limited ("Earth5R", "we", "us"), Raheja Vihar, Mumbai 400072, Maharashtra, India. For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), Earth5R is the Data Fiduciary for personal data collected through this website.

This policy covers earth5r.org, including our courses, shop, forms and newsletter. The Earth5R mobile app has its own Terms of Service and User Data Deletion Policy.

2. What we collect

Information you give us

When you register for a course or create an account, we collect your name, username, email address and password (stored in encrypted form), along with any profile details you choose to add. Course progress, quiz attempts, certificates and enrolment records are linked to your account.

When you buy from our shop or pay for a course, we collect billing details such as your name, address, phone number and order history. Payments are processed by our payment partners, including Razorpay. We do not see or store your full card or bank details.

When you contact us, apply for an internship or volunteering programme, enquire about CSR or ESG services, or subscribe to our newsletter, we collect the details you enter, such as your name, email, phone number, organisation, role, city, and any CV, message or attachment you send.

Information collected automatically

When you visit the site, our systems record technical information such as your IP address, browser and device type, pages visited, referring website and the date and time of your visit. We use this for security, to prevent spam and fraud, and to understand how the site is used.

3. Why we use your data

We use personal data only for clear purposes connected to our work:

• to create and manage your account and give you access to courses, certificates and programmes;
• to process orders and payments and send related confirmations;
• to respond to enquiries, applications and partnership requests;
• to send newsletters and programme updates you have signed up for;
• to keep the website secure, block spam and fake registrations, and prevent misuse;
• to understand and improve how the website performs;
• to meet legal, tax and accounting obligations.

We process your data on the basis of your consent, which you give when you submit a form, register, subscribe or accept cookies, and, where the law allows, for legitimate uses such as completing a transaction you requested, meeting legal obligations and protecting the security of our systems. You can withdraw consent at any time (see section 9). Withdrawal does not affect processing already carried out.

4. Cookies and similar technologies

We use cookies to keep you logged in, remember items in your cart, keep the site fast and secure, and measure visits. You can block or delete cookies in your browser settings. Blocking essential cookies may stop login, checkout or courses from working.

5. Who we share data with

We do not sell your personal data. We share it only with service providers who help us run the website and our programmes, and only as needed for that purpose. These include our web hosting provider, payment processors such as Razorpay, email and newsletter services, Google (Analytics, reCAPTCHA, YouTube and Workspace), and website security services. These providers are required to protect your data and use it only on our instructions.

If you take part in a volunteering, internship or CSR programme run with a partner organisation, we may share the details needed to run that programme, such as your name, participation record or certificate, with that partner. We tell you about this when you sign up.

We may also disclose data where required by law, court order or a government authority, or to protect the rights, safety and security of Earth5R, our users or the public.

6. Where your data is stored

Some of our service providers store data on servers outside India. Where data is transferred abroad, we use providers that apply appropriate safeguards, and transfers follow the DPDP Act and any restrictions notified by the Government of India.

7. How long we keep it

We keep personal data only as long as we need it for the purpose it was collected, or as required by law. Account and course records are kept while your account is active and deleted or anonymised once you ask us to close it. Order and payment records are kept for the period required under Indian tax and accounting law. Enquiries and applications are kept for up to two years unless an ongoing relationship makes a longer period necessary. Newsletter data is kept until you unsubscribe. Security logs are kept for a short period and then deleted automatically.

8. How we protect it

We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS), encrypted password storage, restricted admin access, two-factor authentication for administrators, spam and bot protection on forms, and regular software updates. No system connected to the internet is completely secure. If a personal data breach occurs, we will notify affected users and the Data Protection Board of India as the DPDP Act requires.

9. Your rights

Under the DPDP Act you have the right to:

• know what personal data we hold about you and how it is used;
• have inaccurate or incomplete data corrected and kept up to date;
• have your data erased when it is no longer needed, unless we must keep it by law;
• withdraw your consent at any time;
• nominate another person to exercise your rights in the event of your death or incapacity;
• raise a grievance with us, and if unresolved, complain to the Data Protection Board of India.

If you are in the European Union, the United Kingdom or another region with similar laws, you may also have the right to object to or restrict processing and to receive your data in a portable format.

To exercise any right, email community@earth5r.org from the address linked to your account. We may ask you to verify your identity. You can unsubscribe from newsletters at any time using the link in every email, and you can update most account details from your dashboard.

10. Children

Our website and courses are intended for adults. If you are under 18, you may use our courses or programmes only with the verifiable consent of a parent or lawful guardian, for example through a school or institution that has obtained that consent. We do not track children's behaviour or show them targeted advertising. If you believe a child has given us personal data without such consent, contact us and we will delete it.

11. Links to other websites

Our pages link to external websites and sources. Those websites have their own privacy practices, and we are not responsible for their content or how they handle your data.

12. Grievance Officer

13. Changes to this policy

We may update this policy when our services or the law change. The effective date at the top shows when it was last revised. For significant changes, we will place a notice on the website or email registered users.