This Privacy Policy explains how CX IT Solution (“we”, “us” or “our”) may handle personal information when you visit our website, submit an enquiry or use services we provide. The exact information and practices depend on the services and configuration involved.
1. Scope of this policy
This policy applies to personal information collected through our public website and to the information we handle in connection with enquiries, business relationships and our services.
If an institute or other organization uses our education ERP/LMS software to manage its students, candidates, staff or examinations, that organization may have its own privacy notice and legal obligations. The customer contract and any applicable data processing terms determine our respective roles and responsibilities for those records.
2. Information we may collect
Information you provide
When you contact us, request a demonstration or enquire about our services, we may receive your name, organization, job role, email address, phone number, enquiry details and any other information you choose to submit.
Technical and usage information
Depending on our hosting and website configuration, technical logs may include IP address, browser and device information, requested pages, timestamps, referring pages and security-related events. These records may be used to operate, troubleshoot and protect the website.
Information handled through customer services
When providing contracted services, we may process information that a customer or authorized user uploads or enters. This may include account details, student or candidate records, staff information, attendance, course enrolment, assessment records and examination activity, depending on the modules and services used.
Please do not submit passwords, payment card security codes or other unnecessary sensitive information through a general website enquiry form.
3. How we may use information
Depending on the context and applicable law, information may be used to:
- Respond to enquiries and requests for demonstrations or proposals.
- Provide, configure, maintain and support contracted software or services.
- Manage customer relationships, service communications and billing records where applicable.
- Maintain website reliability, troubleshoot errors and investigate security incidents.
- Understand website usage and improve content or services where suitable analytics are enabled.
- Meet applicable legal obligations and establish, exercise or defend legal claims.
We do not describe every use as automatic or universal. Actual processing depends on the information collected, the relevant service and applicable legal requirements.
4. Student, candidate and staff information
An organization using an ERP/LMS may collect and manage personal information for its own educational, administrative or operational purposes. The organization is responsible for determining the lawful purpose of that collection, providing required notices, establishing appropriate permissions and deciding how long its records should be retained, subject to applicable law.
Where we process that information to provide contracted services, our processing should follow the applicable customer agreement and any data-processing terms. Access should be limited according to authorized roles and the system’s configuration.
Students, candidates, parents or staff who have questions about records managed by an institute should normally contact that institute first. We will direct requests appropriately where permitted and where we can identify the relevant customer relationship.
5. Sharing and service providers
We may share information where reasonably necessary with service providers supporting our operations, such as hosting, infrastructure, email, security, technical support or other providers actually used for a particular service.
Such providers should receive information only as appropriate for their role and subject to applicable contractual, security and legal requirements.
We may also disclose information where required by law, in response to valid legal process, to protect rights or safety, or in connection with a business transaction subject to appropriate safeguards.
We do not sell personal information to advertisers as a business practice described by this policy. If a particular service involves additional sharing or advertising technology, its details should be disclosed accurately before use.
6. Data security
We use or may use safeguards appropriate to the service and the risks involved. Depending on the deployment, these may include access controls, authentication, secure network connections, logging, backups, software maintenance and restricted administrative access.
Security controls vary by deployment and are not a guarantee that every incident can be prevented. Customers should also protect credentials, assign appropriate permissions, maintain supported devices and promptly report suspected account compromise or data exposure.
Please contact us promptly through the Contact page if you believe information handled by us has been exposed or accessed without authorization. Avoid including passwords or unnecessary personal records in the initial report.
7. Data retention and deletion
We retain information for as long as reasonably necessary for the purpose for which it was collected, to provide contracted services, to resolve disputes, maintain required business records and comply with applicable law.
Retention periods depend on the type of information, the service, customer instructions and legal requirements. Customer ERP/LMS data may be governed by a separate agreement that addresses retention, export, backup cycles and deletion after termination.
Deletion from active systems may not immediately remove information from protected backups or records that must be retained by law. Such information should remain protected and be handled according to applicable retention requirements.
8. Your choices and privacy rights
Depending on your location, the applicable law and the role of the organization processing your information, you may have rights to request access, correction, deletion, withdrawal of consent, grievance handling or other privacy-related remedies.
You may contact us about information submitted directly to our website. If your information is held in an institute’s ERP/LMS, please contact that institute first where it determines the purpose of processing. We will handle requests according to our role, applicable law and contractual obligations.
We may need to verify your identity and clarify your request before taking action. Some requests may be restricted where retention or processing is legally required or another lawful exception applies.
10. Hosting and international transfers
Depending on the selected deployment, information may be stored or processed by infrastructure or service providers in different locations. Applicable hosting arrangements and customer agreements should identify relevant requirements where necessary.
Where personal information is transferred across borders, the transfer must comply with applicable legal requirements and any relevant contractual safeguards.
11. Children’s information
Education systems may be used to manage information about students who are minors. The educational organization operating the system must ensure that collection and use are lawful and that any required notices, authorizations or safeguards are in place.
Our public website is intended for general business and service enquiries, not for children to submit unnecessary personal information. If you believe a child’s information has been submitted to us improperly, please contact us so we can review the matter.
12. Changes to this policy
We may update this policy to reflect changes in our services, systems or legal requirements. The current version will be published on this page with a revised “Last updated” date. Where legally required, we will provide additional notice or obtain consent for material changes.
13. Contact and privacy enquiries
For privacy questions, requests or complaints, contact us through the Contact page. Please identify the relevant service or organization and describe your request without including passwords or unnecessary sensitive data.
If a specific customer contract names a privacy contact or grievance channel, please use that channel where appropriate.