Terms & Conditions

1.1 These Terms and Conditions (the "Terms") constitute a legally binding agreement between you and Codec Networks Private Limited, a company incorporated under the laws of India, bearing Corporate Identity Number [U72900DL2008PTC184004] and having its registered office at [registered office address] and its head office at Office No. 507, 5th Floor, New Delhi House, Barakhamba Road, New Delhi 110001, India (hereinafter referred to as "Codec Networks", the "Company", "we", "us" or "our", which expression shall, unless repugnant to the context, include its successors and permitted assigns).

1.2 These Terms govern your access to and use of the website located at https://www.codecnetworks.com, its sub-domains and any other website or web page owned or operated by the Company that links to these Terms (collectively, the "Website"), together with all Content, forms and functionalities made available through it.

1.3 By accessing, browsing or using the Website, or by submitting any form or information through it, you acknowledge that you have read and understood these Terms and agree to be bound by them. If you do not agree to these Terms, you are requested not to access or use the Website.

1.4 These Terms are an electronic record within the meaning of the Information Technology Act, 2000 and the rules made thereunder. They are generated by a computer system and do not require any physical or digital signature, and they constitute a valid contract under section 10A of the Information Technology Act, 2000 read with the Indian Contract Act, 1872.

1.5 Where you access or use the Website on behalf of a company, firm or other organisation, you represent and warrant that you are duly authorised to accept these Terms on its behalf, and the expressions "you" and "your" shall include such organisation.

1.6 The processing of personal data by the Company is governed exclusively by its Privacy Policy. Your acceptance of these Terms shall not constitute consent to any processing of your personal data. Where consent is required, it shall be sought separately in accordance with the Digital Personal Data Protection Act, 2023.

2.1 In these Terms, unless the context otherwise requires, the following expressions shall have the meanings set out below:

• (a) "Applicable Law" means all laws, statutes, rules, regulations, directions, guidelines, notifications, orders and judgments in force in India from time to time;
• (b) "Content" means all text, articles, blogs, graphics, logos, icons, images, photographs, audio-visual material, course descriptions, downloadable materials, software, designs and other material made available on or through the Website;
• (c) "DPDP Act" means the Digital Personal Data Protection Act, 2023, and "DPDP Rules" means the Digital Personal Data Protection Rules, 2025;
• (d) "Engagement Agreement" means any proposal, quotation, statement of work, purchase order, master services agreement, non-disclosure agreement or other written contract executed or accepted in writing by you and the Company in relation to the Services;
• (e) "Intellectual Property Rights" means all patents, copyrights, trade marks, service marks, trade names, designs, database rights, know-how, trade secrets and other intellectual property rights, whether registered or unregistered, anywhere in the world;
• (f) "Services" means the professional services offered by the Company, including vulnerability assessment and penetration testing, red teaming, security audits, governance, risk and compliance advisory, data privacy and protection services, managed security and security operations centre services, and digital forensics;
• (g) "Training Programme" means any course, workshop, bootcamp, certification preparation programme, awareness session or other training delivered by the Company, whether in a classroom, through live online sessions or at a client's premises; and
• (h) "Personal Data", "Data Principal", "Data Fiduciary", "Data Processor" and "Consent Manager" shall have the meanings assigned to them under the DPDP Act.

2.2 In these Terms, unless the context otherwise requires: (a) headings are for convenience only and shall not affect interpretation; (b) words in the singular include the plural and vice versa; (c) the words "include" and "including" shall be construed without limitation; and (d) any reference to a statute, rule or regulation includes it as amended, modified or re-enacted from time to time.

3.1 Eligibility. You represent and warrant that you have attained eighteen (18) years of age and are competent to contract within the meaning of section 11 of the Indian Contract Act, 1872. A person below eighteen (18) years of age shall not submit any Personal Data through the Website or enrol in any Training Programme, except through a parent or lawful guardian who has given verifiable consent in accordance with section 9 of the DPDP Act and rule 10 of the DPDP Rules.

3.2 Permitted use. You shall access and use the Website solely for lawful purposes, including to obtain information about the Company, its Services and Training Programmes, to make enquiries and to apply for employment.

3.3 Prohibited conduct. You shall not, and shall not attempt to or permit any other person to:

• (a) use the Website in contravention of Applicable Law, including the Information Technology Act, 2000 and the rules made thereunder;
• (b) host, display, upload, transmit or share any information that is unlawful, defamatory, obscene, invasive of another's privacy, infringing of any Intellectual Property Rights, deceptive or misleading, or threatening to the unity, integrity, defence, security or sovereignty of India, public order or friendly relations with foreign States;
• (c) furnish any false, inaccurate or misleading information, impersonate any person or entity, or misrepresent your affiliation with any person or entity;
• (d) introduce any virus, malware, ransomware, trojan horse, worm or other harmful or malicious code;
• (e) gain or attempt to gain unauthorised access to the Website, its servers, databases or networks, or any system connected to it;
• (f) scan, probe or test the vulnerability of the Website or any related system, run automated vulnerability scanners or penetration tests, or conduct load, stress or denial-of-service testing, without the Company's prior written authorisation;
• (g) use any robot, spider, scraper or other automated means to access, copy, harvest or extract any Content or data from the Website, or use any Content to train, fine-tune or develop any artificial intelligence or machine-learning model, save for search-engine indexing that complies with the Website's robots.txt file;
• (h) frame, mirror, decompile or reverse engineer any part of the Website, or circumvent, disable or interfere with any of its security features; or
• (i) use any form on the Website to send spam, chain letters, advertisements or other unsolicited commercial communications.

3.4 Consequences of unauthorised access. Any unauthorised access to, testing of or attack on the Website may attract civil liability under section 43, and criminal liability under sections 66, 66C and 66D, of the Information Technology Act, 2000, in addition to any other remedy available to the Company. The Company's expertise in security testing shall not be construed as an invitation or authorisation to test its own systems.

3.5 Responsible disclosure. The Company welcomes the responsible disclosure of security vulnerabilities. If you discover a vulnerability in the Website, you are requested to report it promptly to [security@codecnetworks.com] with sufficient detail to enable its reproduction. You shall not access, modify, delete or retain any data beyond what is strictly necessary to demonstrate the vulnerability, disrupt the availability of the Website, or disclose the vulnerability publicly before the Company has had a reasonable opportunity to remediate it. The Company shall endeavour to acknowledge every good-faith report within [five (5) working days].

3.6 Monitoring. The Company reserves the right, without any obligation to do so, to monitor the Website for security and compliance purposes, and to restrict or block access from any device, network or IP address that it reasonably believes is being used in breach of these Terms.

4.1 No offer. Descriptions of the Services on the Website are provided for general information only and do not constitute an offer capable of acceptance. Any proposal or quotation issued by the Company is an invitation to negotiate and shall become binding only upon the execution or written acceptance of an Engagement Agreement by both parties.

4.2 Precedence of Engagement Agreements. Each engagement shall be governed by its Engagement Agreement, which shall set out, among other things, the scope, deliverables, timelines, fees, confidentiality, data protection and liability provisions applicable to it. In the event of any conflict between these Terms and an Engagement Agreement, the Engagement Agreement shall prevail to the extent of such conflict.

4.3 Authorisation for security testing. The Company shall perform security testing, including vulnerability assessment and penetration testing, red teaming and phishing simulation, only upon receipt of a written authorisation and agreed rules of engagement executed by a person having lawful authority over the systems, applications, networks and personnel in scope. You represent and warrant that you possess such authority, and you shall be solely responsible for obtaining all consents and permissions required from third parties, including hosting, cloud and software service providers.

4.4 Fees and taxes. Unless expressly stated otherwise, all fees are exclusive of Goods and Services Tax and other applicable taxes, duties and levies, which shall be payable by you in addition. Payments shall be made in Indian Rupees within the period stated in the relevant invoice or Engagement Agreement. Where any tax is deducted at source under applicable income-tax law, you shall furnish the corresponding certificate of tax deduction within the period prescribed by law.

4.5 No guarantee of outcome. The findings of any assessment, audit or test reflect the systems, information and scope made available at the time of the work and do not guarantee future security. Certification decisions, including under ISO/IEC 27001 or ISO/IEC 27701, are taken by independent certification bodies, and approvals by the relevant regulators. The Company does not guarantee any certification, regulatory approval or audit outcome.

4.6 Processing of personal data on your behalf. Where the Company processes Personal Data on your behalf in the course of the Services, it shall do so as your Data Processor, solely on your documented instructions and in accordance with the Engagement Agreement, and you shall remain the Data Fiduciary for such Personal Data under the DPDP Act.

4.7 Confidentiality of proposals. Proposals, quotations, methodologies and other documents shared by the Company in connection with the Services are confidential and proprietary to the Company. They shall not be disclosed to any third party, or used for any purpose other than evaluating the proposed engagement, without the Company's prior written consent.

5.1 Enrolment. The content, duration, mode of delivery (classroom, live online or on-site), schedule, fees and inclusions of each Training Programme shall be as specified on the relevant course page, in the Company's proposal or in the enrolment confirmation. An enrolment shall be confirmed only upon receipt of the registration fee and the issue of a written confirmation by the Company.

5.2 Fees. Unless otherwise agreed in writing, [forty per cent (40%)] of the course fee shall be payable at the time of registration and the balance [sixty per cent (60%)] on or before the first day of the Training Programme. All fees are exclusive of Goods and Services Tax, which shall be charged in addition.

5.3 Cancellation by the participant. If a participant cancels an enrolment before the commencement of the first session, the Company shall refund [thirty per cent (30%)] of the amount paid and retain the balance. No refund shall be payable after the commencement of the Training Programme, as the seat is reserved exclusively for the participant.

5.4 Rescheduling. A participant may, by giving prior notice (save in an emergency), transfer to a subsequent batch, provided that the Training Programme is attended within [six (6) months] from the date of registration. Enrolments are personal and non-transferable, and no substitute participant shall be permitted. The Company may, at its sole discretion, arrange additional sessions to cover missed topics, but shall not be obliged to do so where a substantial part of the Training Programme has been missed.

5.5 Cancellation or modification by the Company. The Company reserves the right to reschedule a Training Programme, change its venue or trainer, or cancel it for reasons including insufficient enrolment or circumstances beyond its control. If the Company cancels a Training Programme, it shall, at the participant's option, refund one hundred per cent (100%) of the fees paid for that Training Programme or transfer the participant to another batch.

5.6 Certification. Examinations, vouchers and certificates of third-party accreditation bodies, including EC-Council and PECB, are subject to the eligibility criteria, policies and terms of those bodies. [Examination vouchers, once issued, are non-refundable save to the extent permitted by the issuing body.] The Company does not guarantee that any participant will pass an examination or obtain a certification.

5.7 Ethical use undertaking. Each participant undertakes to use the tools, techniques and knowledge imparted during a Training Programme solely for lawful and ethical purposes, and only within the laboratory environments provided by the Company or on systems that the participant is authorised in writing to test. The participant shall be solely liable for any misuse, and the Company may terminate the enrolment without refund in the event of any misuse of laboratory access or unlawful use of the skills acquired.

5.8 Course materials and recordings. All course materials are licensed to the participant for personal, non-commercial learning only. Participants shall not record any session, or copy, reproduce, share, sell or publish any course material, without the Company's prior written consent. Where the Company records an online session, participants shall be informed in advance, and the recording shall be processed in accordance with the Privacy Policy.

5.9 Code of conduct. Participants shall conduct themselves in a professional and courteous manner. The Company may, without refund, remove any participant who disrupts a session, harasses any person or breaches laboratory rules.

5.10 Consumer rights. Nothing in this clause 5 shall limit any right available to a participant as a consumer under the Consumer Protection Act, 2019.

6.1 Ownership. The Website and all Content, including its design, layout, look and feel and the selection and arrangement of its Content, are owned by or licensed to the Company and are protected under the Copyright Act, 1957, the Trade Marks Act, 1999 and other Applicable Law. The name "Codec Networks" and the associated logos are trade marks of the Company. All rights not expressly granted in these Terms are reserved.

6.2 Limited licence. Subject to your compliance with these Terms, the Company grants you a limited, non-exclusive, non-transferable, non-sublicensable and revocable licence to access and view the Website, and to download or print a single copy of any page for your personal or internal business reference, provided that all copyright and other proprietary notices are retained.

6.3 Restrictions. Save as expressly permitted in clause 6.2, you shall not copy, reproduce, modify, adapt, translate, republish, distribute, display, sell, license or create derivative works from any Content, or use any trade mark, logo or trade name of the Company, without its prior written consent. No licence or right is granted by implication, estoppel or otherwise.

6.4 Third-party marks. Names, logos and trade marks of clients, accreditation bodies, technology partners and other third parties displayed on the Website are the property of their respective owners and are used for identification purposes only. Their display does not imply any endorsement, sponsorship or affiliation beyond that expressly stated.

6.5 Notice of infringement. If you believe that any Content infringes your Intellectual Property Rights, you may send a written notice to info@codecnetworks.com identifying the work concerned, the allegedly infringing material and your contact details, together with a statement that the notice is made in good faith. The Company shall examine every such notice and take appropriate action in accordance with Applicable Law.

7.1 Accuracy of information. You shall ensure that all information submitted through the Website is true, accurate, current and complete. Where you submit the Personal Data of any other individual, you represent and warrant that you are duly authorised to do so and have informed that individual of the Privacy Policy.

7.2 No confidential information. You are requested not to submit any confidential information, sensitive personal data or details of vulnerabilities in third-party systems through the general forms on the Website. Information so submitted shall not be treated as confidential unless otherwise agreed in writing. Where an enquiry requires the exchange of confidential information, the parties shall first execute a non-disclosure agreement and agree upon a secure means of communication.

7.3 Electronic communications. You agree that the Company may communicate with you electronically in connection with your enquiry, engagement, enrolment or application, and that all notices and communications so provided shall satisfy any legal requirement that such communications be in writing. Marketing communications shall be sent only in accordance with the Privacy Policy.

7.4 Recruitment. The submission of a job application through the Website does not oblige the Company to grant an interview or make an offer of employment. The Company does not charge any fee from candidates at any stage of recruitment. Any request for payment made in the Company's name is fraudulent and should be reported to career@codecnetworks.com.

7.5 Feedback. Any suggestion, idea or feedback that you voluntarily provide regarding the Website, the Services or the Training Programmes may be used by the Company without restriction and without any obligation of compensation, provided that the Company shall not publish your name or identity without your consent.

7.6 Testimonials. Testimonials published on the Website reflect the genuine views and experiences of the individuals concerned, are published with their consent and are not a guarantee of similar results. Any such individual may withdraw consent at any time, whereupon the Company shall remove the testimonial from the Website within a reasonable period.

8.1 The Website may contain links to, or incorporate services provided by, third parties, including WhatsApp, Google Maps, Google reCAPTCHA, social media platforms and accreditation bodies. Such third-party websites and services are governed by their own terms and privacy policies, over which the Company has no control.

8.2 The inclusion of any link does not imply endorsement by the Company. The Company shall not be responsible or liable for the content, accuracy, availability, security or practices of any third-party website or service, or for any loss or damage arising from your use of it, which shall be entirely at your own risk.

8.3 Articles, news items, event reports and other material on the Website may refer to or reproduce third-party content, all rights in which vest in their respective owners.

9.1 General. The Website and all Content are provided on an "as is" and "as available" basis for general information purposes only. To the maximum extent permitted by Applicable Law, the Company expressly disclaims all warranties and representations, whether express, implied or statutory, including any implied warranty of merchantability, fitness for a particular purpose, accuracy, completeness and non-infringement.

9.2 No professional advice. Content relating to laws, regulations and standards, including the DPDP Act, the directions of the Reserve Bank of India and the Securities and Exchange Board of India, and international standards, is general in nature and does not constitute legal, regulatory, financial or other professional advice. You should obtain specific professional advice before acting upon any such Content. No professional relationship shall arise between you and the Company except under an Engagement Agreement.

9.3 Accuracy and availability. While the Company endeavours to keep the Website accurate and current, it does not warrant that the Content is free from errors, omissions or typographical inaccuracies, or that the Website will be uninterrupted, timely, secure or free from viruses or other harmful components. The Company reserves the right to correct any error, including in fees or course details, at any time without prior notice.

9.4 No absolute security. No security product, assessment or service can guarantee complete security or identify every vulnerability or threat. Assessments are confined to the agreed scope and to the point in time at which they are performed.

9.5 Statutory rights. Nothing in these Terms shall exclude or limit any warranty, right or remedy that cannot be excluded or limited under Applicable Law, including the Consumer Protection Act, 2019.

10.1 To the maximum extent permitted by Applicable Law, neither the Company nor its directors, officers, employees, agents or affiliates shall be liable for any indirect, incidental, special, consequential, exemplary or punitive damages, or for any loss of profits, revenue, business, contracts, goodwill, anticipated savings or data, arising out of or in connection with your access to, use of or inability to use the Website or any Content, whether in contract, tort (including negligence), breach of statutory duty or otherwise, even if the Company has been advised of the possibility of such damages.

10.2 The aggregate liability of the Company for all claims arising out of or in connection with your use of the Website shall not exceed [Indian Rupees Ten Thousand (₹10,000)].

10.3 The liability of the Company in respect of the Services shall be governed exclusively by the relevant Engagement Agreement. In respect of a Training Programme, the aggregate liability of the Company shall not exceed the fees actually paid by the participant for that Training Programme.

10.4 Nothing in these Terms shall limit or exclude the liability of the Company for fraud, gross negligence or wilful misconduct, or any other liability that cannot be limited or excluded under Applicable Law.

11.1 You agree to indemnify, defend and hold harmless the Company and its directors, officers, employees, agents and affiliates from and against all claims, demands, actions, proceedings, losses, damages, penalties, costs and expenses (including reasonable legal fees) brought or imposed by any third party or authority, to the extent arising out of or relating to:

• (a) your breach of these Terms;
• (b) your violation of Applicable Law or of the rights of any third party;
• (c) any unauthorised access to, testing of or attack on the Website by you or by any person acting on your behalf; or
• (d) any information submitted by you without the right to do so, including the Personal Data of any other individual.

11.2 The Company shall notify you promptly of any such claim and shall provide reasonable co-operation, at your cost, in its defence. You shall not settle any such claim in a manner that imposes any obligation on, or requires any admission from, the Company without its prior written consent.

12.1 The collection, use, storage, disclosure and other processing of Personal Data by the Company is governed by the Privacy Policy, which constitutes the Company's notice under section 5 of the DPDP Act and is published as a separate document. As stated in clause 1.6, acceptance of these Terms shall not be construed as consent to the processing of Personal Data.

12.2 Duties of Data Principals. In accordance with section 15 of the DPDP Act, you shall: (a) comply with all Applicable Law while exercising your rights under the DPDP Act; (b) not impersonate any other person while providing your Personal Data for a specified purpose; (c) not suppress any material information while providing your Personal Data for any document, unique identifier, proof of identity or proof of address issued by the State or any of its instrumentalities; (d) not register any false or frivolous grievance or complaint with the Company or the Data Protection Board of India; and (e) furnish only such information as is verifiably authentic while exercising the right to correction or erasure.

12.3 A breach of any of the duties set out in clause 12.2 may attract a penalty of up to Indian Rupees Ten Thousand (₹10,000), imposed by the Data Protection Board of India under the DPDP Act.

13.1 Suspension. The Company may, at any time and without liability, suspend, restrict, modify or discontinue the Website or any part of it, whether temporarily or permanently, for maintenance, security, legal or operational reasons.

13.2 Termination. Without prejudice to any other right or remedy, the Company may, upon any breach of these Terms by you, immediately terminate or restrict your access to the Website, remove any information submitted by you, terminate any enrolment in a Training Programme in accordance with clause 5, and initiate such legal proceedings as it considers appropriate.

13.3 Survival. Clauses 6 (Intellectual Property Rights), 9 (Disclaimer of Warranties), 10 (Limitation of Liability), 11 (Indemnification), 14 (Governing Law, Dispute Resolution and Jurisdiction) and 15 (Amendments and General Provisions), together with any other provision that by its nature is intended to survive, shall survive any suspension or termination of your access to the Website.

13.4 Force majeure. The Company shall not be liable for any delay or failure in the performance of its obligations to the extent caused by any event beyond its reasonable control, including acts of God, natural disasters, epidemics or pandemics, war, terrorism, civil commotion, riots, strikes, governmental or regulatory action, failure of power, telecommunication or internet services, or cyber attacks that occur notwithstanding the implementation of reasonable security safeguards.

14.1 Governing law. These Terms, and any dispute or claim arising out of or in connection with them or with the Website, shall be governed by and construed in accordance with the laws of the Republic of India.

14.2 Amicable resolution. The parties shall first endeavour to resolve any dispute amicably. You may refer any dispute in writing to the Grievance Officer named in clause 16, and the Company shall endeavour to resolve it within thirty (30) days of its receipt.

14.3 Arbitration. Any dispute that is not resolved under clause 14.2 shall be referred to and finally resolved by arbitration in accordance with the Arbitration and Conciliation Act, 1996. The arbitral tribunal shall consist of a sole arbitrator appointed by mutual agreement of the parties, failing which the arbitrator shall be appointed in accordance with that Act. The seat and venue of arbitration shall be New Delhi, India, the proceedings shall be conducted in the English language, and the award shall be final and binding on the parties.

14.4 Jurisdiction. Subject to clause 14.3, the courts at New Delhi, India shall have exclusive jurisdiction over all matters arising out of or in connection with these Terms, including applications for interim relief.

14.5 Statutory remedies preserved. Nothing in this clause 14 shall prejudice your right to file a complaint before a Consumer Disputes Redressal Commission under the Consumer Protection Act, 2019, or before the Data Protection Board of India under the DPDP Act, where such remedy is available to you. An Engagement Agreement may provide for its own mechanism of dispute resolution, which shall prevail for that engagement.

14.6 Access from outside India. The Company makes no representation that the Website is appropriate or available for use outside India. Persons who access the Website from outside India do so on their own initiative and are responsible for compliance with the laws of their jurisdiction.

15.1 Amendments. The Company may amend these Terms from time to time to reflect changes in Applicable Law, its business or the Website. The amended Terms shall be published on the Website with a revised "Last Updated" date, and in the case of material changes, a notice shall be displayed on the Website. Amendments shall take effect prospectively from the date stated in them, and your continued use of the Website thereafter shall constitute your acceptance of the amended Terms. No amendment to these Terms shall alter an executed Engagement Agreement, which may be amended only by a written instrument signed by both parties.

15.2 Entire agreement. These Terms constitute the entire agreement between you and the Company regarding your use of the Website and supersede all prior understandings in that respect. The Privacy Policy is a separate notice, and Engagement Agreements and enrolment confirmations shall govern the Services and Training Programmes to which they relate.

15.3 Severability. If any provision of these Terms is held to be invalid, illegal or unenforceable, that provision shall be enforced to the maximum extent permissible, and the remaining provisions shall continue in full force and effect.

15.4 Waiver. No failure or delay by the Company in exercising any right or remedy shall operate as a waiver of it, nor shall any single or partial exercise of a right or remedy preclude its further exercise.

15.5 Remedies. The rights and remedies of the Company under these Terms are cumulative and in addition to those available under Applicable Law. You acknowledge that a breach of clause 3 or clause 6 may cause the Company irreparable harm, for which the Company shall be entitled to seek injunctive or other equitable relief in addition to damages.

15.6 Assignment. You shall not assign or transfer any of your rights or obligations under these Terms without the Company's prior written consent. The Company may assign or transfer its rights and obligations to any affiliate or to any successor to its business.

15.7 Relationship of the parties. Nothing in these Terms shall create any partnership, joint venture, agency or employment relationship between you and the Company.

15.8 Notices. The Company may give notices to you by email to the address provided by you or by publication on the Website. Notices to the Company shall be sent in writing to the address or email specified in clause 16.

15.9 Language. These Terms are drawn up in the English language. In the event of any inconsistency between the English version and any translation, the English version shall prevail.

16.1 In accordance with the Information Technology Act, 2000 and the rules made thereunder, the Company has designated the following Grievance Officer:

16.2 The Grievance Officer shall acknowledge every grievance within [forty-eight (48) hours] of its receipt and shall endeavour to redress it within one (1) month of its receipt.

16.3 Grievances concerning the processing of Personal Data shall be addressed in accordance with paragraph 16 of the Privacy Policy. For all other queries, you may write to info@codecnetworks.com or call +91 11 4375 2299. The Company's branch office is located at Office No. 707, 7th Floor, Silverton Tower, Sector 50, Golf Course Extension Road, Gurugram, Haryana 122018, India.