Privacy Policy

1. Who We Are

The Orion Group of Hotels operates the Orion Training Academy portal at rms.theorionhotels.com. This portal is an internal staff training and development platform for employees of The Orion Group and its associated properties.

Data controller: The Orion Group of Hotels, India. Contact: mrinal@cretorial.com

2. Information We Collect

When you sign in using Google, we collect and store:

• Your name and email address (from your Google account)
• Your Google profile picture
• Your selected property and role (entered by you)

During your use of the portal, we also record:

• Assessment attempts, scores, and answers
• Module completion status and progress
• Login timestamps and session data

3. How We Use Your Information

• To authenticate you and provide access to the training portal
• To track and display your learning progress
• To generate team performance reports for management
• To power the leaderboard and team progress features
• To improve course content based on aggregate performance data

We do not use your data for advertising, and we do not sell or share your data with any third party.

4. Google Sign-In

This portal uses Google OAuth 2.0 for authentication. When you sign in with Google, you are subject to Google's Privacy Policy. We only request access to your basic profile information (name, email, profile picture). We do not access your Google Drive, Gmail, or any other Google services.

5. Data Storage

All data is stored securely on a private server located in India. The database is encrypted at the filesystem level and backed up daily. Access is restricted to authorised administrators of The Orion Group only.

6. Data Retention

Your data is retained for as long as you are an employee of The Orion Group. Upon leaving the organisation, your account may be deactivated by an administrator. You may request deletion of your personal data by contacting your HR department or emailing mrinal@cretorial.com.

7. Your Rights

• Access: You can view all your data through your profile and progress pages
• Correction: You can update your property and role at any time from your profile
• Deletion: Contact an administrator to request account deletion
• Portability: Administrators can export your progress data as CSV

8. Cookies & Sessions

This portal uses session cookies to keep you logged in. These cookies are HTTP-only, secure, and expire after 30 days of inactivity. We do not use any advertising or tracking cookies.

9. Changes to This Policy

We may update this policy from time to time. Any significant changes will be communicated to users via the portal. Continued use of the portal after changes constitutes acceptance of the updated policy.