Privacy Policy

BusinessLabs Internet Services LLP ("BusinessLabs," "we," "us") operates the CCA-F practice platform at https://businesslabs.org. This Privacy Policy explains how we collect, use, share, and retain personal data. We aim to comply with applicable privacy laws, including the GDPR where it applies to you.

Depending on how you use the Platform, we may collect:

• Account data: name, email, phone number, country, state/region, city, password (stored hashed)
• Learning data: task/scenario/exam progress, quiz scores, concept checks, readiness metrics
• Submissions: scenario work, text answers, uploaded course certificates (PDF/images)
• Security & auth: email OTP verification records, session tokens, sign-in timestamps
• Technical data: server logs, IP address, browser/device type where logged by our infrastructure

We use personal data to:

• Create and secure your account (including OTP email verification)
• Deliver practice content, track progress, and run exam simulations
• Review submissions and verify uploaded certificates
• Support BusinessLabs training, internship, apprenticeship, and hiring programs
• Coordinate official Anthropic certification exams where BusinessLabs sponsors a candidate
• Improve the Platform, prevent abuse, and meet legal obligations

Authorized BusinessLabs administrators and vendors hired by BusinessLabs for processing can view candidate profiles, progress, submissions, certificates, and export reports (e.g., CSV) to manage the Platform and training programs. Access is limited to personnel and vendors who need it for their role.

We do not sell your personal data. We share data only with trusted service providers who help us operate the Platform, including:

• Cloud hosting and database providers (data stored on servers with vetted vendors)
• Email delivery services (e.g., AWS SES) for OTP and transactional messages
• Professional advisers, auditors, and compliance service providers as needed
• Anthropic when BusinessLabs pursues official certification or examination on your behalf as part of an eligible program

Providers are required to protect data and use it only for the services they provide to us.

We serve users worldwide. Data may be processed in India, the United States (e.g., AWS regions), or other countries where our providers operate. We use appropriate safeguards where required for cross-border transfers.

We use cookies and similar technologies for essential functions such as keeping you signed in (session/authentication cookies). By using the Platform, you consent to this use. You can control cookies through your browser settings, but disabling essential cookies may prevent login.

We retain personal data for as long as your account is active and as needed to operate the Platform, resolve disputes, enforce our terms, and meet legal, tax, and compliance obligations. After account deletion, some data may remain in backups or logs for a limited compliance period before routine purging.

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. You may delete your account from Settings at any time. You may also contact us at reception@businesslabs.org to exercise GDPR or other privacy rights. We will respond within a reasonable period, typically within 30 days for GDPR requests.

We use industry-standard measures including hashed passwords, HTTPS, and access controls. No system is 100% secure; please use a strong unique password and protect your account.

The Platform is not directed to anyone under 18 (or the age of majority in their country, if higher). We do not knowingly collect data from minors.

We may update this Privacy Policy. The effective date at the top will change when we do. Material updates may be communicated via the Platform or email where appropriate.

Privacy inquiries: reception@businesslabs.org. See also our Terms of Use.

BusinessLabs Internet Services LLP
507, Ashoka Bhoopal Chamber, SP Road, Begumpet, Hyderabad, Telangana 500003, India