Business Domain Specific Least Cybersecurity Controls Implementation (BDSLCCI), accessible via the website www.BDSLCCI.in, is committed to safeguarding your privacy and developing technologies that provide you with the most effective and secure online experience. We understand the importance of protecting your privacy. The data collection and usage practices of the BDSLCCI Web Portals are governed by this Statement of Privacy, which applies to all current and former users. By using the BDSLCCI Web Portal, you consent to the data practices outlined in this statement. BDSLCCI is a key service offered by SecureClaw IT and Cybersecurity Pvt Ltd (“SecureClaw”) and/or its affiliates or subsidiaries. SecureClaw provides web portal features (“BDSLCCI Web Portal”), as well as other products and services, which are made available when you visit or shop on BDSLCCI, use BDSLCCI products or services, access BDSLCCI applications, or use software provided by BDSLCCI in connection with these offerings (collectively referred to as "BDSLCCI Services"). At BDSLCCI, the security and privacy of our clients, respondents, and website users are our top priorities. We respect your right to privacy and deeply value your trust in us.

BDSLCCI collects specific personal data about you as part of our interactions with you. Through various web platforms that assist our members in registering, resetting passwords, receiving training, partnering with us, and other activities, BDSLCCI collects personally identifiable information (personal information), which may include:

Contact information

We may collect your name, email address, home or work address, telephone number, organization name, and other similar information.

Payment and billing information

In accordance with your chosen payment method and the legal age permitted by your place of origin or residence, we may collect your billing name, billing address, and other billing information. However, on our Web Portal, we NEVER collect your credit card number, expiration date, or any other sensitive credit card details. Additionally, we do not store any bank-related information, and none of our employees will have access to such data.

Information you post

We collect any information that you post in a public space on our Web Portal or on BDSLCCI's third-party social media pages.

Demographic information

We may collect anonymous demographic information that is not unique to you, such as your ZIP code, age, gender, preferences, interests, and favorites, as well as any other information you provide while using our Web Portal. This information may also be collected as part of a survey.

Other information

Here’s a refined version for improved clarity and grammatical accuracy: "We may record information about your IP address and the browser you are using when you visit our web portal. Additionally, this may include interactions through our web portal, training facilities, engagements with our representatives, authorized partners, and other third parties, as well as the duration of time spent on our web portal. BDSLCCI will not collect, use, or disclose sensitive personal information about you—such as your race, religion, health, or political affiliations—without your explicit consent.

We collect information in different ways.

1. We collect direct information from you. When you register with us or become a partner, we immediately gather information provided by you. You may choose to fill out forms and provide personal information to request specialized information or services, such as products, training, white papers, brochures, and more. This information is available regardless of your membership status. BDSLCCI requires your consent to allow its representatives to contact you for the purposes mentioned above. Depending on your use of BDSLCCI services, we may collect various types of data about you. We also gather any information you voluntarily provide when opening an account and using our services, either directly or through a third-party platform. This data may include, but is not limited to, information about your accounts with other services.
2. We passively collect data from you. Each time you interact with us, we automatically receive and store certain types of information. To track your usage of our Web Portal or any subdomains, as well as the advertisements and other content presented by or on behalf of BDSLCCI on other Web Portals, we use browser cookies and web beacons. We may utilize this data for internal research purposes and to provide you with location-based services, such as personalized advertising, search results, and other customized content. If your device has such capabilities, we may also receive a confirmation when you open emails from BDSLCCI. This helps us make our email correspondence more relevant and engaging. If you prefer not to receive emails or other communications from us, please update your customer communication preferences.
3. We receive information about you from external sources. If you access or use our Services through a third-party platform or service, use a social media feature integrated into our web portals, or click on third-party links, the collection, use, and sharing of your data will also be governed by the privacy policies and agreements of the respective third party.
4. If your social media or other online accounts are linked to your BDSLCCI account, we may access certain information through them. For example, if you log in to BDSLCCI using a social network account, such as Facebook, or join a WhatsApp group sponsored by BDSLCCI, or use another third-party platform or service, we will require your consent to access specific data from that account. The third-party social networking platform may provide us with details such as your name, profile picture, membership account ID, login email address, location, physical location of your access devices, gender, birthday, and a list of friends or contacts, depending on the platform or service. These platforms and services provide information to us via their APIs. The data we receive is determined by the information you choose to share with us through your privacy settings or as allowed by the platform or service.
5. We receive information about you from other sources, which may be added to your account information.

1. We use your information to deliver our Services. Certain BDSLCCI services require you to share your personal information to enable us to provide the full range of those services.
2. We may use your information to contact you or respond to your requests and questions. This may include using the information you provide to deliver the services you have requested or to administer and process your certification.
3. We may use your information to enhance our products and services. This may involve analyzing and customizing our products, web portals, newsletters, and other communications to better support and improve your online experience with us.
4. We may use your information to analyze site trends and customer interests. This helps us improve our Web Portal and products. We may also combine information collected from you with information obtained from third parties. Additionally, BDSLCCI may contact you through surveys to gather your feedback on current services or to explore potential new services that may be offered.
5. We may use information for security purposes. We may use information to protect our company, our customers, or our Web Portals.
6. We may use your information for marketing purposes. This includes sending communications to you for marketing, promotional, or customer satisfaction purposes, as well as informing you about other products or services offered by BDSLCCI and its affiliates.
7. We use your information to send transactional communications. This may include emails or SMS notifications related to your account or a product or service purchase.
8. We use your information as permitted by law to fulfill our legal obligations, including record-keeping, reporting, accounting, tax compliance, and related requirements.

BDSLCCI does not sell, rent, or lease your personal information to third parties without your explicit consent. However, BDSLCCI shares personal information in the following ways:
1. We may share your personal information with our Group companies for internal purposes, primarily related to business and operational activities.
2. We may share information with our authorized vendors. These include vendors who assist us in managing our online registration process, payment processing, or transactional message processing. Some of these vendors may be located outside the country where you reside.
3. We may share information with our business partners and third parties that perform services on our behalf. From time to time, BDSLCCI may contact you on behalf of external business partners regarding specific offerings that might interest you. In such cases, your unique personal information—such as your email address, name, physical address, or telephone number—is not directly transferred to a third party. However, BDSLCCI may share data with trusted partners to assist in performing statistical analysis, sending emails or postal mail, providing customer support, or arranging deliveries. All such partners are strictly prohibited from using your personal information for any purpose other than to deliver these services to BDSLCCI and are required to maintain the confidentiality of your information.
4. We may share information if we believe it is necessary to comply with the law or to protect ourselves. BDSLCCI Web Portals will disclose your personal information, without consent, only when required by law or in the good faith belief that such action is necessary to: (a) comply with legal requirements or processes served on BDSLCCI or the site; (b) protect and defend the rights or property of BDSLCCI; or (c) act in urgent circumstances to protect the personal safety of BDSLCCI users or the public.
5. We may share your information for reasons not outlined in this policy, and we will notify you beforehand. BDSLCCI does not transfer any sensitive personal information. By using or continuing to use the site, you consent to our use of your information (including sensitive personal information) as described in this Privacy Notice, which may be updated at BDSLCCI's discretion. You also agree and consent to the collection, storage, processing, transfer, and sharing of information (including sensitive personal information) with third parties or service providers for purposes outlined in this Privacy Notice.
6. Conduct or distribute surveys, contests, pyramid schemes, or chain letters.

We may be required to share the aforementioned information with government authorities and agencies for purposes such as identity verification or the prevention, detection, investigation, prosecution, or punishment of cyber incidents or other legal offenses. By using our services, you agree and consent to BDSLCCI, at its sole discretion, disclosing the necessary information to government authorities and agencies in such cases.

BDSLCCI encourages you to review the privacy statements of the Web Portals you choose to link to from BDSLCCI’s Web Portal. This will help you understand how those Web Portals collect, use, and share your information. BDSLCCI is not responsible for the privacy statements or content of Web Portals outside the BDSLCCI family of Web Portals.

BDSLCCI stores your personally identifiable information, such as your name, email address, contact number, and more, on a secure server that is encrypted and accessible only through BDSLCCI’s applications. BDSLCCI may share personal information with its affiliates, advisors, and auditors in other countries where it may be processed. If we, our affiliates, or service providers transfer personal information outside the country of origin, we always ensure that appropriate safeguards are in place to protect the information during processing.

We implement appropriate technical and organizational measures to secure your information and protect it against unauthorized or unlawful use, as well as accidental loss or destruction.

BDSLCCI uses secure servers to store your information and shares or provides access to it only to the minimum extent necessary. Such access is subject to confidentiality restrictions where appropriate, and anonymized whenever possible. Additionally, we verify the identity of individuals who request access to information before granting them the requested access.

BDSLCCI uses Secure Sockets Layer (SSL) software and other similar encryption technologies to secure any payment transactions made on or through our Web Portal. Additionally, BDSLCCI implements comprehensive information security and cybersecurity standards for selected services.

We retain your personal information as required to fulfill the purposes for which it was collected. Additionally, we retain and use your personal information as necessary to meet our business requirements, comply with legal obligations, resolve disputes, safeguard our assets, and enforce our agreements. We establish standard retention periods for various categories of personal information in our possession. When standard retention periods cannot be determined, we base retention decisions on the following criteria:
1. our relationship with you.
2. the legal obligations we are subject to.
3. the legal basis we have for processing your data (consent, performance of contract, etc.).
4. the purposes and uses of your data (this include present and future uses).
5. the level of risk with retaining or using your data.
6. your rights under the Digital Personal Data Protection Act 2023 of India and other relevant laws.
7. any other relevant circumstances.

As BDSLCCI is a certification body, we store users' information relevant to upgrading or renewing their certifications, including the submission of CPC Credits in accordance with the certification CPC policy.

We process your personal information based on the following legal grounds:

Consent

When you express interest in associating with us or learning more about our offerings, or when you provide your consent to receive marketing communications, we use that consent to process your data for those specific purposes. You may withdraw your consent at any time by sending an email to the addresses provided below.

Performance of Contract

To fulfill the contract between us, we process various types of contact, financial, and service-related information. This allows us to provide you with our products and services in accordance with the contractual obligations set forth in our agreement, as well as our Terms of Use via the BDSLCCI Web Portal.

Legitimate Interests

We may use your personal information for our legitimate interests, including compliance with applicable laws, direct marketing, market research, web analytics and profiling, customer service, record-keeping, review, research, and analysis, as well as fulfilling our legal obligations, security, and storage. Such processing will always ensure that your rights and freedoms are not exceeded. You have the right to object at any time to the processing of your personal data based on legitimate interests, depending on factors specific to your circumstances. The 'Right to Object' provision in this Privacy Statement offers more details on this right and explains how to exercise it.

A cookie is a small informational text file that is downloaded and stored on your computer or mobile device when you visit our online portal. Cookies are used to capture specific data about your preferences, location, session details, and other user activities, as well as to track actions and interactions. On this web portal, we use cookies and related technologies to ensure you have the best possible experience. You can always delete cookies from any web portal by adjusting your browser's preferences or content settings.

BDSLCCI collects, records, and may analyze information from visitors to our Web Portals, including recording your IP address and using cookies. Additionally, BDSLCCI collects and processes any personal data that you voluntarily share with us via Web Portal forms, such as when you register for events or subscribe to newsletters and updates. This data is utilized to deliver customized content and advertising within BDSLCCI, targeting customers whose behavior suggests an interest in specific subject areas. If you provide BDSLCCI with your social media details, BDSLCCI may retrieve publicly available information about you from social media platforms.

In most cases, we will require your consent to use cookies on this Web Portal. Exceptions include cases where the cookie is essential for providing the service you have requested or necessary for the core functionality of the Web Portal. For cookies requiring your consent, you will be prompted to provide it through a checkbox pop-up on the Web Portal homepage, which you must complete to gain full access to the Web Portal.

Rejecting cookies may limit your browsing experience on BDSLCCI Web Portals, affecting essential features such as login, location-specific data, and other information dependent on demographics. However, you will have the opportunity to opt out of cookie usage while consenting by managing cookie collection through the settings provided on the cookie banner.

BDSLCCI does not share cookie information with any other website, nor do we sell this data to third parties. However, we work with third-party suppliers who may also set cookies on our Web Portal. By consenting to the use of cookies on our site, you are also consenting to the use of these cookies.

The Digital Personal Data Protection Act 2023 of India (DPDP Act, 2023) grants you several rights concerning your personal information.

The Right to be Informed

BDSLCCI is publishing this Privacy Policy Statement to keep our users informed as to what we do with their personal information and what are their rights, in a clear, transparent, and easily understandable manner.

The Right of Access

You have the right to obtain access to your information that we are processing and certain other information, in accordance with data protection law. Contact BDSLCCI if you wish to access the personal information BDSLCCI holds about users/data subjects.

The Right to Rectification

You are entitled to have your information corrected if it’s inaccurate or incomplete.

The Right to Erasure

This is also known as ‘the right to be forgotten’. If users want BDSLCCI to erase all personal data and we do not have a legal reason to continue to process and hold it, please contact us at legal@secureclaw.in. This is not a general right to erasure; there are exceptions. If however, you do not fall within the ambit of exceptions, we will delete your data within a period of thirty (30) days.

The Right to Restrict Processing

You have rights to ‘block’ or suppress further use of your information. Users have the right to ask BDSLCCI to restrict how we process user data. This means we are permitted to store the data but not further process it. We keep just enough data to make sure we respect our users request in the future.

The Right to Data Portability

BDSLCCI allows to obtain and reuse personal data for purposes across services in a safe and secure way without this effecting the usability of user data.

The Right to Withdraw Consent

If users have given us their consent to process their data but change their mind later, they have the right to withdraw their consent at any time, and BDSLCCI stop processing their data. Users can write to legal@secureclaw.in

The Right to Object to Processing and Automated Processing

You have right to object to the processing and automated profiling of your personal information as per applicable data protection laws. If you wish to object to the processing or automated processing of your personal information, please contact us at legal@secureclaw.in

You can obtain further information and advice about your rights from the data protection regulator in your country.

In compliance with the applicable data privacy laws and regulations of the jurisdictions where BDSLCCI operates, including the Digital Personal Data Protection Act 2023 of India (DPDP Act, 2023), the contact details of the appointed Data Protection Officer are listed below:

We will retain your personal information as long as necessary to fulfill the purposes for which it was collected. Additionally, we retain and use your personal information to comply with business requirements, legal obligations, resolve disputes, protect our assets, and enforce our agreements. We establish standard retention periods for various categories of personal information in our possession. When standard retention periods cannot be determined, we base our retention decisions on the following criteria:
1. DPO Email: legal@secureclaw.in
2. If you have any questions about this policy or other privacy concerns, you may reach out to us via email at the provided contact details.
3. Users may unsubscribe from our marketing communications by clicking on the 'unsubscribe' link located at the bottom of our emails or by sending an email to legal@secureclaw.in. However, customers cannot opt out of receiving automated emails related to their account or our services, such as Aspen emails and certification renewal emails.
4. If you would like to opt out of sharing your personally identifiable information or personal information submitted on our Web Portal with third parties or for other purposes, please contact us at legal@secureclaw.in and clearly state your preference not to share such information.
5. However, this may restrict your access to certain services, as our services are internally linked to various platforms.
6. However, in the following circumstances, we may still be required to share your personal information:
   BDSLCCI does not sell, rent, or lease your personal information to third parties without your explicit consent. BDSLCCI shares personal information through the following methods:
   • If we are responding to court orders or legal processes, or if we need to establish, exercise, or defend our legal rights.
   • If we believe it is necessary, we may share information to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations of our Terms of Use, or as required by law.
   • If we believe it is necessary to restrict or prevent any user from using our Web Portals, including, but not limited to, actions such as 'hacking' or defacing any part of the portal.

If you click on any links to third-party websites, you may be redirected to websites that we do not control. This policy does not apply to the privacy practices of those websites. Please read their privacy policies carefully, as we are not responsible for the practices or content of these third-party sites.

BDSLCCI reserves the right to terminate or suspend any account or delete specific content from any profile or public domain within the scope of this website if the account or content is found to violate our Privacy Policy Statement. We request that you respect the privacy and confidentiality concerns of others. The jurisdiction for any breach or dispute will be determined in accordance with the website's terms of use.

BDSLCCI does not accept any reservations or partial acceptance of our Privacy Policy Statement. By agreeing, you expressly consent to each and every term and condition outlined in this Policy Statement without any exceptions.

This Privacy Policy Statement forms part of the Terms of Use and Terms of Service displayed on BDSLCCI’s family of websites. We have made every effort to ensure consistency and avoid any conflict between this policy and other terms, agreements, or guidelines available on our websites. In the event of a conflict, please contact us at legal@secureclaw.in for the final provision and interpretation.

BDSLCCI welcomes your feedback regarding this Privacy Policy Statement. If you believe that BDSLCCI has not complied with this Privacy Policy Statement, please contact us at legal@secureclaw.in. We will make commercially reasonable efforts to promptly assess and resolve the issue. Requests are generally processed, and information is provided free of charge. However, we may impose a reasonable fee to cover administrative costs for baseless, excessive, or repeated requests, or for additional copies of the same information. In certain cases, the law may permit us to decline acting on the request.

Periodically, BDSLCCI updates the Privacy Policy Statement to incorporate feedback from the business and its clients. As mandated by law, we will notify you of any significant changes to this policy. An updated version will also be accessible on our website. We recommend reviewing this Policy Statement regularly to stay informed about how BDSLCCI ensures the security of your data.