Privacy Policy

1. Introduction

The Organization Learning Labs ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Learning Management System (LMS) platform and services.

This Privacy Policy is compliant with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 of India.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us, including:

• Name, email address, phone number, and contact details
• Company name, job title, department, and role information
• Username, password, and account credentials
• Payment and billing information (processed through secure third-party payment gateways)
• Profile information, preferences, and settings
• Content you create, upload, or share on the platform

2.2 Sensitive Personal Data

In accordance with Indian law, we may collect sensitive personal data including:

• Password and authentication credentials
• Financial information for payment processing
• Learning progress, assessment results, and performance data
• Biometric data (if applicable for authentication)

2.3 Automatically Collected Information

We automatically collect certain information when you use our platform:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, features used)
• Log files and analytics data
• Cookies and similar tracking technologies
• Learning activity and progress tracking

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our LMS platform and services
• Personalization: To create personalized learning paths and recommendations
• Assessment & Analytics: To track learning progress, assess competencies, and generate reports
• Communication: To send notifications, updates, and respond to your inquiries
• Account Management: To manage your account, process payments, and provide customer support
• Compliance: To comply with legal obligations and enforce our terms of service
• Security: To detect, prevent, and address security issues and fraud
• Research & Development: To improve our services and develop new features (using anonymized data)

4. Legal Basis for Processing

Under Indian law, we process your personal data based on the following legal grounds:

• Consent: You have provided explicit consent for processing your personal data
• Contract Performance: Processing is necessary to perform our contract with you
• Legal Obligation: Processing is required to comply with applicable laws and regulations
• Legitimate Interests: Processing is necessary for our legitimate business interests (with proper safeguards)

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our platform, including:

• Cloud hosting and infrastructure providers
• Payment processing services
• Email and communication services
• Analytics and monitoring tools
• Customer support platforms

All service providers are contractually obligated to protect your information and use it only for specified purposes.

5.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety.

5.4 With Your Consent

We may share your information with your explicit consent or at your direction.

6. Data Security

We implement reasonable security practices and procedures in accordance with Indian law to protect your personal information:

• Encryption of data in transit (SSL/TLS) and at rest
• Secure authentication and access controls
• Regular security audits and vulnerability assessments
• Employee training on data protection and privacy
• Incident response and breach notification procedures
• Secure data centers with physical and logical security measures
• Regular backups and disaster recovery procedures

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard security practices.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:

• Active Accounts: Data is retained while your account is active
• Inactive Accounts: Data may be retained for up to 2 years after account closure for legal and business purposes
• Legal Requirements: Some data may be retained longer if required by law or for dispute resolution
• Anonymized Data: We may retain anonymized, aggregated data indefinitely for analytics and research

8. Your Rights Under Indian Law

As a data subject under Indian law, you have the following rights:

• Right to Access: You can request access to your personal information we hold
• Right to Correction: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data (subject to legal obligations)
• Right to Withdraw Consent: You can withdraw your consent at any time
• Right to Data Portability: You can request a copy of your data in a structured format
• Right to Object: You can object to certain processing activities
• Right to Grievance Redressal: You can file a complaint with us or the relevant authority

To exercise these rights, please contact us at support@theorganizationlearninglabs.com. We will respond to your request within 30 days as required by law.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for platform functionality and security
• Analytics Cookies: Help us understand how you use our platform
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Used for targeted advertising (with your consent)

You can control cookies through your browser settings. However, disabling certain cookies may affect platform functionality.

10. Children's Privacy

Our platform is designed for organizational use and is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

11. International Data Transfers

Your data is primarily stored and processed in India. If we transfer data outside India, we ensure appropriate safeguards are in place as required by Indian law, including:

• Standard contractual clauses
• Adequate data protection measures
• Compliance with applicable data protection laws

12. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending an email notification to registered users
• Displaying a prominent notice on our platform

Your continued use of our services after such changes constitutes acceptance of the updated Privacy Policy.