GDPR Compliance
Our Commitment: BuildSkill Academy respects your privacy and is dedicated to ensuring that your personal data is processed lawfully, fairly, and transparently. We have implemented comprehensive measures to comply with GDPR and protect your data rights.
1. Data Controller & Contact Information
BuildSkill Academy Private Limited is the Data Controller for all personal data collected through our Platform. If you have any questions about how we handle your data, please contact us:
Email: help@buildskillacademy.in
Phone: +91-8799708172
Address:Buildskill Academy pvt Ltd, Kulesara, Noida, Greater Noida, Uttar Pradesh 201306 ; India
Attn: GDPR Compliance Officer
2. Personal Data We Collect
We collect the following categories of personal data from our users:
| Category | Data Collected | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, gender | Account creation, personalization |
| Contact Data | Email address, phone number, address | Communication, order confirmation |
| Account Data | Username, MPIN, password | Authentication, security |
| Course Data | Enrollments, progress, quiz scores, certificates | Course delivery, tracking |
| Payment Data | Transaction history, billing address | Payment processing |
| Device & Usage Data | IP address, device type, browser, interactions | Analytics, improvement |
| Communication Data | Support tickets, messages, feedback | Customer support |
3. Legal Basis for Processing
We process your personal data based on the following legal grounds:
Contractual Necessity
Processing is necessary for the performance of a contract with you (e.g., providing course access, issuing certificates).
Legal Obligation
Processing is necessary to comply with legal obligations (e.g., tax, regulatory requirements).
Consent
Processing is based on your explicit consent (e.g., marketing communications, cookies).
Legitimate Interests
Processing is necessary for our legitimate business interests (e.g., improving our platform, fraud prevention).
4. Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
Right to Access
Request a copy of all personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Restriction
Request restriction of processing under certain conditions.
Right to Data Portability
Request transfer of your data to another controller.
Right to Object
Object to processing for direct marketing or legitimate interests.
Right to Withdraw Consent
Withdraw consent at any time without affecting previous processing.
Right to Lodge Complaint
Lodge a complaint with a supervisory authority.
How to Exercise Your Rights: To exercise any of your GDPR rights, please contact us at gdpr@buildskillacademy.in. We will respond to your request within 30 days as required by law.
5. Data Storage & Retention
- Storage Location: Your personal data is stored on secure servers located in India and the European Union (for EU users).
- Retention Period: We retain your data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.
- Account Data: Retained for the duration of your account and for a reasonable period after account closure for legal and administrative purposes.
- Course Data: Retained as long as you maintain an account or as required for legal compliance.
- Payment Data: Retained for 7 years to comply with tax and financial regulations.
6. Data Security Measures
We implement robust security measures to protect your personal data:
Encryption
All data is encrypted during transmission (SSL/TLS) and at rest using industry-standard encryption.
Access Controls
Strict role-based access controls ensure that only authorized personnel can access your data.
Data Backups
Regular encrypted backups are maintained to prevent data loss.
Staff Training
All employees receive regular training on data protection and privacy best practices.
7. Data Transfers
- Your personal data may be transferred to countries outside the European Economic Area (EEA) for processing.
- We ensure that such transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs).
- For users in India, data is processed in accordance with the Information Technology Act, 2000.
8. Cookies & Tracking
- We use cookies to enhance your experience, analyze traffic, and remember preferences.
- You can manage cookie preferences through your browser settings.
- For more details, please see our Cookie Policy.
9. Third-Party Processors
We share your data with trusted third-party processors who help us operate our Platform:
- Payment Gateways: Secure payment processing.
- Cloud Hosting Providers: Server hosting and infrastructure.
- Email Service Providers: Communication and notifications.
- Analytics Providers: Platform improvement and usage analysis.
All third-party processors are bound by data processing agreements and comply with GDPR requirements.
10. Children's Data
- Our services are not directed at children under the age of 13.
- We do not knowingly collect data from children under 13.
- If you believe a child has provided us with personal data, please contact us, and we will remove it.
11. Data Breach Notification
- In the event of a data breach, we will notify affected users within 72 hours of discovery.
- We will also notify the appropriate supervisory authority as required by GDPR.
- We have implemented incident response procedures to address potential breaches promptly.
12. Your Rights Under GDPR (Detailed)
As a data subject under the GDPR, you have the following rights. We have summarized them below for your reference:
12.1 Right to Access (Article 15)
You have the right to request a copy of the personal data we hold about you. We will provide you with a copy of your data in a structured, commonly used, and machine-readable format.
12.2 Right to Rectification (Article 16)
If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will rectify any inaccuracies promptly.
12.3 Right to Erasure (Article 17)
Also known as the "right to be forgotten," you have the right to request the deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
12.4 Right to Restriction of Processing (Article 18)
You have the right to request that we restrict the processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.
12.5 Right to Data Portability (Article 20)
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
12.6 Right to Object (Article 21)
You have the right to object to the processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.
12.7 Right to Withdraw Consent (Article 7)
If we are processing your data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
12.8 Right to Lodge a Complaint (Article 77)
You have the right to lodge a complaint with a supervisory authority in the Member State of your habitual residence, place of work, or place of the alleged infringement if you believe that your data protection rights have been violated.
13. Automated Decision-Making
BuildSkill Academy does not use automated decision-making, including profiling, that produces legal effects or similarly significantly affects you. All decisions regarding your account and course access are made by human review.
14. Data Protection Officer (DPO)
BuildSkill Academy has appointed a Data Protection Officer (DPO) to oversee our data protection strategy and ensure compliance with GDPR. You can contact our DPO at:
DPO Email: help@buildskillacademy.in
Phone: +91-8799708172 (Ext. 101)
15. Summary Table
| GDPR Requirement | BuildSkill Academy Compliance |
|---|---|
| Data Controller Identification | ✔ Yes – BuildSkill Academy Private Limited |
| Lawful Basis for Processing | ✔ Yes – Contract, Consent, Legal Obligation, Legitimate Interest |
| Data Subject Rights | ✔ Yes – Access, Rectify, Erase, Port, Object, Restrict |
| Privacy by Design | ✔ Yes – Implemented in platform development |
| Data Protection Impact Assessment | ✔ Yes – Conducted for high-risk processing |
| Data Transfers (EU to Non-EU) | ✔ Yes – SCCs and other safeguards |
| Data Breach Notification | ✔ Yes – Within 72 hours |
| Data Protection Officer | ✔ Yes – Appointed and contactable |
| Cookie Consent | ✔ Yes – User consent obtained |
| Processor Agreements | ✔ Yes – In place with all processors |
| Automated Decision-Making | ✔ Yes – Not used |
| Children's Data Protection | ✔ Yes – No data collected under 13 |
This table summarizes our GDPR compliance status. All requirements are met in accordance with applicable regulations.
16. Changes to This Policy
We may update this GDPR Compliance Policy from time to time. We will notify you of any significant changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Platform after any changes constitutes your acceptance of the new policy.
17. Contact Us
If you have any questions, concerns, or need to exercise your GDPR rights, please reach out to us:
- GDPR Inquiries: gdpr@buildskillacademy.in
- DPO (Data Protection Officer): dpo@buildskillacademy.in
- Legal Inquiries: legal@buildskillacademy.in
- General Support: help@buildskillacademy.in
- Phone: +91-8799708172
- Address:Buildskill Academy pvt Ltd, Kulesara, Noida, Greater Noida, Uttar Pradesh 201306 ; India
BuildSkill Academy is fully committed to GDPR compliance and protecting your privacy rights. Your trust is important to us.