Your Privacy and Personal Information
BGB 360 (PRIVATE) LIMITED, a company incorporated in Pakistan under the Companies Act, 2017 with Corporate Unique Identification Number 0309406, operates BGB 360 and BGB 360 Academy. We respect the privacy of learners, parents, educators, professionals, organizational users and visitors.
This policy explains how we collect, use, disclose, retain and protect personal information when you use our websites, mobile applications, learning platform and related services.
This policy applies alongside our Terms of Use, Acceptable Conduct Policy and Safeguarding Policy. Additional notices may be provided when a particular feature, organization or service processes information differently.
1. Who Is Responsible for Personal Information?
BGB 360 (PRIVATE) LIMITED is generally responsible for personal information used to operate accounts, public services, platform administration, security, support and direct customer relationships.
When a school, college, academy, employer or other organization provides access and determines why information about its learners, instructors or personnel is processed, that organization may be the data controller and we may act as its service provider or data processor. In that situation, the organization’s privacy notice and instructions may also apply, and privacy requests relating to its records may need to be addressed to that organization.
2. Information We Collect
Depending on your relationship with the platform, we may collect account and contact information such as your name, email address, telephone number, username, country, language and account role.
We may collect profile and professional information, including photographs, biographies, subjects, skills, qualifications, employment history, instructor details, organization details and documents submitted for verification.
Learning and service records may include enrolments, attendance, course activity, assessments, assignments, progress, meetings, events, certificates, validation records, bookings, purchases and communications associated with your account.
Technical information may include IP address, device and browser information, operating system, application identifiers, authentication records, cookie information, diagnostic records, security events and usage activity.
We may also receive messages, reviews, forum contributions, support requests, job applications and other information you choose to provide. Please avoid submitting personal or sensitive information that is unnecessary for the relevant service.
3. Where Information Comes From
We collect information directly from you when you register, complete a profile, purchase or provide a service, communicate through the platform, submit content or contact support.
Information may also come from a parent or guardian, instructor, educational institution, employer, organizational administrator, payment provider, authentication provider or another user involved in a relevant service. Where Google or another sign-in provider is used, we receive only the account information authorized by you and that provider; we do not receive your provider password.
4. How We Use Personal Information
We use personal information to register and authenticate accounts; provide courses, tutoring, meetings, eBooks, assessments, certificates, jobs and institutional services; manage bookings and transactions; support communication between relevant users; provide technical and customer support; and maintain service records.
Information may also be used to secure accounts and services, prevent fraud and misuse, investigate reported concerns, maintain platform integrity, improve functionality, administer organizational services, meet accounting and legal requirements and send permitted service or marketing communications.
5. Legal Bases for Processing
Where applicable law requires a legal basis, we process information when necessary to provide a requested service or perform a contract; comply with a legal obligation; protect a person’s vital interests; or pursue legitimate interests such as platform administration, security, fraud prevention, support and responsible service improvement, provided those interests are not overridden by individual rights.
We rely on consent where required, including for certain optional communications, non-essential technologies or specific uses of information. Consent may be withdrawn at any time, although withdrawal does not affect processing already carried out lawfully.
6. Sensitive Information
Some educational, accessibility, safeguarding or identity-verification activities may involve information requiring additional legal protection. We process such information only when necessary, proportionate and supported by an appropriate legal condition. Users should not place health, identification, financial or other sensitive information in public profiles, forums, reviews or ordinary messages.
7. Children and Young Learners
Educational services may be used by learners of different ages. Where a child requires parental, guardian or institutional authorization under applicable law, the responsible adult or organization must provide or confirm that authorization before the relevant service is used.
We seek to use children’s information only for appropriate educational, administrative, safety and safeguarding purposes. Parents, guardians and responsible organizations should supervise account use where appropriate and contact us if information appears to have been provided without proper authorization.
8. Public Profiles and User Content
Information placed in an instructor profile, organization profile, course listing, review, forum, job listing or other public feature may be visible to visitors or registered users. Users should publish only information suitable for public viewing.
Removing public content does not necessarily remove copies already lawfully retained for security, dispute resolution, legal compliance or platform records. Search engines and other third parties may also retain cached copies outside our control.
9. Payments and Transactions
Where payments are available, authorized payment providers may process card, bank or wallet information under their own privacy terms. We may receive transaction identifiers, payment status, amount, currency, billing details and limited information needed for accounting, refunds, fraud prevention and support. We do not intentionally store complete payment-card credentials unless clearly stated and lawfully arranged.
10. When Information Is Shared
We do not sell personal information. Information may be shared with instructors, learners, parents, organizations or administrators where necessary to deliver a requested course, meeting, institutional service or other platform function.
We may use service providers supporting hosting, authentication, communications, mobile notifications, payments, analytics, customer support, security and technical infrastructure. Providers receive only information reasonably necessary for their authorized services and are expected to protect it through appropriate contractual, technical and organizational measures.
Information may also be disclosed to professional advisers, insurers, auditors, prospective corporate successors or competent authorities where disclosure is legally required, necessary to establish or defend legal claims, or reasonably necessary to protect rights, safety and service security.
11. International Data Transfers
Our users, operations and service providers may be located in different countries. Where personal information is transferred from a jurisdiction that restricts international transfers, we use or require an applicable lawful mechanism. Depending on the circumstances, this may include an adequacy decision, approved contractual clauses, organizational safeguards or another mechanism permitted by applicable law.
12. Data Retention
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected. Retention periods depend on the type of record, account status, service requirements, organizational instructions, certificate integrity, safeguarding needs, security risks and applicable accounting, tax and legal obligations.
When information is no longer required, it is deleted, anonymized or securely restricted. Some records may be retained after account closure where necessary for legal compliance, fraud prevention, dispute resolution, safeguarding, security, financial records or verification of legitimately issued certificates.
13. Security
We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss and misuse. These measures may include access controls, authentication safeguards, logging, backups, restricted administration and appropriate provider controls. No online service or transmission method can be guaranteed to be completely secure, and users are responsible for protecting their credentials and devices.
14. Cookies and Similar Technologies
Our websites and applications may use essential technologies for authentication, security, language, preferences and core operation. Analytics, advertising or other non-essential technologies will be used subject to applicable notice and consent requirements. Browser or device controls may allow you to restrict certain technologies, but some features may not function correctly as a result.
15. Your Privacy Rights
Depending on applicable law, you may have rights to request access to your personal information; correct inaccurate or incomplete information; request deletion; restrict processing; object to certain processing; receive eligible information in a portable format; and withdraw consent where consent is the legal basis.
These rights are not absolute and may be limited by lawful exemptions, the rights of others or records we must retain. We may verify your identity and authority before responding. Requests are generally free of charge, although applicable law may permit a reasonable fee or refusal for manifestly unfounded or excessive requests.
16. Account and Data Deletion
To request account deletion, email info@bgb-360.com from the address registered with your account and use the subject Account Deletion Request. Identify the account concerned and provide any information reasonably required to verify your identity or authority.
Following verification, information that is no longer required will be deleted or anonymized. Uninstalling a mobile application does not delete the associated account or platform records. Questions about deleting specific information without closing an account may be submitted through the same email address.
17. Automated Decisions
We do not use personal information to make solely automated decisions that produce legal or similarly significant effects unless we provide specific notice and implement the safeguards required by applicable law. Search filters, sorting, recommendations and administrative indicators are not intended to make final legal, admission, employment or disciplinary decisions about users.
18. Complaints and Supervisory Authorities
Please contact us first so we can review and respond to a privacy concern. Individuals may also have the right to complain to the data-protection authority responsible for their place of residence, work or the location of an alleged infringement.
Users in Norway can obtain information from Datatilsynet, the Norwegian Data Protection Authority.
19. Policy Updates
We may update this policy when our services, providers, legal obligations or data practices change. The current version will be published on this page. Where required, significant changes will be communicated through the platform, application, email or another appropriate method before they take effect.
20. Privacy Contact
BGB 360 (PRIVATE) LIMITED
Corporate Unique Identification Number: 0309406
Operating BGB 360 and BGB 360 Academy
View Certificate of Incorporation
Norway contact address
Hellebakkane 60
5215 Lysekloster, Norway
Pakistan contact address
204, RiverView, Bahria Town Phase 8
Islamabad, Pakistan
Privacy questions, rights requests and deletion requests: info@bgb-360.com
