Effective: 24 September 2026
This policy explains how Connect Orbit Technologies (also known as Connectorbit Technologies), F 2, Bee Kay Homes, Plot No 6, 1st Floor, NV Rajan Street, Madipakkam, Chennai, Tamil Nadu 600091, India (“we”) handles personal data on Business Domain Connect at businessdomainconnect.com. We follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.
1. What we collect
- Account details: your name, email address, password (stored only in hashed form by our authentication provider), and, if you add them, your role, the domains you are interested in and a profile photo.
- Learning activity: the sessions you have watched, your progress, enrolment requests and the domains you have unlocked.
- Payments: the order and payment reference, amount, currency, date and payment method type (for example “UPI” or “card”). We never receive or store your full card number, CVV, UPI PIN or bank login. Those are handled entirely by Razorpay.
- Assessment and certificates: your answers, score and result; during a proctored assessment, webcam images or video and browser events (such as leaving the test tab) used to check the rules were followed; and the details printed on your certificate.
- Enquiries: what you send through the corporate enquiry form, email or WhatsApp: name, organisation, email, phone and message.
- Technical data: basic logs (IP address, browser type, time of request) kept by our hosting provider for security, and small items saved in your browser (local storage) to keep you signed in and remember your settings. We do not use advertising or tracking cookies.
2. Why we use it
- to create and run your account and show your progress;
- to take payment, unlock what you paid for and keep the records the law requires;
- to run fair assessments and issue, verify or, when necessary, withdraw certificates;
- to reply to you, and to send service emails (account confirmation, password reset, receipts, access updates);
- to keep the website secure and prevent fraud and account sharing.
We rely on your consent, which you give when you create an account or submit a form, and on the need to provide the service you asked for and to meet legal obligations. We do not sell your personal data, and we do not use it for third-party advertising.
3. Who processes it for us
We share data only with the service providers we need to run the platform, each bound by its own privacy and security terms:
- Google Firebase (Google LLC): sign-in, database, website hosting and server functions. Our database is located in Mumbai, India (asia-south1).
- Razorpay (Razorpay Software Pvt. Ltd.): payment processing.
- Bunny.net (BunnyWay d.o.o.): delivery of paid videos.
- YouTube (Google LLC): free sessions embedded on the site. YouTube applies its own privacy policy when you play a video.
- Web3Forms: forwards enrolment requests to our inbox.
Some of these providers may process data outside India. We may also disclose data where the law requires it, or to protect our rights and users against fraud.
Certificate verification is public by design: anyone who enters a certificate number on the verification page can see the holder's name, the domain, the dates and whether the certificate is valid. Your email address, score and payment details are never shown there.
4. How long we keep it
- Account and learning data: while your account is open. When you ask us to delete your account, we delete it within 30 days.
- Payment and invoice records: 8 years, as Indian tax and accounting law requires, even if the account is deleted.
- Proctoring recordings: no longer than 90 days after the result, unless needed for an integrity review or dispute.
- Certificate records: kept permanently so certificates can always be verified, including a record that a certificate was withdrawn.
- Enquiries: up to 2 years.
5. Your rights
You can ask us to tell you what data we hold about you, correct or update it, delete it (subject to the retention rules above), withdraw consent, or nominate someone to act for you. You can edit most profile details yourself on your profile page. For anything else, email businessdomainlab2026@gmail.com from the address on your account. We reply within 30 days.
6. Security
Data is sent over encrypted HTTPS connections. Access to learner records is restricted by database rules to you and to us. Paid videos are delivered through signed, time-limited links. No system is perfectly secure, but if a breach affects your data we will inform you and the authorities as the law requires.
7. Children
The platform is intended for adults and students aged 18 or over. Anyone younger may use it only with a parent's or guardian's consent, and the parent or guardian should create the account.
8. Grievance Officer
If you have a concern about how your data is handled, contact our Grievance Officer, Chandramouli Pasumarthy, at businessdomainlab2026@gmail.com or +91 63096 31881. We acknowledge complaints within 48 hours and aim to resolve them within 30 days. You may also approach the Data Protection Board of India.
9. Changes
We may update this policy. The date at the top shows the latest version; we will tell account holders about significant changes by email.
10. Contact
Connect Orbit Technologies
F 2, Bee Kay Homes, Plot No 6, 1st Floor
NV Rajan Street, Madipakkam
Chennai, Tamil Nadu 600091
India
Email: businessdomainlab2026@gmail.com
Phone / WhatsApp: +91 63096 31881