1. About this Notice
This Consent Notice is issued by Allied Business Systems Education & Research Institute Pvt. Ltd. (“BSERI”, “we”, “our”, “us”). It tells you, in clear and plain language, exactly what personal data we ask for, why we ask for it, and how you can give, manage and withdraw your consent, exercise your rights, and complain if something goes wrong.
This Notice is given to you before, or together with, every request we make for your consent. Your consent is valid only for the specific purposes described here, and only for the personal data that is necessary for those purposes.
Language access: You may access this Notice, and every consent request we present to you, in English or in any language specified in the Eighth Schedule to the Constitution of India. To request the Notice in another language, write to privacy@bseri.net.
2. Who we are
BSERI is the Data Fiduciary for the personal data described in this Notice — that is, we decide the purpose and means of processing your personal data. For visitors and candidates located in the European Economic Area (EEA) or the United Kingdom, BSERI acts as the data controller within the meaning of the GDPR.
3. What personal data we collect — itemised description
We collect only the personal data listed below, and only what is necessary for the purpose for which you give consent.
| Category | Personal data items |
|---|---|
| Identity details | Full name; date of birth; photograph; government-issued identity document type and number (for examination identity verification only) |
| Contact details | Email address; mobile number; postal address; city, state and country of residence |
| Examination and qualification data | Examination(s) applied for; admit card / candidate ID; examination centre or remote-proctoring details; answers and scores; result and Certificate of Qualification details |
| Professional details (membership only) | Educational qualifications; work and professional experience; current designation and employer; other attainments you choose to submit in support of membership |
| Payment details | Payment reference, amount, date and instrument type. Card/banking credentials are processed directly by our authorised payment gateway; BSERI does not store them |
| Technical data (website) | IP address; browser and device information; cookie identifiers — see Annexure B |
4. Why we process your personal data — specified purposes
Each purpose below is a separate, specified purpose. You will be asked to consent to each applicable purpose individually, through a separate, clear affirmative action (for example, an unticked checkbox that you tick yourself). We never bundle consents, and we never pre-tick boxes.
| Purpose | Personal data used | Service enabled |
|---|---|---|
| P1. Examination registration and administration | Identity; contact; examination; payment | Register, schedule, verify identity, conduct and evaluate the examination |
| P2. Results and Certificate of Qualification | Identity; examination and qualification data | Declare result and issue Certificate of Qualification |
| P3. Membership assessment and administration | Identity; contact; professional; qualification | Evaluate eligibility and administer membership |
| P4. Publication of your name | Name; credential; year; city/country (optional) | Public listing of Practitioners and Members |
| P5. Training course enrolment and delivery | Identity; contact; payment | Enrol and deliver course materials and sessions |
| P6. Updates and communications | Name; email; mobile | Newsletters, examination announcements, professional updates |
| P7. Responding to enquiries | Name; contact; enquiry content | Answer questions via contact form or email |
5. The standard of your consent
Your consent, when we ask for it, will always be free, specific, informed, unconditional and unambiguous, and given through a clear affirmative action, as required by Section 6(1) of the DPDP Act, 2023 and Article 4(11) read with Article 7 of the GDPR. Your consent signifies agreement to the processing of your personal data only for the specified purpose(s) you select, and is limited to the personal data necessary for those purpose(s). Any part of a consent that would infringe the DPDP Act, its Rules or any other law is invalid to that extent.
6. Withdrawing your consent
You may withdraw any consent, for any purpose, at any time. Withdrawing is as easy as giving consent was:
- Online: visit Manage / Withdraw Consent
- Email: write to privacy@bseri.net from your registered email address, stating the purpose(s) for which you withdraw
On withdrawal, we will stop — and will cause our Data Processors to stop — processing your personal data for that purpose within a reasonable time, unless continued processing is required or authorised by law. Withdrawal does not affect the lawfulness of processing already carried out. The consequences of withdrawal (for example, inability to complete an examination registration if you withdraw Purpose P1) are borne by you.
You may also give, manage, review or withdraw consent through a Consent Manager registered with the Data Protection Board of India, once such Consent Managers are operational.
7. Your rights
Under the DPDP Act, 2023 (Sections 11–14) you have the right to:
- Access: a summary of your personal data, processing activities, and identities of Data Fiduciaries and Data Processors with whom it has been shared
- Correction and erasure: correct inaccurate data, complete incomplete data, update, and erase unless retention is required
- Grievance redressal: register a grievance and receive a response within the period in Section 10
- Nomination: nominate another individual to exercise your rights in the event of death or incapacity
EEA/UK (GDPR Articles 15–22): access, rectification, erasure, restriction, portability, objection, and the right not to be subject to solely automated decision-making with legal or similarly significant effects. BSERI does not carry out such automated decision-making; examination results use defined assessment processes with human oversight.
To exercise any right, use Manage / Withdraw Consent or write to privacy@bseri.net, quoting your candidate ID, membership number or registered email.
8. Retention and erasure
We keep your personal data only as long as the specified purpose is being served or as law requires. When you withdraw consent, or when it is reasonable to assume the specified purpose is no longer served, whichever is earlier, we erase your data and cause our Data Processors to erase it. Records of your qualification (name, credential, result) are retained as long as your Certificate of Qualification remains valid and verifiable. Logs of processing are retained for a minimum of one year as required by the DPDP Rules, 2025.
9. Children and persons with disability
BSERI examinations are open to all. If you are under 18, we process your personal data only after obtaining verifiable parental or guardian consent under Rule 10 of the DPDP Rules, 2025. Where a person with disability has a lawful guardian, we obtain the guardian’s verifiable consent after due diligence under Rule 11. BSERI does not undertake tracking, behavioural monitoring of children, or targeted advertising directed at children.
10. Grievances and complaints
Step 1 — Contact us first: Raise any grievance with our Grievance Officer at privacy@bseri.net or through our contact form. We will acknowledge and respond within 30 days (not exceeding 90 days), as published under Rule 14 of the DPDP Rules, 2025.
Step 2 — Data Protection Board of India: If you are not satisfied after exhausting our grievance redressal, you may complain to the Data Protection Board of India. Details will be available on the Board’s website when published.
EEA/UK individuals may also lodge a complaint with the supervisory authority of their habitual residence, place of work, or the place of the alleged infringement.
11. Sharing, processors and international transfers
We share personal data only with Data Processors engaged under valid contracts (for example, examination platform providers, remote-proctoring services and payment gateways), and only for the purposes stated in this Notice. We remain responsible for their processing. We do not sell your personal data.
BSERI is located in India and your data is processed in India. Any transfer outside India will comply with Section 16 of the DPDP Act. For EEA/UK individuals, where GDPR applies, we rely on appropriate safeguards such as Standard Contractual Clauses; you may request a copy of them.
12. Changes to this Notice
If we change the purposes of processing or the personal data we collect, we will give you a fresh notice and, where required, seek fresh consent before the new processing begins. The current version is always available at https://bseri.net/legal/consent-notice.
Annexure A — Model consent statements
Each statement appears with its own unticked checkbox. Ticking is a clear affirmative action; none is pre-selected; none is bundled with terms of service.
- “I have read the Consent Notice and I consent to BSERI processing my personal data listed for Purpose P1 to register me for, verify my identity in, and administer the examination I have selected.”
- “I consent to BSERI processing my personal data for Purpose P2 to declare my result and issue my Certificate of Qualification.”
- “I consent to BSERI processing my professional details for Purpose P3 to assess and administer my BSERI membership.”
- “Optional — I consent to BSERI publishing my name, credential attained and year of qualification on the BSERI website (Purpose P4). I understand I may withdraw this consent at any time and my name will then be removed.”
- “Optional — I consent to receiving updates about BSERI examinations, courses and professional activities by email/SMS (Purpose P6). I can unsubscribe at any time using the link in every message.”
Consent for Purposes P4 and P6 is expressly optional. Purpose P5 (training) and P7 (enquiries) use equivalent purpose-specific statements on the relevant forms.
Annexure B — Cookie Notice and banner text
Banner text: “BSERI uses strictly necessary cookies to make this website work. With your consent, we also use analytics cookies to understand how the site is used. We do not use advertising or tracking cookies. [Accept analytics] [Reject analytics] [Cookie settings]”
- Strictly necessary cookies: session management, security, load balancing — no consent required
- Analytics cookies: set only after an affirmative Accept; rejecting never degrades access; change anytime via Cookie settings in the footer
No pre-ticked boxes, no cookie walls, and equal prominence for Accept and Reject. See also our Cookie Policy.