BHN Training ("we", "us") operates the bhn-training platform. This page explains what personal data we collect, how it's used, and the rights you have under the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and similar regulations.
What we collect
- Account data — name, email, hashed password, role, organization, job title, country, phone (if provided).
- Learning data — courses you enroll in, progress, assessment scores, certificates, BHN credit transactions.
- Application data — credit applications, role-change requests, supporting documents you upload.
- Activity data — only with your analytics consent: page views, feature usage, theme choice, device class. Used to improve the platform; never sold.
- Optional — newsletter subscription preference.
Legal bases for processing (GDPR Art. 6)
- Contract — to deliver the training service to you.
- Consent — for analytics, marketing communications, and the BioHubNet newsletter.
- Legitimate interest — security, fraud prevention, audit logging.
- Legal obligation — record-keeping for certifications, regulatory compliance.
Your rights
You have the right to:
- Access your data — download a complete export from the Privacy section of your profile.
- Rectify inaccurate data — edit your info anytime in your profile.
- Erase your account — request deletion from your profile. We retain audit trail and aggregate analytics in compliance with regulatory record-keeping; everything else is removed within 30 days.
- Restrict or object — withdraw analytics or marketing consent anytime.
- Portability — export your data as JSON.
- Opt out of sale (CCPA) — we don't sell personal data. Period.
- Lodge a complaint with your local supervisory authority.
Data we share
We use three sub-processors, all under data-processing agreements:
- Neon (managed PostgreSQL) — application database. EU + US regions available.
- Cloudflare (R2 object storage, Workers AI) — file storage and AI inference.
- Vercel — application hosting, edge network.
We do not sell or rent your personal information. We disclose data only when legally required (court order, lawful subpoena) or to the sub-processors above strictly to operate the service.
Cookies & tracking
We use a small number of cookies / localStorage entries:
- Necessary — your session, theme, language. Always set.
- Analytics — only set if you accept. Page views and feature usage, tied to your account when signed in.
- Marketing — only set if you accept. Used to attribute newsletter signups and similar actions.
You can change cookie preferences at any time from your profile.
Retention
Account and learning data are kept while your account is active. Audit log entries are retained for 7 years to support regulatory compliance. On deletion request, all other personal data is removed within 30 days.
Contact
For privacy questions or to exercise any of the rights above, reach out via the contact form or write to privacy@biohubnet.example.