Privacy Policy — LYL BCM

Who We Are

This Privacy Policy explains how LYL BCM collects, uses, stores, and protects your personal information when you access https://lylbcm.org or use any of our Services.

The Services are operated by:

LYL Corp International LLC, a limited liability company organized under the laws of the State of Delaware, USA (“LYL Corp”) — global brand and IP owner, responsible for membership and AMF data.
LYL Corp LLP, a limited liability partnership incorporated under the Limited Liability Partnership Act, 2008, in Hyderabad, Telangana, India (“LYL India”) — operational and support entity, responsible for processing training, examination, and customer support data.

Together referred to as “LYL BCM,” “we,” “us,” or “our.”

This Policy is incorporated by reference into our Terms of Use.

1. Information We Collect

1.1 Information You Provide Directly

Account & Registration: Name, email address, country, professional details, and username.
Purchases & Payments: Name, billing address, and payment method details. Payment card data is processed by Stripe and is not stored by us.
Certification & Examination: Professional credentials, work experience, and identification submitted as part of certification applications or exam registrations.
Communications: Information shared when you contact our support team, submit feedback, or participate in surveys or forums.

1.2 Information We Collect Automatically

Usage Data: Pages visited, time spent, links clicked, and actions taken on our website.
Device & Technical Data: IP address, browser type, operating system, device identifiers, and referring URLs.
Cookies & Tracking Technologies: We use cookies and similar technologies to recognize your browser, remember preferences, and measure website performance.

1.3 Information from Third Parties

Payment Processors: Transaction confirmation and status from Stripe.
Analytics Providers: Aggregated and anonymized usage data from services such as Google Analytics.

2. How We Use Your Information

We use your personal information only for the following purposes:

To deliver Services — processing your AMF, exam registration, certification issuance, and training access.
To manage your account and certification records.
To process payments and manage auto-renewal through Stripe.
To communicate transactional updates (order confirmations, renewal reminders, exam results, certification notices) and, where you have opted in, newsletters.
To provide customer support globally.
To maintain certification integrity — verifying credentials, investigating false certification claims, and enforcing our Code of Professional Ethics.
To improve our Services through usage analysis.
To comply with legal obligations.

We do not sell your personal information to third parties.

3. Legal Basis for Processing

EEA and UK Users (GDPR)

Contract performance — to deliver purchased Services.
Legal obligation — to comply with applicable laws.
Legitimate interests — to improve Services and prevent fraud.
Consent — for marketing communications and non-essential cookies.

India Users (DPDP Act, 2023)

LYL Corp LLP acts as the Data Fiduciary for personal data processed in India. We process your data based on consent and to fulfil contractual obligations.

California Users (CCPA/CPRA)

See Section 8 for California-specific rights.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We share data only:

With service providers (Stripe, email platforms, cloud hosting) under strict confidentiality obligations.
Between LYL Corp and LYL India as necessary to deliver the Services and provide global support.
With event co-sponsors where disclosed at registration.
Where required by law, court order, or to protect rights and safety.
In the event of a business transfer, subject to equivalent privacy protections.

5. Data Retention

Data Type	Retention Period
Account data	Duration of membership + 7 years
Certification records	Indefinitely
Payment data	7 years (tax/financial regulations)
Support communications	3 years from last interaction
Marketing data	Until consent withdrawn

6. Cookies & Tracking Technologies

Essential Cookies: Required for website function. Cannot be disabled.
Analytics Cookies: Anonymized usage data (e.g., Google Analytics).
Preference Cookies: Remember your settings across sessions.
Marketing Cookies: Placed only with your consent.

Manage preferences through your browser settings or our cookie consent banner.

7. Your Rights

Depending on your location, you may have rights to: access, correct, delete, port, restrict, or object to processing of your personal data, and to withdraw consent at any time.

India (DPDP Act 2023): As a Data Principal, you have the right to access, correct, and erase your personal data, and to nominate a representative for data rights.

To exercise your rights, contact support@lylbcm.org. We will respond within the timeframe required by applicable law (generally 30 days).

8. California Privacy Rights (CCPA/CPRA)

California residents have the right to know, delete, correct, opt out of sale (we do not sell data), and be free from discrimination for exercising privacy rights. Contact support@lylbcm.org, +1 302 244 7474, or +91 90300 55542.

9. Data Security

We implement appropriate technical and organizational measures including SSL/TLS encryption, access controls, and regular security assessments. No method of transmission is 100% secure. We will notify you of any breach affecting your rights as required by applicable law.

10. Children’s Privacy

Our Services are not directed at individuals under 18. If you believe we have inadvertently collected data from a minor, contact support@lylbcm.org immediately.

11. International Data Transfers

Your data may be transferred between India and the United States. Where such transfers occur, we ensure appropriate safeguards in accordance with applicable data protection laws, including standard contractual clauses where required under GDPR.

12. Third-Party Links

This Privacy Policy does not apply to third-party websites linked from our Services. We encourage you to review their privacy policies.

13. Changes to This Policy

Material changes will be communicated via email or a prominent website notice at least 14 days before they take effect.

14. Contact Us

LYL BCMA business continuity certification brand of LYL Corp International LLC (Delaware, USA). Operations by LYL Corp LLP (Hyderabad, India).

Phone (India): +91 90300 55542Phone (US): +1 302 244 7474Email: support@lylbcm.orgWebsite: https://lylbcm.org

This Privacy Policy is effective as of September 25, 2026 and supersedes all prior versions.