🔒

Privacy Policy

📅 Effective: 1 May 2026 🔄 Last Updated: 20 April 2026 🌍 India & UAE

📋 Jump to Section

📌 Who We Are 📦 Data We Collect ⚙️ How We Use Data 🤝 Data Sharing 🍪 Cookies 🔐 Data Security ⏳ Data Retention 👤 Your Rights 👶 Children 📬 Contact Us

At BloodWorks, we respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights in relation to your data. Please read this carefully before using our platform.

By registering on or using BloodWorks, you agree to the practices described in this policy. If you do not agree, please discontinue use of the platform.

Who We Are

BloodWorks is an online professional development platform specialising in laboratory medicine education. We offer paid certified short-term courses and free tutorials for medical students, laboratory technicians, and healthcare professionals.

BloodWorks operates as a sole proprietorship registered in India. For any privacy-related matters, you may contact us at privacy@bloodworks.in.

Data We Collect

We collect the following categories of personal data when you use BloodWorks:

Category	What We Collect	When Collected
Account Information	Full name, email address, password (encrypted), user type (Student / Professional)	During registration
Identity Verification	Student ID card image (for student discount verification only)	Optional — when claiming student discount
Payment Information	Transaction ID, payment status, amount. Card/bank details are processed by Razorpay — we do not store card numbers.	On course purchase
Course Activity	Courses enrolled, video watch progress, quiz scores, quiz attempts, certificate issued	While using the platform
Technical Data	IP address, browser type, device type, operating system, pages visited, session duration	Automatically via cookies/logs
Communication Data	Support tickets, contact form messages, email correspondence	When you contact us

Note on Google Login: If you sign in using Google, we receive your name and email address from Google. We do not receive your Google password or any other Google account data.

How We Use Your Data

We use your personal data for the following purposes:

To create and manage your BloodWorks account
To process payments and provide access to purchased courses
To track your course progress, quiz scores, and award certificates upon passing
To generate and issue your Professional Development Certificate with your name, student ID, and course details
To verify the authenticity of certificates issued through our verification system
To respond to support tickets and general enquiries
To verify student identity for discount eligibility (student ID upload)
To send transactional emails — enrollment confirmations, payment receipts, certificate notifications
To improve the platform through anonymised usage analytics
To comply with applicable laws in India and the UAE

We do not use your data for advertising. We do not sell, rent, or trade your personal information to third-party marketers.

Data Sharing & Third Parties

We share data only where necessary and with trusted partners. Here is who we work with:

Payment Processing

Payments are processed by Razorpay (Razorpay Software Pvt. Ltd., India). When you make a payment, you are subject to Razorpay's own privacy policy. We receive only the transaction ID and payment status — we never see or store your card details.

Video Hosting

Course videos are hosted on YouTube (Unlisted) by Google LLC. Video viewing is subject to Google's Privacy Policy. We use unlisted videos to limit public access.

Authentication

If you choose to log in with Google, your authentication is handled by Google OAuth 2.0. We receive only your name and email from Google.

Hosting & Infrastructure

Our website and user data are hosted on secure servers. All data is stored in accordance with applicable data protection standards.

Legal Disclosures

We may disclose your data if required to do so by law, court order, or government authority in India or the UAE.

We do not share your data with any other third party beyond those listed above.

Cookies & Tracking

We use cookies and similar technologies to make the platform work and to understand how it is used. These include:

Essential Cookies: Required for login sessions, course access, and payment processing. Cannot be disabled.
Functional Cookies: Remember your preferences such as language, dark mode, and last visited course.
Analytics Cookies: Anonymised data about which pages are visited and how users navigate the platform. Used to improve the experience.

You can manage cookies through your browser settings. Disabling essential cookies may affect your ability to log in or access paid courses.

Data Security

We take data security seriously and implement reasonable technical and organisational measures to protect your personal information, including:

Encrypted password storage (passwords are never stored in plain text)
HTTPS encryption for all data transmitted to and from the platform
Payment data handled entirely by Razorpay — card details never touch our servers
Restricted internal access to personal data on a need-to-know basis
Regular review of our security practices

While we take all reasonable precautions, no system is completely secure. In the event of a data breach that affects your rights, we will notify you in accordance with applicable law.

Data Retention

We retain your data for as long as your account is active or as required to provide our services. Here is how we handle specific scenarios:

Active Account: Your data is retained for the duration your account is active on BloodWorks.
Deactivated Account: If you deactivate your account, your data is retained for 30 days. You may reactivate within this period to recover your account. After 30 days, your account and associated personal data are permanently deleted.
Certificate Records: Certificate issuance records (name, course, certificate number, date) may be retained for verification purposes even after account deletion, in line with our certificate authenticity obligations.
Payment Records: Transaction records are retained for 7 years for financial and legal compliance purposes (as required under Indian tax and accounting law).
Student ID Images: Uploaded student ID images for discount verification are deleted within 30 days of verification completion.

Your Rights

Depending on your location (India or UAE), you may have the following rights regarding your personal data:

For Users in India

Under the Digital Personal Data Protection Act, 2023 (DPDPA):

Right to Access: Request a summary of personal data we hold about you
Right to Correction: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data (subject to legal retention obligations)
Right to Grievance Redressal: Raise a complaint with our designated contact if you believe your data has been misused
Right to Nominate: Nominate a person to exercise your rights in the event of your death or incapacity

For Users in the UAE

Under UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection:

Right to Access: Request access to your personal data
Right to Rectification: Request correction of inaccurate data
Right to Erasure: Request deletion of your data where there is no legal basis to retain it
Right to Object: Object to the processing of your data in certain circumstances
Right to Data Portability: Request a copy of your data in a structured format

To exercise any of these rights, contact us at privacy@bloodworks.in. We will respond within 30 days.

Children's Privacy

BloodWorks is designed for adults and working professionals. Our courses are intended for individuals who are at least 18 years of age, or students currently enrolled in a recognised medical or paramedical programme.

We do not knowingly collect personal data from children under the age of 18 without verifiable parental or guardian consent. If you believe a minor has registered on our platform, please contact us at privacy@bloodworks.in and we will take appropriate action.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make significant changes, we will notify you by:

Displaying a notice on the BloodWorks website
Sending an email notification to your registered email address

The "Last Updated" date at the top of this page reflects when the most recent changes were made. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

📬 Privacy Questions or Concerns?

If you have any questions about this Privacy Policy, want to exercise your rights, or wish to raise a complaint, please contact our Privacy Team:

📧 privacy@bloodworks.in | 📧 info@bloodworks.in

📩 Contact Us

ℹ️ This Privacy Policy applies to all users of the BloodWorks platform globally, with specific provisions for users in India and the UAE. For legal enquiries, please reference the applicable jurisdiction stated in our Terms of Service.