1. Information We Collect

When you register for an account, book a study seat, or contact Being Assets Library, we may collect the following personal information:

• Identity Data: Full Name, Gender, City, and student/aspirant profile details.
• Contact Data: Email address, WhatsApp and SMS mobile phone numbers.
• Booking & Attendance Records: Reserved seat numbers, time slot bookings, membership validities, and entry timestamps.
• Financial & Transaction Details: Payment status, transaction ID, order reference numbers (handled via PCI-DSS compliant Razorpay payment gateways; we never store your credit card or UPI passwords).
• Technical Data: IP address, browser type, and device information for security auditing and login anomaly prevention.

2. How We Use Your Data

• To process seat reservations, issue electronic booking receipts, and verify seat allocations.
• To send critical authentication and account security OTPs via Email, DLT SMS, and WhatsApp API.
• To deliver payment confirmations, booking reminders, and validity renewal alerts.
• To maintain library entry logs and ensure compliance with municipal safety standards.

3. Video Surveillance (CCTV) Policy

For scholar security, theft prevention, and dispute resolution, our reading hall, corridors, and entrance are continuously recorded via CCTV. Surveillance footage is accessible only by authorized administrative personnel and law enforcement authorities when legally required.

4. Data Sharing & Third-Party Disclosure

We do not sell, rent, or trade student personal records to any external commercial advertising networks. Data is strictly shared with trusted service providers only as necessary to provide service:

• Payment Processing: Razorpay Software Private Limited for encrypted online payment transactions.
• Communication Gateways: Telecom-approved DLT SMS gateways and WhatsApp Business API providers for dispatching OTPs and transaction receipts.

5. Data Security

We implement industry-standard database encryption, secure HTTPS TLS communication, password hashing (BCrypt), and role-based access control (RBAC) to protect your records against unauthorized access.