Legal

Privacy Policy

Your privacy matters. Here is exactly what we collect, why we collect it, and how we keep it safe.

Last updated: June 2026

CTRLab – NextGen Solutions (ctrlab.in) respects your privacy. This Privacy Policy explains what information we collect when you visit ctrlab.in or use our services, why we collect it, and the steps we take to protect it. By using our website or services, you agree to the practices described here.

1. Information we collect

We collect only the information necessary to operate our business and serve our clients:

  • Contact information — name, email address, phone number, and company details you submit through our contact form or share over email, phone, or WhatsApp.
  • Demo request details — information provided when you request a product demo, including your role, organization, and the product you are interested in.
  • Usage data — pages visited, referring URLs, browser and device type, IP address, and approximate location, collected through privacy-respecting analytics.
  • Admin account data — credentials and activity data for clients using our managed products, such as the CTRLab admin dashboard, School Management System, or Inventory Management System.

2. How we use your information

We use the information we collect to:

  • Respond to your demo and contact enquiries promptly and accurately.
  • Deliver, maintain, and improve our websites, apps, and software products.
  • Send service, security, and account-related updates where relevant.
  • Analyze website traffic and product usage to improve performance and UX.

We do not sell or rent your personal information to any third party under any circumstance. Information is shared only where necessary to deliver a service you have requested, or as required by law.

3. Legal basis

We process personal data on the basis of your consent, the performance of a contract or service you have requested, our legitimate business interests in operating and securing our products, and compliance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 where applicable.

4. Data security

We follow industry best practices to safeguard your data:

  • Hashed passwords — user passwords are never stored in plain text; they are hashed using strong, modern hashing algorithms.
  • Row-level security — our SQLite-backed products enforce row-level security policies so users can only access data they are authorised to see.
  • HTTPS / TLS — all traffic between your browser and our services is encrypted in transit.
  • Role-based access — internal access to systems and data is granted on a least-privilege, role-based basis and reviewed periodically.

5. Data retention

We retain personal information only for as long as necessary to fulfil the purpose for which it was collected or to meet legal, accounting, or reporting requirements. Contact and demo enquiry data is retained for the duration of an active engagement and a reasonable period thereafter for reference and audit. You may request earlier deletion as described below.

6. Your rights

You have the right to:

  • Access the personal information we hold about you.
  • Request correction or deletion of your data.
  • Opt out of marketing or non-essential communications.
  • Withdraw consent for processing that relies on your consent.

To exercise any of these rights, email us at hello@ctrlab.in and we will respond within a reasonable timeframe.

7. Cookies

Our website uses essential cookies to function correctly and optional analytics cookies to understand how visitors use the site. You can control or disable non-essential cookies through your browser settings at any time. We do not use cookies for cross-site advertising tracking.

8. Third-party services

We rely on trusted third-party providers for hosting, email, analytics, and payments. These providers process limited data on our behalf under their own privacy commitments and only to the extent necessary to deliver the service we use them for. We do not share your personal information with third parties for their own marketing purposes.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, products, or legal requirements. The “Last updated” date at the top of this page indicates when the policy was last revised. Continued use of our website or services after a change constitutes acceptance of the updated policy.

10. Contact

If you have any questions, requests, or concerns about this Privacy Policy or your personal data, please contact us: