Privacy Notice
Last updated 14 July 2026 · Netonelabs
This notice explains how Netonelabs collects and uses your personal data when you apply for and take our Cyber Foundations (NL-000) course. We apply a single global standard modelled on the GDPR, which also meets India’s DPDP and other applicable laws.
What we collect
- You provide: name, email, phone, LinkedIn profile, country/region/city, education/employment, and why you want to join.
- Verification: a code sent to your email, and (where enabled) LinkedIn sign-in to confirm you own the profile.
- Security & eligibility (with your consent): your IP address, approximate location derived from it, and device/browser information (user-agent, screen, timezone, language). We use this to confirm your region and to keep bots and fake accounts out — you consent to this before applying, and without it we cannot offer the training.
- Baseline & progress: your pre-course and post-course skill scores, to show your learning growth on your profile.
Why & the legal basis
- Consent — to process your application, grant access, and (separately, optional) send marketing.
- Legitimate interest — anti-fraud/security processing, including a privacy-friendly bot check (Cloudflare Turnstile, which processes your IP/TLS/user-agent) and short-lived IP logging.
How we track your learning
When you take one of our courses, we record how you interact with the lessons — not to watch you, but to help your instructor teach you well. Good teachers notice when someone is stuck; this is how we help ours notice at scale.
What we record. As you work through a lesson, lab, simulation, video, or the AI tutor, we record small, coded signals such as: how long you spend reading a section and how far you scroll; your quiz answers, including the ones you get wrong (often the most useful part for helping you); the steps you take in a simulation, hints used and retries; whether you watched a video and how far you got; how often you open the AI tutor and the questions you ask it; and roughly how much time you were active versus idle.
Most of these are short codes and numbers — for example “spent 90 seconds here” or “chose option 2” — and your name and email are never stored inside those activity records.
Two things you type are kept in full, and your instructors can read them: the questions you ask the AI tutor (with the tutor’s answer and the lesson you asked from), and any messages you send in Messages. We keep them so a real instructor can see where you’re stuck and help you, and so we can keep the conversation safe. Assume a member of Netonelabs staff may read them. Everything else you type is not recorded: we don’t keep your passwords or secrets (only, in a lab, a general “strength” rating), and lab free-text is not stored.
Who can see it. Only our teaching staff — your instructors and academy admins. Other students can never see your activity, and we never sell or share it.
Legal basis. We rely on our legitimate interest in teaching you effectively for the core progress signals, and on your acknowledgement for the more detailed behavioural analytics beyond that. You can object to the core tracking or withdraw the detailed part at any time, as easily as you agreed — and when you do, we actually change what we collect, not just hide a banner.
Exam integrity monitoring. During an exam only, we also record if the exam window loses focus — for example if you switch tabs — as a count and the times it happened, to keep exams fair. We ask for your consent right before the exam starts. It records only that focus was lost — never what you switched to, and never your screen, camera, or microphone. A focus-loss is a flag for a human instructor to review, never an automatic fail.
How long we keep it. We keep the detailed raw activity for 30 days, then delete it once it has been summarised. Summaries and progress records are kept while you’re enrolled, and your learning records are anonymised 36 months after your last login.
Retention
We keep application and account data for 36 months after your last login, then delete or anonymise it, unless the law requires otherwise or you ask us to erase it sooner.
Your rights
You may request access, correction, erasure, portability, or withdraw consent at any time — as easily as you gave it. Contact our data-protection team at privacy@netonelabs.com. You may also complain to your local data-protection authority.
Sharing
We do not sell your data. We use service providers (email delivery, cloud hosting, bot protection, IP geolocation) only to run this service, under appropriate safeguards.
Questions? privacy@netonelabs.com