Privacy Policy

Effective Date: May 2026

1. Introduction

Best Labz ("Company", "Best Labz", "we", "our", or "us") is an enterprise software engineering and product development company focused on SaaS platforms, ERP systems, POS ecosystems, healthcare applications, mobile applications, analytics platforms, B2B systems, and enterprise-grade digital infrastructure.

This Privacy Policy describes how we collect, process, store, use, disclose, and protect personal information when users access our websites, applications, products, cloud platforms, APIs, software systems, or services.

We are committed to maintaining enterprise-grade standards of data privacy, operational governance, security, and responsible technology practices.

2. Scope

This Privacy Policy applies to:

• Visitors of our website
• Prospective clients and enterprise partners
• SaaS platform users
• Mobile application users
• ERP/POS platform users
• Vendors and business partners
• Job applicants and candidates
• API consumers and integration partners
• Customers using cloud-hosted infrastructure managed by Best Labz

3. Information We Collect

3.1 Personal Information

We may collect:

• Full name
• Company name
• Email address
• Mobile number
• Billing information
• Business address
• Tax/GST details
• Account credentials
• Support communications
• User preferences

3.2 Technical Information

We may automatically collect:

• IP address
• Browser type
• Device identifiers
• Operating system
• Session activity
• Error logs
• API logs
• Application performance metrics
• Geolocation metadata
• Diagnostic data

3.3 Product Usage Data

For SaaS, ERP, POS, healthcare, and enterprise systems:

• User activity logs
• Transaction metadata
• Analytics events
• Feature usage patterns
• Audit logs
• Workflow events
• Dashboard interactions
• Operational metrics

3.4 Cookies & Tracking Technologies

We may use:

• Functional cookies
• Authentication cookies
• Session cookies
• Analytics tools
• Performance monitoring tools
• Heatmap and behavioral analytics tools
• Marketing attribution tools

4. How We Use Information

We use information for:

• Service delivery
• Product functionality
• User authentication
• Customer onboarding
• Technical support
• Infrastructure monitoring
• Fraud prevention
• Security management
• Compliance obligations
• Internal analytics
• Product improvement
• AI-assisted operational analysis
• Enterprise reporting
• Billing and invoicing
• Communication regarding updates and maintenance

5. Legal Basis For Processing

Where applicable under international privacy laws, we process information based on:

• Contractual necessity
• Legitimate business interests
• Legal obligations
• User consent
• Security and fraud prevention requirements

6. Data Sharing & Disclosure

We do not sell personal information. We may share information with:

6.1 Infrastructure Providers

• Cloud hosting providers
• CDN providers
• Database hosting providers
• Monitoring providers
• Security providers

6.2 Enterprise Service Providers

• Payment processors
• Communication providers
• CRM systems
• Analytics platforms
• Authentication providers
• ERP integrations
• Accounting systems

6.3 Legal & Regulatory Authorities

We may disclose information when required by:

• Applicable law
• Government request
• Court order
• Regulatory compliance
• Security investigations

7. International Data Transfers

As part of global service delivery, information may be processed in multiple countries through secure infrastructure providers.

Best Labz takes commercially reasonable measures to ensure that international transfers maintain adequate levels of data protection and operational security.

8. Data Security

Best Labz follows enterprise-focused operational security practices, including:

• Role-based access control
• Infrastructure access restrictions
• Secure cloud deployment practices
• Encrypted communication channels
• Multi-factor authentication where applicable
• Audit logging
• Security monitoring
• Backup and disaster recovery procedures
• Secure API management
• Source code access restrictions
• Internal confidentiality controls
• Environment segregation for production and testing

While we strive to protect systems and information, no method of electronic storage or transmission is completely secure.

9. Data Retention

We retain information only for as long as necessary to:

• Deliver services
• Maintain contractual obligations
• Support operational continuity
• Comply with legal requirements
• Resolve disputes
• Maintain security and audit records

Retention timelines may vary depending on system architecture, client agreements, regulatory obligations, and infrastructure requirements.

10. User Rights

Subject to applicable law, users may request:

• Access to their information
• Correction of inaccurate information
• Deletion of information
• Export of their information
• Restriction of processing
• Withdrawal of consent
• Objection to certain processing activities

Requests may be submitted through our official contact channels.

11. Enterprise Client Data Ownership

For enterprise engagements, clients generally retain ownership of business data processed within their systems, subject to contractual agreements.

Best Labz acts as a technology service provider and may process data only as necessary to provide agreed services.

12. Confidentiality

Best Labz maintains internal confidentiality procedures designed to protect client-sensitive information, source code, operational workflows, infrastructure configurations, and proprietary business processes.

13. Incident Response

Best Labz maintains internal operational procedures for:

• Security monitoring
• Incident assessment
• Operational recovery
• Service restoration
• Risk mitigation

Where required by law or contract, affected parties may be notified regarding significant security incidents.

14. Third-Party Services

Our platforms and websites may integrate with third-party systems including:

• Google Cloud
• Firebase
• AWS
• Microsoft services
• Payment gateways
• Messaging APIs
• Analytics providers
• Mapping services
• External authentication providers

Use of such services may also be governed by the respective third-party privacy policies.

15. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect information from minors.

16. Changes To This Policy

Best Labz may update this Privacy Policy periodically to reflect operational, legal, regulatory, or technology changes.

Updated versions will be published on our official website.

17. Contact Information

Best Labz
Website: https://www.bestlabzs.com
Email: support@bestlabzglobal.com