1. Who we are
10 SECONDS ("10 SECONDS", "we", "us", "our") is a Bengaluru-based training, assessment, and staffing company operating since 2003. We deliver placement-readiness, aptitude, technical-skilling and soft-skills programmes to engineering and management institutions, and provide hiring and staffing services to corporate partners.
For the purposes of applicable data-protection law — including India's Digital Personal Data Protection Act, 2023 (DPDP Act) — 10 SECONDS acts as a Data Fiduciary when we determine the purpose and means of processing your personal data, and as a Data Processor when we process data on behalf of a partner institution or corporate client under contract.
2. Information we collect
We collect only what we need to run our programmes and services. Depending on how you interact with us, this may include:
Identity & contact
Name, email address, phone number, college or organisation, enrolment or roll number, and similar identifiers provided by you or your institution.
Learning & assessment
Course progress, test attempts, scores, code submissions on our coding portal, interview-readiness data, and performance analytics on our LMS.
Candidate & staffing
Résumés, qualifications, work history, skill assessments and interview feedback, where you engage with us for placement or staffing.
Technical & usage
Device type, browser, IP address, log data and usage patterns collected automatically when you use our websites and LMS.
We do not seek sensitive personal data (such as health, religion, or biometric information) unless it is strictly necessary for a specific, lawful purpose and we have a clear basis to do so.
3. How we use information
We use personal data to:
- Deliver, administer and improve training, assessment and skilling programmes.
- Operate our LMS (learning.10seconds.co.in), including the live coding portal, and produce performance reports for learners and partner institutions.
- Match candidates to roles and support our recruitment and staffing services.
- Communicate with you about schedules, results, certifications and service updates.
- Maintain security, prevent fraud or misuse, and meet legal and contractual obligations.
- Analyse aggregated, de-identified data to improve programme quality and outcomes.
We do not sell your personal data, and we do not use it for advertising profiling.
4. Legal bases for processing
We process personal data only where we have a lawful basis to do so, including: your consent; the performance of a contract with you or your institution; compliance with a legal obligation; and our legitimate interests in operating and improving our services, balanced against your rights. Where we rely on consent, you may withdraw it at any time (see Section 9).
5. The LMS & assessment data
Our learning platform records the data necessary to measure progress and readiness — test sets attempted, scores, time-on-task, and code written and executed on the live coding portal. This data is used to generate exportable performance reports for the learner and, where applicable, for the partner institution or recruiter that sponsored the programme.
Assessment results are shared with recruiters or placement cells only in the context of the programme you enrolled in, and only to the extent required to evidence readiness. We retain the integrity of assessment data and protect it against unauthorised alteration.
6. Sharing & disclosure
We share personal data only as needed and with appropriate safeguards:
- Partner institutions — performance and progress reports for learners enrolled through that institution.
- Corporate & staffing clients — candidate profiles and assessment outcomes, where you have engaged with us for placement or hiring.
- Service providers — vetted vendors (e.g. hosting, communications, analytics) who process data on our instructions under confidentiality and data-protection obligations.
- Legal & regulatory — where required by law, court order, or to protect the rights, safety and security of users and 10 SECONDS.
We require all recipients to use the data only for the agreed purpose and to protect it to a standard at least equal to this policy.
7. Data retention
We keep personal data only for as long as necessary for the purposes set out in this policy, or as required by contract or law. Learning and assessment records are typically retained for the duration of the programme and a reasonable period afterward to support certification, audits, and placement follow-up. When data is no longer needed, we securely delete or irreversibly anonymise it.
8. How we protect your data
We apply organisational and technical safeguards appropriate to the sensitivity of the data, including access controls, encryption in transit, principle-of-least-privilege access for staff and trainers, vendor due-diligence, and regular review of our security practices. Our trainers and directors operate under defined protocols, and access to learner data is limited to those who need it to deliver the service.
No system can be guaranteed perfectly secure; in the unlikely event of a data breach that is likely to affect you, we will act promptly and notify affected individuals and relevant authorities as required by law.
9. Your rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you and obtain a summary of how it is processed.
- Correct inaccurate or incomplete data, and update your information.
- Erase your data where it is no longer required and there is no overriding legal basis to retain it.
- Withdraw consent at any time, where processing is based on consent.
- Nominate another person to exercise your rights in the event of death or incapacity, as provided under the DPDP Act.
- Grieve — raise a complaint with our Grievance contact (Section 14) and, if unresolved, with the relevant Data Protection authority.
To exercise any of these rights, contact us using the details in Section 14. We will respond within the timelines required by applicable law and may need to verify your identity first.
10. Minors & student data
Some of our programmes — including school-level initiatives — involve learners under the age of 18. Where we process the personal data of a child, we do so in line with the DPDP Act: we obtain verifiable consent from a parent or lawful guardian where required, we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children, and we do not process children's data in a way likely to cause harm.
Institutions that enrol minors in our programmes are responsible for ensuring that appropriate parental or guardian consent is in place. We will act on instructions to access, correct, or delete a child's data received from a verified parent, guardian, or the sponsoring institution.
11. Cookies & tracking
Our websites and LMS use cookies and similar technologies that are necessary for the platform to function (such as keeping you signed in) and, with your permission where required, to understand usage and improve our services. You can control cookies through your browser settings; disabling essential cookies may affect functionality. We do not use cookies for cross-site advertising.
12. International transfers
We primarily store and process data in India. Where a service provider processes data outside India, we ensure the transfer is permitted under applicable law and that the recipient is bound by safeguards that protect your data to a comparable standard.
13. Changes to this policy
We may update this policy to reflect changes in our practices, technology, or the law. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. We encourage you to review this page periodically.
14. Contact & grievances
For any question about this policy, to exercise your rights, or to raise a grievance, contact our data protection point of contact:
If you are not satisfied with our response, you may escalate your complaint to the relevant Data Protection Board / authority having jurisdiction.