Privacy Policy — Businessclass.com Forum

Contents

1. What this Privacy Policy covers
2. Personal data we collect
3. Why we use your data
4. Legal bases (GDPR)
5. How we share your data
6. Cookies and similar technologies
7. International data transfers
8. Data retention
9. Your rights (EU/EEA)
10. Account deletion and content removal
11. Children
12. Security
13. Changes to this Privacy Policy
14. Contact

1) What this Privacy Policy covers

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you:

• browse the Forum,
• register or log in,
• create a profile,
• post content (threads, replies, reactions),
• message other users (if enabled),
• contact moderators or support,
• and interact with Forum features.

Our Terms of Service may also apply to your use of the Forum.

Back to contents

2) Personal data we collect

We collect data in three ways: (A) data you provide, (B) data collected automatically, and (C) data from third parties.

2.A) Data you provide directly

Depending on how you use the Forum, this may include:

• Account data: username, email address, password (stored as a hash), account settings
• Profile data: avatar, bio, location (if you choose to provide it), other optional profile fields
• User-generated content (UGC): posts, comments, likes/reactions, uploaded images/files, reports you submit
• Communications: messages to moderators/support, dispute/abuse reports, feedback
• Preference choices: notification settings, cookie preferences (where applicable)

2.B) Data we collect automatically

When you access the Forum, we may automatically collect:

• Device and log data: IP address, browser type, device identifiers, operating system, timestamps, pages viewed, referring URLs
• Security and abuse-prevention signals: rate-limiting events, suspicious login attempts, spam indicators
• Cookies and similar technologies: see Section 6 (and our Cookie Policy, if published separately)

2.C) Data from third parties

If you use third-party features, we may receive limited data from them, such as:

• Social login providers (e.g., Google/Facebook/X if enabled): a user ID/token and basic profile fields you authorize (often email and display name)
• Service providers that help us run the Forum (hosting, email delivery, anti-spam tools)

Back to contents

3) Why we use your data (purposes)

We use personal data to:

• provide and operate the Forum (create accounts, enable posting, display content);
• authenticate and secure accounts (login, session management, password recovery);
• moderate and enforce rules (detect spam/abuse, investigate reports, apply bans);
• communicate with you (service messages, moderation notices, support replies);
• improve the Forum (performance, troubleshooting, feature improvements);
• comply with legal obligations and respond to lawful requests.

Back to contents

4) Legal bases (GDPR)

Where GDPR applies, we process personal data under one or more legal bases, such as:

• Contract (to provide your account and Forum features)
• Legitimate interests (security, fraud/spam prevention, basic analytics, service improvement, moderation)
• Consent (for non-essential cookies, optional marketing, or optional profile fields where relevant)
• Legal obligation (responding to lawful requests and legal compliance where applicable)

Back to contents

5) How we share your data

We may share personal data in the following cases:

5.A) Public sharing (because it’s a forum)

• Your profile and your posts may be visible to the public (depending on Forum settings).
• Search engines may index public pages.
• If you include personal data in your posts, it becomes public at your discretion.

5.B) Service providers (processors)

We use trusted vendors to help operate the Forum (for example: hosting, CDN/DDoS protection, email sending, backups, anti-spam). They process personal data only on our instructions and for providing their services to us.

5.C) Legal and safety reasons

We may disclose information if we believe it is necessary to:

• comply with law or legal process,
• protect rights and safety of users and the public,
• investigate fraud, security, or abuse.

5.D) Corporate transactions

If we are involved in a merger, acquisition, restructuring, or asset sale, user data may be transferred as part of that transaction (subject to applicable law).

Back to contents

6) Cookies and similar technologies

We use cookies and similar technologies for:

• Strictly necessary functions (login session, security, preferences), and
• if enabled, analytics and other optional features.

Back to contents

7) International data transfers

If we (or our vendors) transfer personal data outside the EU/EEA, we use appropriate safeguards (such as Standard Contractual Clauses) and apply additional measures where required.

Back to contents

8) Data retention

We keep personal data only as long as needed for the purposes described above, including:

• Account data: while your account is active; if you delete your account, we delete or anonymize data where feasible and lawful.
• Content (posts): may remain visible if you posted publicly, unless removed or anonymized according to Forum rules and technical constraints (e.g., preserving thread readability).
• Logs/security records: typically retained for a limited period (e.g., [30–180] days) unless needed for investigations or legal compliance.
• Backups: retained for a limited rolling period (e.g., [X] days).

Back to contents

9) Your rights (EU/EEA)

Depending on your location, you may have rights to:

• access your personal data,
• rectify inaccurate data,
• erase data (“right to be forgotten”) in certain cases,
• restrict or object to processing in certain cases,
• data portability (where applicable),
• withdraw consent (when processing is based on consent).

These rights are part of the GDPR transparency/rights framework. (GDPR)

Back to contents

10) Account deletion and content removal

You may be able to delete or disable your account through [Account Settings] (if enabled).

Back to contents

11) Children

The Forum is not intended for children under 18. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us at [email protected].

Back to contents

12) Security

We use reasonable technical and organizational measures designed to protect personal data (access controls, encryption in transit, monitoring, backups). However, no system is 100% secure; please use a strong password and keep it confidential.

Back to contents

13) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new effective date. If changes are material, we will provide additional notice where required.

Back to contents

14) Contact

For privacy questions or requests:

You can also contact the Estonian supervisory authority (Andmekaitse Inspektsioon).

Back to contents