Privacy Policy

Effective date: 4 September 2026

This policy explains how Deed Bangladesh IT Limited handles personal data collected through deedbangladesh.com, the client portal, our forms and our emails. We keep it short and specific; if anything is unclear, email support@deedbd.com.

1. Who is responsible

Deed Bangladesh IT Limited, 101 Deed Avenue, Rajshahi, Bangladesh-6230, is the data controller. We serve clients worldwide, mainly in the United States, United Kingdom, European Union and Bangladesh. We have not appointed an EU or UK representative; contact us directly with any request.

2. What we collect

Contact and booking forms

Your name, email, phone, company, country, store URL, the service you are interested in, your message or call notes, and the meeting time you choose. With every submission we also record your IP address, approximate location (country, region, city, ISP) looked up from the IP address, browser and device type, and the page you came from. We use these to prevent spam and fraud, to route your request to the right team member, and to follow up.

Unsent form entries ("leads")

If you start filling in the contact or booking form and leave without sending it, the fields you typed (typically email, phone, name, country and topic) are saved as a lead together with the same technical details, so we can send one short follow-up email within about 24 hours. You can ignore that email; we send at most one, and we delete the lead after 90 days if you do not get in touch.

Client portal accounts

Name, email, company, phone, password (stored as a salted hash), login times, projects, messages you exchange with us, invoices and payment history.

Payments

Payments are made against an invoice by bank transfer, Wise, Payoneer, bKash or Nagad. We keep the transaction reference, the amount, the date and the billing details you gave us for the invoice. We do not take or store card numbers on this website.

Amazon, Walmart and other seller data

Where a service needs access to your seller account, we access only what the agreed service requires (for example listings, advertising and account-health data), we do not collect Amazon customer or product data from non-Amazon sources, and we do not use it for any other client or purpose.

Emails, WhatsApp and calls

Correspondence with us, including WhatsApp messages and call notes, so we can keep a record of what was agreed.

Your email address, the page you subscribed from, and the date you confirmed.

First-party analytics

For each page view we store the page path, the referring site, the country and the device type. We also set a first-party analytics identifier (the dv cookie, a random number) so we can count visits, sessions and the time you spend on our pages, and recognise a returning browser. Alongside it we keep your IP address, the approximate location it resolves to (city and region), your browser and device type, screen size, language and time zone. This data stays on our own server, is never sold or shared with advertising or analytics companies, and is deleted after 180 days for sessions and 12 months for the visitor record.

Server logs

Our hosting server records requests (IP address, URL, time, browser) for security and troubleshooting.

3. Why we use it and our legal bases

Under the EU and UK GDPR we rely on the following bases; the same purposes apply everywhere we operate.

Performing a contract or taking steps before one: answering your inquiry, holding a booked call, running your portal account, delivering services, invoicing and taking payment.
Legitimate interests: preventing spam, fraud and abuse; recording IP and location on submissions; sending a single follow-up about a form you started or a checkout you did not finish; sending booking and invoice reminders; measuring how the website is used; protecting our legal rights. We have balanced these interests against yours and you may object at any time (section 10).
Consent: the newsletter (double opt-in) and any optional marketing. You can withdraw consent at any time.
Legal obligation: keeping accounting and tax records, and responding to lawful requests.

4. Marketing emails

We only send the newsletter to addresses that have confirmed by clicking the link in our confirmation email (double opt-in). Every newsletter includes an unsubscribe link; you can also unsubscribe by replying to any email or writing to support@deedbd.com. We do not send marketing on behalf of anyone else and we do not buy or rent lists.

5. Reminder and follow-up emails

These are service messages sent on the basis of our contract with you or our legitimate interest, not marketing:

Booking reminders before a call you booked (up to four: 3 days, 1 day, 1 hour and 15 minutes before), each with a reschedule or cancel link.
Invoice reminders before and after the due date of an unpaid invoice.
Abandoned form or checkout: at most one email about a form you started, and at most two about a checkout you began but did not complete.

To stop any of these, reply to the email or cancel the booking, invoice or order and we will not send more.

We do not sell personal data and we do not share individual client data with other clients or partners. We use these processors, each bound by contract and its own privacy policy:

Namecheap (web and email hosting, where our website, database and mailboxes run) - United States.
Cloudflare Turnstile (spam check on forms, only if enabled; it processes your IP and browser signals to tell humans from bots).
Google Meet or Zoom (video calls you book with us), and Google Calendar invitations.
ipwho.is (looks up approximate location from the IP address on form submissions).
Google Fonts (typefaces loaded by your browser, which sends your IP address to Google).
Amazon and Walmart when we act inside your seller account on your instructions, and US state offices, the IRS and banks when we file on your behalf.

We may also disclose data to professional advisers, to a buyer of our business, or where the law requires it.

7. International transfers

We are based in Bangladesh and our providers are mostly in the United States, so your data will be transferred outside your country. For data from the EU, UK and Switzerland we rely on the providers' Standard Contractual Clauses (and the UK Addendum) or the EU-US Data Privacy Framework where the provider is certified, and on our own contractual commitments to protect the data to the standard described here. Bangladesh has not received an EU adequacy decision; you may ask us for a copy of the safeguards we use.

8. How long we keep it

Unsent form leads: 90 days.
Contact inquiries and booking records: 24 months after the last message, then deleted or anonymised.
Portal accounts, projects and messages: for the life of the account and 24 months after closure.
Invoices, payments and accounting records: 7 years, as required for tax and audit.
Newsletter: until you unsubscribe; we then keep only your address on a suppression list so we do not email you again.
Analytics page views: 26 months, after which only aggregated totals remain. Visitor sessions: 180 days; the visitor record itself: 12 months after the last visit.
Server logs: 90 days.
Seller account credentials: deleted when the engagement ends or within 24 hours of your request.

9. Security and incident response

We use HTTPS everywhere, hashed passwords, two-factor authentication and a hidden entrance for staff, signed session cookies, rate limits and spam checks on public forms, least-privilege access to client data, and quarterly access reviews with access removed within 24 hours when someone no longer needs it. We keep a written incident-response plan (identify, contain, eradicate, recover, review) that senior management reviews at least every six months. If a confirmed security incident affects your data or Amazon Information, we act on containment immediately and notify affected parties, and Amazon where required, within 24 hours of confirming it, and any regulator within the time the law requires.

10. Your rights

Whatever your location, you can ask us to access, correct or delete your data, or to stop emailing you, by writing to support@deedbd.com. We answer within 30 days and may ask you to verify your identity. There is no fee unless a request is clearly unfounded or excessive.

EU, UK and EEA

You have the rights of access, rectification, erasure, restriction, data portability, objection (including to processing based on legitimate interests), and the right to withdraw consent at any time. We do not make automated decisions with legal or similarly significant effects.

California (CCPA/CPRA) and other US states

You have the right to know what personal information we collect and how we use it, to delete it, to correct it, and not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined in the CPRA, and we do not use sensitive personal information to infer characteristics. You may use an authorised agent to submit a request.

Bangladesh

We handle data in line with the Cyber Security Act 2023 and the Personal Data Protection framework as it comes into force, and you can exercise the same rights described above.

11. Children

Our website and services are for businesses and are not directed at anyone under 18. We do not knowingly collect data from children; if you believe a child has given us data, email us and we will delete it.

12. Cookies

We set strictly necessary cookies (sign-in sessions, a short-lived form notice, and a staff-only entrance cookie) and one first-party analytics identifier (dv) used only by this site to count visits and time on site. We use no advertising or third-party tracking cookies. Details are in our Cookie Policy.

13. Complaints

Please raise any concern with us first at support@deedbd.com. You also have the right to complain to a supervisory authority: in the EU, the authority in your member state; in the UK, the Information Commissioner's Office (ico.org.uk); in California, the California Privacy Protection Agency; in Bangladesh, the relevant authority under the Cyber Security Act.

14. Changes

We update this policy when our practices change. The effective date at the top shows the current version; material changes are announced on this page and, for portal account holders, by email.

Contact

Privacy questions and rights requests can be sent to us at the details below. Please put "Privacy request" in the subject line.

Deed Bangladesh IT Limited
101 Deed Avenue, Rajshahi, Bangladesh-6230
Email: support@deedbd.com
Phone: +880 9610-969697