Privacy Policy

1. Introduction

Techno Park Bangladesh ("we," "our," or "us") is committed to protecting your privacy rights. This Privacy Policy applies to all personal data processed through:

• Our corporate website (www.technoparkbd.com)
• Software applications and digital products we develop
• Our IT consulting and business solutions services
• Marketing communications and business interactions
• Any other services that reference this Privacy Policy

By using our services, you consent to the data practices described in this policy.

2. Information We Collect

We collect information necessary to provide our services and improve user experience. This includes:

3. How We Use Your Information

We process personal data for specific, legitimate business purposes:

• Service Delivery: To develop, deliver, and maintain our IT solutions and services
• Client Management: To communicate about projects, updates, and support
• Quality Improvement: To enhance our services based on user feedback
• Security: To protect against fraud and unauthorized access
• Legal Compliance: To meet regulatory and contractual obligations
• Business Operations: For internal analytics and decision-making
• Marketing: To inform about relevant services (with opt-out options)

4. Data Sharing and Disclosure

We may disclose information in these limited circumstances:

• Service Providers: With trusted vendors who assist in service delivery (under strict confidentiality agreements)
• Legal Requirements: When compelled by law enforcement, court order, or legal process
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Protection of Rights: When necessary to protect our rights, property, or safety
• With Consent: When you explicitly authorize specific disclosures

We maintain a list of subprocessors and can provide details upon request.

5. Data Security Measures

We implement industry-standard security controls including:

• Enterprise-grade encryption for data in transit (TLS 1.2+) and at rest (AES-256)
• Regular penetration testing and vulnerability scanning
• Multi-factor authentication for system access
• Role-based access controls with least privilege principles
• Comprehensive employee security training programs
• Incident response and breach notification procedures

While we employ robust security measures, no system can guarantee 100% security. We recommend clients implement appropriate safeguards on their end as well.

6. Data Retention Practices

We retain personal data only as long as necessary for:

• Fulfilling contractual obligations and service commitments
• Compliance with legal retention requirements
• Resolving disputes and enforcing agreements
• Maintaining business records and documentation
• Providing ongoing support and maintenance

Typical retention periods:

• Client data: 5 years after contract termination
• Financial records: 7 years for tax compliance
• Project documentation: 3-10 years depending on project type
• Marketing data: 2 years from last interaction

7. Your Data Protection Rights

You may have the following rights regarding your personal data:

• Access: Request a copy of your personal data we hold
• Correction: Update inaccurate or incomplete information
• Erasure: Request deletion under certain circumstances
• Restriction: Limit how we use your data
• Portability: Receive your data in a structured format
• Objection: Object to certain processing activities
• Withdraw Consent: Revoke previously given consent
• Complain: Lodge a complaint with a supervisory authority

To exercise these rights, please contact our Data Protection Officer. We may need to verify your identity before processing requests.

8. Cookies and Tracking Technologies

Our website uses cookies for essential functions and analytics:

• Strictly Necessary: Session management and security cookies
• Performance: Google Analytics to understand site usage
• Functional: Preference and localization cookies
• Marketing: Only with explicit consent

You can manage cookie preferences through your browser settings or our cookie consent tool. Disabling cookies may affect website functionality.

9. International Data Transfers

As a global IT service provider, we may transfer data internationally when necessary for service delivery. All transfers comply with applicable data protection laws and implement appropriate safeguards such as:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions for recipient countries
• Binding Corporate Rules where applicable
• Additional technical and organizational measures

10. Policy Updates

We may periodically update this Privacy Policy to reflect:

• Changes in our services and data practices
• New legal or regulatory requirements
• Industry standards and best practices

We will notify you of significant changes through email or prominent website notices. The "Last Updated" date at the top indicates when revisions were made.

Contact Our Data Protection Team

For privacy-related inquiries or to exercise your rights: