Privacy Policy
At Bangladesh Business Lab (BBL), data protection, privacy, and confidentiality are foundational to everything we build. This policy outlines how we handle, process, and safeguard your personal and enterprise information.
Last Updated: September 7, 2026 • Effective Version 3.2
1. Overview & Data Controller
Bangladesh Business Lab ("BBL", "we", "us", or "our") operates as a technology consulting, AI infrastructure, digital marketing, and enterprise development agency. BBL is the primary Data Controller for personal data collected through our website, consulting applications, AI growth lab sessions, and digital client portals.
Registered Controller:
Bangladesh Business Lab • Dhaka, Bangladesh
Data Protection Officer Email: privacy@bangladeshbusinesslab.com
2. Categories of Data Collected
We collect personal and technical information strictly necessary to provide high-performance business consulting, software engineering, and digital growth services:
- Contact & Business Profile Data: Full name, professional email address, company name, phone number, business URL, and job title provided during consultation requests.
- Strategy Session & Growth Inputs: Detailed business goals, system bottlenecks, tech stack requirements, and campaign targets submitted via our Strategy Form.
- Technical Telemetry & Usage Logs: IP address, device specifications, browser type, geographic location, referrer URLs, and interaction patterns recorded for security and performance optimization.
3. Processing Purposes & Legal Basis
All data processing activities are grounded in legitimate business interests, contractual necessity, or explicit user consent:
Contractual Execution
Delivering tailored strategy audits, building custom web/AI applications, and managing client service level agreements.
Growth & Performance Optimization
Analyzing website performance, attribution models, and marketing conversion rates to enhance user experience.
4. Encryption & Data Security
We employ bank-grade security controls to protect client information against unauthorized access, disclosure, or alteration:
• Encryption at Rest: All stored database records and backups are encrypted using AES-256 standards.
• Encryption in Transit: Network transmissions are secured via TLS 1.3 cryptographic protocols.
• Access Controls: Strict role-based access controls (RBAC) ensure only authorized personnel inspect client data.
5. Third-Party Sub-processors
BBL partners only with SOC-2 compliant infrastructure providers. Sub-processors process data under strict data processing addendums (DPAs):
| Partner / Vendor | Role / Purpose | Location |
|---|---|---|
| Supabase Cloud | Database Hosting & Authentication | United States / EU |
| Vite / Cloudflare | Edge CDN & DDoS Mitigation | Global Edge Network |
6. Data Retention & Erasure Policy
Personal data is retained only for as long as necessary to fulfill the operational purposes described or to comply with statutory accounting requirements. Leads and inquiry data older than 24 months without active client engagement are automatically archived or purged.
7. User Rights (GDPR & Local Laws)
Depending on your geographic location, you possess explicit rights regarding your data:
8. AI & Machine Learning Governance
Explicit Guarantee on Client Code & Data:
Data, code snippets, business strategies, and proprietary dataset inputs provided to Bangladesh Business Lab's AI Growth Lab are NEVER used to train public foundation models. All enterprise AI model interactions are hosted within private, isolated tenant boundaries.
9. DPO & Contact Information
To exercise any of your rights or ask questions regarding this Privacy Policy, please contact our Data Protection Team:
Bangladesh Business Lab Privacy Office
Email: privacy@bangladeshbusinesslab.com
Address: Dhaka, Bangladesh