Privacy Policy | Bangladeshis in UK

Bangladeshis in UK (bangladeshisinuk.co.uk) is operated by Sal Digital. This policy explains what personal data we collect, why we collect it, and your rights under UK GDPR and the Data Protection Act 2018.

1. Information We Collect

When you register:

Name, email address, phone number (optional), postcode (optional), and password (stored as a secure hash — we never see your actual password).

When you submit a business listing:

Business name, category, address, contact details, opening hours, logo, and your owner contact details. Owner details are kept private and not displayed publicly.

When you use the site:

IP address (for security and rate limiting), browser type, pages visited, and search queries. This is standard web server logging and is used only for security and improving the platform.

Cookies:

We use a session cookie to keep you logged in and a remember-me cookie if you choose that option. We do not use tracking cookies. If we add Google AdSense in the future, Google's own cookie policy will apply — we will update this policy accordingly.

2. How We Use Your Data

To operate and improve the platform
To send you verification and notification emails you have requested
To notify you of listing approval, rejection, or expiry
To respond to contact form messages
To prevent spam and abuse through rate limiting
To display your business listing publicly (only information you chose to make public)

We do not sell, rent or share your personal data with third parties for marketing purposes. Ever.

3. Data Storage & Security

Your data is stored on secure servers provided by Namecheap (UK/US hosting). We use SSL encryption on all pages. Passwords are hashed using PHP's bcrypt algorithm. Only the site administrator has access to the database.

We take reasonable technical measures to protect your data, but no system is 100% secure. If you suspect a security issue, contact us immediately at info@bangladeshisinuk.co.uk.

4. How Long We Keep Your Data

Account data: kept while your account is active. Deleted within 30 days of account deletion request.
Business listings: kept while your listing is active. Expired listings are hidden but not immediately deleted — contact us to request full deletion.
Contact form messages: kept for up to 12 months then deleted.
Server logs: automatically deleted after 30 days.

5. Your Rights

Under UK GDPR you have the right to:

Access — request a copy of the personal data we hold about you
Rectification — ask us to correct inaccurate data
Erasure — ask us to delete your data ("right to be forgotten")
Portability — receive your data in a machine-readable format
Object — object to how we process your data
Restriction — ask us to limit how we use your data

To exercise any of these rights, email us at info@bangladeshisinuk.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have mishandled your data.

6. Third-Party Services

PayPal — for processing payments. Subject to PayPal's Privacy Policy.
Google Fonts — for typography. Google may log your IP address.
Font Awesome — for icons (loaded from Cloudflare CDN).
OpenStreetMap / Leaflet — for map functionality.
postcodes.io — for postcode-to-coordinates conversion (no personal data sent).

7. Changes to This Policy

We may update this policy from time to time. We will notify registered users by email of significant changes. The "last updated" date at the top of this page will always reflect the current version.

8. Contact

For any privacy-related questions or to exercise your rights, contact us at:

Email: info@bangladeshisinuk.co.uk
Website: bangladeshisinuk.co.uk/contact