গোপনীয়তা নীতি / Privacy Policy

Last Updated: October 11, 2025

1. Introduction

Labartise / ল্যাবার্টাইজ (“we,” “us,” or “our”) is committed to protecting the privacy and security of personal information. This Privacy Policy explains how we collect, use, store, and protect information when providing our services globally or when visiting our website labartise.com. As a global company headquartered in India with operations in Bangladesh and serving clients worldwide, we comply with applicable data protection regulations including India’s Digital Personal Data Protection Act (DPDPA) 2023, Bangladesh’s Digital Security Act and privacy regulations, the European Union’s General Data Protection Regulation (GDPR), and other applicable regional privacy laws based on client and data subject location.​

2. Information We Collect

Personal Information: Name, company name, email address, phone number, billing address, tax identification numbers (GST, PAN, TIN, VAT registration), and payment information provided during service engagement, account creation, or inquiry submissions.​

Technical Information: IP address, browser type and version, device information, operating system, access times, pages viewed, referring URLs, and website usage data collected through cookies, log files, and analytics tools.​

Project Information: Files, documents, source code, databases, API credentials, content, images, designs, specifications, and other materials provided for project completion. This may include client customer data if we process it on the client’s behalf.​

Communication Data: Emails, messages, video call recordings (with consent), support tickets, project management system communications, and other correspondence exchanged with our team.​

Employment Data: For job applicants and employees – resumes, educational qualifications, employment history, references, identification documents, and performance evaluations.​

3. Legal Basis for Processing

We process personal data based on different legal grounds depending on the applicable jurisdiction:​

For Indian Residents (DPDPA): Consent for most processing activities, and legitimate uses for specific purposes such as employment, legal compliance, and service delivery where consent was previously provided.​

For EU Residents (GDPR): Consent, contractual necessity for fulfilling client agreements, legitimate interests for service improvement and business operations, legal compliance, and vital interests in emergency situations.​

For Bangladesh Residents: Consent and legal compliance with Bangladesh regulations.​

For Other Jurisdictions: Applicable legal basis as defined by local privacy laws.

4. How We Use Information

We use collected information to:​

• Deliver, manage, and improve our services and project deliverables

• Communicate with clients about projects, updates, invoices, and support matters

• Process payments, generate invoices, and maintain financial records

• Provide technical support, maintenance, and troubleshooting

• Comply with legal obligations, tax regulations, and regulatory requirements

• Prevent fraud, security threats, and unauthorized access

• Analyze website performance, user experience, and service quality

• Conduct business operations, including hiring and employee management

• Send marketing communications about our services (with consent, where required)

• Fulfill contractual obligations and enforce our Terms and Conditions

5. Data Sharing and Disclosure

We do not sell personal information to third parties. We may share data with:​

Service Providers: Hosting companies (AWS, Google Cloud, DigitalOcean, etc.), payment processors (Stripe, PayPal, Razorpay, etc.), email service providers, project management tools, analytics platforms, and cloud storage providers under strict confidentiality and data processing agreements.​

Legal Authorities: When required by law, court order, legal process, or to protect our legal rights, comply with government requests, or respond to regulatory inquiries in India, Bangladesh, or other jurisdictions.​

Business Partners: With explicit client consent for specific integrations, API connections, or collaborative projects.​

Professional Advisors: Legal counsel, accountants, auditors, and consultants bound by confidentiality obligations.​

Successor Entities: In case of merger, acquisition, sale of assets, or business restructuring, with notice to affected individuals.​

6. Cross-Border Data Transfers

As a global company, we may transfer personal data across borders for service delivery:​

From India: We transfer data outside India in compliance with DPDPA, except to countries blacklisted by the Indian Government. Transfers are made under valid contracts with adequate safeguards.​

From EU/EEA: We transfer data outside the EU/EEA only with appropriate safeguards, including Standard Contractual Clauses (SCCs), adequacy decisions, or explicit consent where required by GDPR.​

From Bangladesh: We ensure adequate safeguards and compliance with Bangladesh regulations for international data transfers.​

We ensure that recipient entities provide adequate data protection through contractual commitments, technical safeguards, and compliance verification.

7. Data Storage and Security

Client and user data is stored on secure servers with industry-standard security measures:​

• SSL/TLS encryption for data transmission

• Encryption, obfuscation, or masking of stored personal data

• Access controls and authentication mechanisms based on need-to-know principles

• Regular security audits, vulnerability assessments, and penetration testing

• Intrusion detection and prevention systems

• Regular data backups with secure, encrypted storage

• Firewall protection and network security monitoring

• Employee training on data protection and security practices

• Incident response and breach notification procedures

8. Data Retention

We retain personal information only as long as necessary to fulfill service obligations, legal requirements, and legitimate business purposes:​

• Project data: 3 years after project completion or contract termination

• Financial and tax records: 7 years as per Indian and Bangladesh accounting regulations

• Communication records: 2 years after last interaction

• Website analytics: 12 months

• Security logs: 1 year unless legal obligations require longer retention

• Employee records: Duration of employment plus 7 years

• Job applicant data: 1 year after recruitment process completion

After retention periods expire, we securely delete or anonymize personal data unless legal requirements mandate continued storage.

9. Data Breach Notification

In accordance with DPDPA, GDPR, and Bangladesh privacy regulations:​

For Indian Residents: We will notify the Data Protection Board of India and affected individuals immediately upon discovering a personal data breach.​

For EU Residents: We will notify the relevant supervisory authority within 72 hours of discovering a breach that poses risk to rights and freedoms, and notify affected individuals without undue delay for high-risk breaches.​

For Bangladesh Residents: We will follow Bangladesh’s 2025 privacy law requirements, notifying authorities and affected individuals within 72 hours.​

Notifications will include the nature of the breach, categories of data affected, potential consequences, remedial measures taken, and contact information for further inquiries.

10. Individual Rights

Depending on applicable law and location, individuals have the following rights:​

All Individuals:

• Right to access personal data we hold and processing information

• Right to correction of inaccurate or incomplete information

• Right to erasure/deletion (subject to legal retention requirements)

• Right to withdraw consent at any time

• Right to grievance redressal and complaint to supervisory authorities

• Right to nominate another person to exercise rights (India-specific)

EU Residents (Additional GDPR Rights):

• Right to data portability in structured, machine-readable format

• Right to object to certain types of processing

• Right to restrict processing under specific circumstances

• Right not to be subject to automated decision-making and profiling

To exercise these rights, contact us at queries@labartise.com or labartise@gmail.com. We will respond within:

• India: As prescribed by DPDPA rules (typically 30 days)

• EU: 1 month (extendable by 2 months for complex requests)

• Bangladesh: 30 days

11. Cookies and Tracking Technologies

Our website uses cookies and similar technologies:​

Essential Cookies: Required for website functionality, authentication, and security
Analytics Cookies: Google Analytics and similar tools to understand user behavior and improve website performance
Performance Cookies: To optimize loading speed and user experience
Marketing Cookies: With consent, to deliver relevant advertisements and track campaign effectiveness

Users can manage cookie preferences through browser settings or our cookie consent banner. Disabling certain cookies may affect website functionality.

12. Children’s Privacy

Our services are not directed to individuals under 18 years of age. Under DPDPA, we define children as individuals below 18 years. Under GDPR, children are individuals below 16 years (or lower age as defined by member states). We do not knowingly collect personal information from children without verifiable parental or legal guardian consent. If we discover such collection, we will promptly delete the information and cease processing.​

For projects involving children’s data, we obtain verifiable consent from parents or guardians and refrain from tracking, behavioral monitoring, or targeted advertising at children as required by DPDPA.​

13. Third-Party Links and Services

Our website and services may contain links to third-party websites, applications, or services with separate privacy policies. We are not responsible for their privacy practices, data collection, or security measures. Users should review third-party policies before providing personal information.​

14. Marketing Communications

We may send marketing emails about our services, case studies, blog posts, and industry updates. Recipients can opt-out at any time using the unsubscribe link in emails or by contacting us. We will honor opt-out requests promptly (within 10 business days).​

15. Data Protection Officer and Contact

For privacy-related inquiries, data protection questions, or to exercise individual rights, contact:​

Global Data Protection Contact:
Email: queries@labartise.com, labartise@gmail.com
India Office: Pusad, India
Bangladesh Office: East Rampura, Dhaka, Bangladesh

India-specific inquiries: Our Data Protection Officer (India-based) is available for Indian residents.​

EU-specific inquiries: EU residents may also contact their local Data Protection Authority for complaints.

16. Data Localization

We comply with data localization requirements as mandated by applicable regulations:​

India: Certain categories of personal data specified by the Indian Government (applicable to Significant Data Fiduciaries) must be stored and processed within India. We comply with RBI requirements for payment system data localization.​

Other Jurisdictions: We comply with sector-specific localization requirements for financial, healthcare, and regulated industries as applicable.

17. Significant Data Fiduciary Obligations (India)

If classified as a Significant Data Fiduciary under DPDPA, we will:​

• Appoint an India-based Data Protection Officer

• Conduct annual Data Protection Impact Assessments (DPIAs)

• Undergo regular independent audits and submit reports to the Data Protection Board

• Implement heightened security measures and accountability standards

• Ensure algorithmic software does not pose risks to Data Principal rights

18. Consent Management

We obtain clear, informed, specific, and affirmative consent before collecting personal data. Consent mechanisms include:​

• Opt-in checkboxes (pre-checked boxes are not used)

• Electronic signatures on agreements

• Explicit verbal or written agreements

• Cookie consent banners for website tracking

For Indian residents, consent requests include itemized descriptions of personal data, specified purposes, and clear withdrawal mechanisms as required by DPDPA.​

Users can withdraw consent at any time by contacting us. Upon withdrawal, we will cease processing unless legal obligations require continued retention.

19. Automated Decision-Making and Profiling

We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects individuals without appropriate safeguards and human review, as required by GDPR and other applicable laws.​

20. Policy Updates

We may update this Privacy Policy to reflect legal changes, business practices, or regulatory requirements. Significant changes will be communicated via:​

• Email notification to registered users and clients

• Prominent website notice

• Updated “Last Updated” date at the top of this policy

Continued use of services after changes constitutes acceptance of the updated policy. For material changes affecting data processing, we will obtain renewed consent where required by law.

21. Compliance and Accountability

Labartise maintains robust data protection practices:​

• Regular privacy impact assessments and risk evaluations

• Detailed records of processing activities and data flows

• Comprehensive employee training on data protection and privacy

• Third-party vendor due diligence and data processing agreements

• Periodic external audits for compliance verification

• Documented policies and procedures for data handling

22. Supervisory Authority Contact

India: Data Protection Board of India (once established)​

EU: Relevant Data Protection Authority in your EU member state​

Bangladesh: Relevant regulatory authority for digital privacy complaints​

Contact Information:
ল্যাবার্টাইজ Labartise
Head Office: Pusad, India
Bangladesh Office: 133/4 East Rampura, Dhaka, Bangladesh
Email: queries@labartise.com, labartise@gmail.com
Website: labartise.com