Privacy policy

Ikhlas IT is a software engineering studio registered in Bangladesh, with its registered office at Level 7, Gulshan Avenue, Dhaka 1212, Bangladesh. For any privacy question, write to privacy@ikhlasit.com. If you are in the EEA or the UK, Ikhlas IT is the data controller for the data described in this policy.

Information you give us

• Consultation and contact forms — your name, email address, company, optional phone number, budget range, time zone and the project details you type.
• Newsletter signup — your email address only.
• Live chat — the messages you send our support team through the chat widget, kept as a support transcript so we can follow up. We use a third-party chat provider (tawk.to) that processes this data on our behalf.

Information collected automatically

• Server logs — IP address, browser and device type, requested URL, timestamp and referrer, retained for 30 days for security and abuse prevention.
• Aggregate analytics — anonymised page-view counts. No advertising cookies, no cross-site tracking, no third-party ad pixels.

We do not use advertising or social tracking cookies, we do not sell data to brokers, and we do not attempt to fingerprint devices. We do not ask for special-category data (health, biometrics, political or religious views) and you should never send us any.

• To respond to you (contract, and our legitimate interest in replying to business enquiries) — so we can answer your question or arrange a consultation.
• To provide a contracted service (contract) — once you become a client, to deliver the engineering work you have engaged us for.
• To send the newsletter (consent) — only if you explicitly subscribe, and only until you unsubscribe.
• To keep the site secure (legitimate interest) — short-lived server logs and rate limiting to prevent abuse.

We share personal data only where necessary, and only with:

• Our email and hosting providers purely to deliver the service.
• Professional advisers — accountants or lawyers where the law requires disclosure.
• Nobody else. We do not sell, rent or trade personal data.

Client project data is different. Data you send us for a project is governed by the engagement contract and any NDA you sign — never by this website policy. Where we operate on your infrastructure, the data stays on your servers and we act only on your documented instructions.

• Enquiries that do not become projects — 24 months, then deleted.
• Newsletter subscribers — until you unsubscribe, plus 30 days to process it.
• Server logs — 30 days.
• Client records — retained for the statutory accounting period (7 years) after the engagement ends, then deleted.
• CVs of unsuccessful applicants — 6 months.

Encryption in transit (TLS) and at rest, least-privilege access to every system, MFA on all staff accounts, and a documented incident response process. No system is perfect, but a breach is disclosed to affected clients and users without undue delay and in line with applicable law.

Wherever you live, we will honour these:

• Access — a copy of the personal data we hold about you.
• Correction — fix anything inaccurate.
• Deletion — erase your data where we have no overriding reason to keep it.
• Objection and restriction — stop processing, or limit it to storage only.
• Portability — receive your data in a machine-readable format.
• Withdraw consent — unsubscribe from the newsletter at any time, with no consequence.

Email privacy@ikhlasit.com and we will respond within 30 days. If you are unhappy with the outcome, you may complain to your local supervisory authority.

This site is not directed at anyone under 16 and we do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

We update this page when our practices change. Material changes are announced on the homepage and the updated date is shown at the top. Prior versions are available on request.

Ikhlas IT · Level 7, Gulshan Avenue, Dhaka 1212, Bangladesh
privacy@ikhlasit.com · Book a free consultation