1. Introduction
Welcome to Retouch BD ("we," "our," or "us"). We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our photo retouching services, visit our website at retouchbd.com, or communicate with us.
By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access our website or use our services.
2. Information We Collect
2.1 Personal Information
When you contact us or request our services, we may collect the following personal information:
- Contact Information: Name, email address, phone number, company name, and mailing address
- Account Information: Username, password (encrypted), and account preferences
- Payment Information: Billing address, payment card details (processed securely through third-party payment processors)
- Communication Data: Any information you provide in emails, phone calls, or messages with our team
- Project Details: Service type requested, project specifications, deadlines, and special requirements
2.2 Images and Files
When you submit images for retouching, we collect:
- Original image files in various formats (JPEG, PNG, TIFF, PSD, RAW, etc.)
- Associated metadata (file names, creation dates, camera information)
- Editing instructions, reference images, and style preferences
- Feedback and revision requests during the editing process
2.3 Automatically Collected Information
When you visit our website, we automatically collect certain information about your device and browsing activity:
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent on pages, referring URLs, click patterns
- Cookies and Tracking Technologies: See our Cookies Policy for detailed information
3. How We Use Your Information
We use the collected information for the following purposes:
3.1 Service Delivery
- Processing and fulfilling your photo retouching orders
- Communicating with you about your projects, quotes, and deliveries
- Providing customer support and responding to your inquiries
- Managing revisions and ensuring your satisfaction with our work
3.2 Business Operations
- Processing payments and maintaining financial records
- Sending invoices, receipts, and payment confirmations
- Maintaining accurate business records and accounting
- Conducting internal research and analysis to improve our services
3.3 Marketing and Communication
- Sending promotional emails about our services, special offers, and updates (with your consent)
- Providing information about new services or features
- Conducting customer satisfaction surveys
- You can opt-out of marketing communications at any time by clicking "unsubscribe" in our emails
3.4 Legal and Security
- Complying with legal obligations and responding to legal requests
- Protecting against fraud, unauthorized access, and security threats
- Enforcing our terms of service and protecting our rights
- Resolving disputes and addressing complaints
4. How We Protect Your Images
We understand that your images are valuable and often confidential. We take the following measures to protect them:
- Secure Storage: All images are stored on encrypted, password-protected servers with restricted access
- Secure Transfer: Images are transferred using secure protocols (HTTPS, SFTP) with encryption
- Access Control: Only authorized team members working on your project can access your images
- Confidentiality: We never share, sell, or use your images for any purpose other than providing our services
- Automatic Deletion: Images are automatically deleted from our servers 30 days after project completion, unless you request longer storage
- NDA Available: We can sign Non-Disclosure Agreements (NDAs) for sensitive projects upon request
- Portfolio Usage: We never use your images in our portfolio or marketing materials without your explicit written permission
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:
5.1 Service Providers
We may share information with trusted third-party service providers who assist us in operating our business:
- Payment Processors: To process transactions securely (e.g., PayPal, Stripe)
- Cloud Storage Providers: To store data securely (with encryption)
- Email Service Providers: To send communications and newsletters
- Analytics Services: To understand website usage and improve our services
All service providers are contractually obligated to maintain confidentiality and security of your data.
5.2 Legal Requirements
We may disclose your information if required to do so by law or in response to:
- Valid legal processes (subpoenas, court orders, legal proceedings)
- Government or regulatory requests
- Protection of our legal rights or defense against legal claims
- Prevention of fraud or illegal activities
- Protection of the safety and security of individuals
5.3 Business Transfers
If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website of any change in ownership or use of your information.
6. Data Retention
We retain your information for different periods depending on the type of data:
- Images: Deleted automatically 30 days after project completion (extended storage available upon request)
- Personal Information: Retained for as long as you have an active account or as needed to provide services
- Financial Records: Retained for 7 years for accounting and tax compliance purposes
- Communications: Retained for 2 years for customer service and quality assurance
- Marketing Data: Retained until you opt-out or request deletion
You can request deletion of your data at any time by contacting us at info@retouchbd.com.
7. Your Rights and Choices
You have the following rights regarding your personal information:
7.1 Access and Portability
- Request a copy of the personal information we hold about you
- Request your data in a portable, machine-readable format
7.2 Correction and Update
- Update or correct inaccurate or incomplete personal information
- Update your communication preferences
7.3 Deletion and Restriction
- Request deletion of your personal information (subject to legal retention requirements)
- Request restriction of processing your personal information
- Object to processing of your personal information
7.4 Marketing Opt-Out
- Unsubscribe from marketing emails by clicking "unsubscribe" in any email
- Contact us to opt-out of other marketing communications
7.5 Cookie Management
- Manage cookie preferences through your browser settings
- See our Cookies Policy for more information
To exercise any of these rights, please contact us at info@retouchbd.com. We will respond to your request within 30 days.
8. International Data Transfers
While we are based in Bangladesh, we serve clients worldwide. Your information may be transferred to, stored, and processed in countries other than your country of residence. These countries may have different data protection laws than your country.
When we transfer your information internationally, we ensure appropriate safeguards are in place:
- Use of secure, encrypted transmission methods
- Contracts with service providers requiring adequate data protection
- Compliance with applicable international data protection regulations
- Regular security audits and assessments
9. Security Measures
We implement comprehensive security measures to protect your information:
- Encryption: SSL/TLS encryption for data transmission, AES-256 encryption for data storage
- Access Controls: Role-based access, two-factor authentication for team members
- Network Security: Firewalls, intrusion detection systems, regular security audits
- Physical Security: Secure data centers with restricted physical access
- Employee Training: Regular security awareness and privacy training for all team members
- Backup Systems: Regular encrypted backups with secure off-site storage
- Incident Response: Procedures for detecting, responding to, and reporting security incidents
While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but continuously work to improve our security measures.
10. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at info@retouchbd.com, and we will take steps to delete that information.
11. Third-Party Links
Our website may contain links to third-party websites, services, or resources that are not owned or controlled by us. This Privacy Policy applies only to our website and services.
We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit. Providing a link does not constitute an endorsement of that website's content, products, or privacy practices.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:
- Update the "Last Updated" date at the top of this policy
- Post the revised policy on our website
- Notify you via email if the changes are material (for registered users)
- Provide prominent notice on our website for significant changes
We encourage you to review this Privacy Policy periodically. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We take privacy concerns seriously and will respond to your inquiry promptly.
14. Legal Compliance
We strive to comply with applicable data protection laws and regulations, including but not limited to:
- General Data Protection Regulation (GDPR) for European Union clients
- California Consumer Privacy Act (CCPA) for California residents
- Personal Data Protection Act of Bangladesh
- Other applicable regional and international privacy laws
If you believe we have not complied with applicable data protection laws, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.