Privacy Policy

Last updated: 1 September 2026. Controller: EOR Bangladesh Limited, Road 1, House 36, Block E, Banasree, Rampura, Dhaka 1219, Bangladesh. Contact: [email protected]. Data-protection contact: [email protected].

What data we collect from this website

Contact and quote forms: name, work email, company, country, headcount, phone (optional), service interest, message and any file you upload
Technical data: IP address and user agent in server logs; reCAPTCHA v3 signals on pages with forms (provided by Google under its own privacy policy)
Analytics: none. This site sets no analytics cookies.

Why we process it

To respond to your enquiry and prepare a proposal (pre-contract steps at your request)
To prevent spam and abuse of the forms (legitimate interest)
To meet legal and accounting record-keeping obligations

How long we keep it

Enquiry data is kept for 24 months unless an engagement follows, in which case it becomes part of the client record and is kept for the life of the engagement plus seven years. Uploaded files are deleted from the web server immediately after the email is sent. Server logs are rotated after 90 days.

Who we share it with

Our email host (cPanel mail on our Singapore server), Google (reCAPTCHA), and professional advisers (Rahman & Associates; Ahmed Karim & Co.) under confidentiality. We do not sell personal data.

Employee data

For people employed by EORBangladesh on behalf of a client, we process the personal data required for employment, payroll and statutory reporting (including national ID, e-TIN, bank details, salary and leave records) and share it with the NBR, the employee's bank and statutory bodies as the law requires, and with the client to the extent needed to manage the work. Payroll records are retained for seven years. Details are set out in the employee privacy notice issued with the employment contract and in the client services agreement.

Your rights

You can ask what data we hold, ask for correction or deletion, and object to processing, by emailing [email protected]; we respond within 30 days. Where the GDPR or UK GDPR applies you also have the right to complain to your supervisory authority.

International transfers

Data is stored on encrypted servers in Singapore (AWS ap-southeast-1) with backups in Dhaka. Transfers from the EU and UK are made under standard contractual clauses included in our data-processing agreement.

Cookies

This site sets no cookies of its own. The reCAPTCHA script on the contact and pricing pages may set cookies controlled by Google.