PRIVACY POLICY / LAST UPDATED 12 SEPTEMBER 2026
This policy explains what personal information Rashed Digital collects through this website, why it is used, who may process it, how long it is kept, and the choices available to you.
At a glance: enquiry details are used to respond to you; necessary site storage supports security and remembers your choices; optional analytics measurement is used only with consent. Rashed Digital does not sell your personal information.
Who is responsible
Rashed Digital is a personal professional service operated by Rashed Hasan in Khulna, Bangladesh. Rashed Hasan is responsible for the personal information described in this policy.
For a privacy question or request, email rashed@rasheddigital.com.
Information you provide
If you use the enquiry form, you provide your first name, last name, email address, general location, and message. The location field asks only for a country, region, or time zone; a street address is not required. Please do not send passwords, payment details, private access credentials, or other sensitive information through the form.
If you contact Rashed Digital by email or WhatsApp, the information you include in that communication is also received. If a business relationship begins, later communications may contain project, account, billing, or contractual information supplied for that work. Those records are handled according to their purpose and any applicable agreement.
How and why information is used
Enquiry information is used to read and respond to your message, understand the requested service, prepare or discuss a possible scope or quote, keep a record of the conversation, prevent misuse, and establish or perform a service agreement when requested.
Depending on the law that applies, this processing is based on taking steps at your request before a contract, performing a contract, complying with legal obligations, and legitimate interests in communicating with prospective clients, operating a secure website, preventing spam, and maintaining appropriate business records. Optional analytics or advertising technologies, if introduced later, will rely on the consent choices described below where consent is required.
Rashed Digital does not use website enquiry information for automated decisions that produce legal or similarly significant effects. It is not added to a marketing mailing list unless a separate, clear choice is offered and you opt in.
Form delivery and anti-spam controls
The website validates form entries and sends accepted enquiries by email to Rashed Digital. The visitor email address is used as the Reply-To address so Rashed can respond. The public contact address and intended recipient are rashed@rasheddigital.com; website mail is sent through the dedicated address wp@rasheddigital.com.
The application does not save the enquiry message as a WordPress post or database record. Delivery and email systems may retain the resulting email. To limit spam and duplicate submissions, the site creates one-way security hashes derived from a form token or the connecting IP address. These guard records do not contain the message or plain IP address. Rate-limit hashes expire at the end of a 15-minute window; duplicate-submission hashes expire after two hours.
Technical information and hosting
When you request a page, the website and its hosting infrastructure may process technical information such as IP address, date and time, requested URL, response status, browser or device information, and security events. This information is used to deliver the website, diagnose faults, protect it from abuse, and maintain service reliability.
Rashed Digital uses Hostinger for website hosting and email services. Hostinger may process technical and communication data as a service provider under its own terms and data-handling practices. You can read the Hostinger privacy policy.
Cookies and browser storage
The public website is designed to work without optional tracking. It may use necessary cookies or browser storage for security and site functions. WordPress may use login or administration cookies for authorized site managers; ordinary visitors do not need an account.
- rd-theme: stores your light, dark, or system theme preference in your browser until you change it or clear site data.
- rd-consent-v1: stores your analytics and advertising choices, the choice date, and a configuration revision in your browser for up to 180 days. It contains no name, email address, or visitor identifier.
- Google Analytics cookies: may be set only after you allow Analytics. Their names and duration are controlled by Google Analytics and your browser settings.
- Form security: WordPress supplies short-lived form security values. The server-side one-way guard records and their expiry periods are described above.
You can clear browser storage through your browser settings. If storage is blocked or a saved choice is invalid, expired, future-dated, or belongs to an older configuration, optional tracking stays off. Clearing necessary storage may reset your theme or consent preferences.
Analytics and advertising
With your consent, Rashed Digital uses Google Tag Manager and Google Analytics 4 to understand how the website is used and to improve its contact paths. The measurement records page visits and whether a visitor selects a telephone link, selects an email link, or has a contact-form enquiry accepted by the website.
Contact-form measurement records only that an enquiry was accepted. It does not send the name, email address, telephone number, message, or other content entered into the form to Google Analytics. Rashed Digital does not use Google Analytics to identify you directly.
Analytics is optional. It remains off unless you allow Analytics through the cookie banner or Cookie preferences in the footer; closing the banner without allowing Analytics leaves it off. You can change or withdraw that choice at any time through Cookie preferences. Withdrawing consent affects future processing and cannot undo information already processed lawfully. The site attempts to remove accessible first-party Google measurement cookies when permission is reduced, but browser code cannot remove HttpOnly or third-party cookies.
Google Analytics event data is configured to be retained for 12 months. Google processes relevant technical and interaction information under the Google Privacy Policy. Advertising choices are shown separately in Cookie preferences, but no advertising tags are active as of the date of this policy.
Service providers, external links, and international processing
Personal information may be handled by providers that support website hosting, email delivery, security, and communications. Access is limited to what is reasonably necessary for those services. Information may also be disclosed when required by law, to establish or defend legal rights, or to protect people, the website, or its services from fraud or security threats.
The website links to WhatsApp and LinkedIn but does not embed their tracking widgets. If you follow a link or contact Rashed Digital through one of those services, that provider processes information under its own policy: WhatsApp privacy information and LinkedIn privacy policy.
Rashed Digital is based in Bangladesh and works with people internationally. Hostinger, email, WhatsApp, LinkedIn, and any future approved providers may process information in countries other than yours. Those countries may have different privacy laws. Where applicable law requires safeguards for an international transfer, Rashed Digital will use the provider terms or other lawful safeguards available for that transfer.
How long information is kept
- Ordinary enquiries: normally up to 12 months from the last meaningful communication, then deleted when no longer needed.
- Client, transaction, tax, contractual, dispute, or legal records: for the period required by the applicable obligation or reasonably needed to establish, exercise, or defend legal rights.
- Anti-spam guard records: 15 minutes for rate limiting and two hours for duplicate-submission protection.
- Consent preference: up to 180 days in your browser unless you change it or clear site data.
- Google Analytics event data: 12 months in the Google Analytics property.
- Hosting and email logs or backups: according to operational, security, backup, and provider retention schedules; these periods should be reviewed when production hosting is configured.
Information may be deleted earlier when it is no longer needed. A limited record may be retained longer when deletion would conflict with a legal requirement, security need, or active dispute.
Your privacy rights and choices
Depending on where you live and the law that applies, you may have rights to ask for access to personal information, correction, deletion, restriction, portability, or information about processing; to object to certain processing; and to withdraw consent. You may also have the right to complain to the privacy or data-protection authority where you live.
To make a request, email rashed@rasheddigital.com and describe what you need. Rashed Digital may ask for enough information to verify the request and protect information from unauthorized disclosure. Requests will be handled within the period required by applicable law. Withdrawing consent does not affect processing that was lawful before withdrawal.
Security
Rashed Digital uses reasonable technical and organizational measures appropriate to this website, including validation, anti-spam controls, limited administrative access, software updates, and HTTPS on the live site. Authenticated email delivery is required before the public contact form is enabled. No internet transmission or storage system can be guaranteed completely secure.
Children
This business website and its services are intended for business enquiries, not for children. Rashed Digital does not knowingly ask children to submit personal information through the website. If you believe a child has submitted information, contact rashed@rasheddigital.com so it can be reviewed and deleted where appropriate.
Changes to this policy
This policy will be reviewed when the website adds or changes forms, hosting, email delivery, analytics, advertising, embedded services, or other material data practices. The date at the top will be updated when the policy changes. If information is to be used for a materially different purpose, appropriate notice or consent will be provided before that use where required.