Privacy policy
What we collect when you contact us, who else touches it, how long we keep it, and how to make us delete it.
Last updated
Short version: we collect what an enquiry needs, we use it to reply to you, we do not sell it, and you can have it deleted by asking. The detail is below, and our terms cover the commercial side.
Scope of this policy
This policy explains what Interactive Software Care does with personal data collected through isoftwarecare.com. It covers visitors to this site and people who contact us through it.
It does not cover data we process on behalf of a client inside a product we built for them — in that relationship we act as a processor under the client's own privacy policy and our contract with them.
We are the data controller for everything described here. Contact: interactivesoftwarecare@gmail.com.
What we collect
We collect only what a business enquiry needs. Specifically:
- Contact form: your name, email address, and optionally your phone number, the service you are interested in, a budget range, and whatever you write in the message field
- The page you submitted the form from, so we know what you were reading when you got in touch
- Booking a call: your name, email and chosen time slot, collected by Cal.com rather than by us directly
- Server logs: IP address, browser user agent and timestamps, kept by our hosting provider for security and abuse prevention
- Analytics, only if enabled: aggregated page views and referrers
We do not ask for, and have no use for, payment card details through this website. Invoices are paid through the payment providers listed in our terms, each of which handles its own payment data.
We do not knowingly collect special-category data. Please do not put sensitive personal information in the message field.
Why we use it
Your enquiry details are used to reply to you, to scope and quote the work you asked about, and to keep a record of the conversation if it becomes a project.
Server logs are used to keep the site up and to stop abuse — the contact endpoint is rate limited by IP address for that reason.
Analytics, where enabled, are used to understand which pages are useful. They are not used to build a profile of you or to target advertising at you.
We do not sell your data. We do not share it with anyone for their own marketing.
Legal basis
For visitors in the UK, EU and other jurisdictions with equivalent rules, we rely on:
- Legitimate interests — responding to an enquiry you sent us, and keeping our site secure
- Steps prior to entering a contract — preparing a proposal you asked for
- Consent — analytics and marketing tags, where those are enabled and you have agreed to them
- Legal obligation — keeping financial records for the period tax law requires
Where we rely on consent, you can withdraw it at any time without affecting processing that already happened.
Who processes it with us
We keep the list of third parties deliberately short. Each one is a processor acting on our instructions:
- Plunk — sends the notification email to us and the confirmation email to you
- Cal.com — runs the booking calendar and issues the meeting invite
- MongoDB Atlas — stores enquiry records
- Vercel — hosts this website and keeps short-lived request logs
- Cloudinary — serves the images on this site; it does not receive your enquiry data
- Google Analytics, Google Tag Manager or Meta Pixel — only where an ID has been configured
We may also disclose data where the law requires it, or to establish or defend a legal claim.
International transfers
We operate from Bangladesh, and the processors above operate in the United States and the European Union. Your data will therefore be transferred outside your own country.
Where data originates in the UK or EEA, those transfers rely on the standard contractual clauses or equivalent safeguards offered by each provider.
How long we keep it
Enquiries that do not become projects are deleted within 24 months.
Records relating to an actual engagement are kept for the duration of the relationship and then for as long as tax and accounting law requires.
Server logs are kept for a short rolling window by our host. Analytics data follows the retention setting of the analytics provider.
You can ask us to delete your enquiry sooner. We will, unless we are legally required to keep it.
Your rights
Depending on where you live, you have the right to:
- Ask what personal data we hold about you and get a copy
- Have inaccurate data corrected
- Have your data deleted
- Object to, or ask us to restrict, how we use it
- Receive your data in a portable format
- Withdraw consent for analytics and marketing tags
- Complain to your local data protection authority
To exercise any of these, email interactivesoftwarecare@gmail.com. We will respond within 30 days and will not charge you for it.
Security
The site is served over HTTPS. The enquiry endpoint is rate limited and validated on the server, and it carries a hidden field that silently discards automated submissions.
Access to stored enquiries is restricted to the people who need it, over authenticated connections.
No system is perfectly secure. If we ever discover a breach affecting your data, we will tell you and the relevant authority as quickly as the law requires.
Children
This is a business-to-business site and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.
Changes to this policy
We update this policy when what we do with data changes. The date at the top of this page shows when it last changed. Material changes affecting people who have already contacted us will be communicated directly.
Contact
Questions, requests or complaints about privacy: interactivesoftwarecare@gmail.com, or write to us at Mirpur Tower, Mirpur - 1, Dhaka - 1216, Bangladesh.