Privacy Policy গোপনীয়তা নীতি

Cox's Bazar Surf Hub Pvt. Ltd. is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information across all our services — physical, digital, and social. কক্সবাজার সার্ফ হাব আপনার গোপনীয়তা রক্ষায় প্রতিশ্রুতিবদ্ধ। এই নীতি ব্যাখ্যা করে আমরা কীভাবে তথ্য সংগ্রহ, ব্যবহার ও সুরক্ষা করি।

01Data Controller ডেটা নিয়ন্ত্রক

The data controller is Cox's Bazar Surf Hub Private Limited, represented by its CEO Sha Hosen, Cox's Bazar, Bangladesh. All data-related requests should be directed to: info@coxsbazarsurfhub.com

02Information We Collect আমরা যে তথ্য সংগ্রহ করি

A. Information You Provide Directly

• Full name, date of birth, nationality
• Contact details (phone number, email address, physical address)
• Emergency contact information
• Medical and health information (disclosed for safety purposes)
• Payment details (processed securely; card numbers are not stored)
• Booking and transaction history
• Coaching and fitness assessment data
• Correspondence, complaints, and feedback

B. Information We Collect Automatically

• IP address, browser type, and device information
• Pages visited on our website and time spent
• Social media interactions with our pages (likes, comments, shares)
• Cookie data (see our Cookie Policy)
• CCTV footage from our premises (for safety and security)

C. Information From Third Parties

• Social media profile information (when you connect or follow our platforms)
• Referral or booking data from travel agents or partner businesses

03How We Use Your Information আমরা যেভাবে তথ্য ব্যবহার করি

• To process bookings and manage your account
• To deliver surf lessons, coaching, restaurant, gym, and other services
• To ensure health and safety during all activities
• To send booking confirmations, reminders, and service updates
• To process payments and issue receipts
• To improve our services, facilities, and digital platforms
• To respond to enquiries, complaints, and feedback
• To send promotional communications (only with your consent)
• To comply with Bangladeshi legal and regulatory obligations
• To investigate and prevent fraud or misuse of our services

04Legal Basis for Processing প্রক্রিয়াকরণের আইনি ভিত্তি

We process your data on the following legal grounds:

• Contract performance — to deliver the service you have booked
• Legal obligation — to comply with Bangladeshi law
• Legitimate interests — to operate and improve our business safely
• Consent — for marketing communications and photography use

05Data Sharing তথ্য আদান-প্রদান

We do not sell your personal data. We may share your information with:

• Instructors, coaches, and staff involved in your session
• Emergency services or medical professionals in a safety emergency
• Payment processors and banking institutions
• Government authorities when required by law or court order
• IT service providers and hosting partners (bound by confidentiality)
• Safari and travel partners where relevant to your booking

All third parties processing data on our behalf are bound by appropriate data protection obligations.

06Social Media & Digital Platforms সোশ্যাল মিডিয়া

Our social media presence spans Instagram, Facebook, YouTube, TikTok, and others. When you interact with our pages:

• Platform-level data is subject to that platform's own privacy policy.
• We may use your publicly available interaction data for analytics and community engagement.
• We will not share, sell, or misuse your personal messages or contact details obtained via social media.
• If you tag us in content, we may reshare it. Contact us to request removal.

07Photography, Video & Marketing ফটোগ্রাফি ও বিপণন

Photos and videos captured during activities may be used for our website, social media, and promotional materials. The following rules apply:

• We will always seek consent before using identifiable images of individuals.
• Images of minors will never be shared without explicit written guardian consent.
• You may opt out of photography at any time by informing staff in writing.
• To request removal of an image, contact: info@coxsbazarsurfhub.com

08Data Retention তথ্য সংরক্ষণ

• Booking records: minimum 5 years (for tax and legal compliance)
• Health/medical data: 3 years post last interaction, then securely deleted
• CCTV footage: overwritten after 30 days unless required for investigation
• Marketing consent records: until consent is withdrawn + 1 year
• Website/analytics data: 26 months

09Your Rights আপনার অধিকার

Under Bangladeshi law and as a matter of Company policy, you have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request erasure of your data (subject to legal retention requirements)
• Objection: object to processing for marketing purposes at any time
• Portability: receive your data in a structured, machine-readable format

To exercise any of these rights, email us at info@coxsbazarsurfhub.com with subject line "Data Rights Request". We will respond within 30 days.

10Data Security তথ্য নিরাপত্তা

We implement technical and organisational security measures including:

• Secure server infrastructure and encrypted data transmission (SSL/TLS)
• Access controls limiting staff access to personal data on a need-to-know basis
• Regular security reviews and staff data protection training
• Physical security measures at our premises

In the event of a data breach that poses risk to individuals, we will notify affected parties as required by law.

11Cookies কুকিজ

Our website uses cookies. Please refer to our separate Cookie Policy for full details. You can manage cookie preferences in your browser settings.

12Children's Privacy শিশুদের গোপনীয়তা

We do not knowingly collect personal data from children under 8. Where services involve minors, we collect parental/guardian data and handle it with heightened care and confidentiality.

13International Data Transfers আন্তর্জাতিক ডেটা স্থানান্তর

Where our digital platforms use international service providers (e.g., Meta, Google), your data may be processed outside Bangladesh. We ensure such providers maintain appropriate safeguards equivalent to Bangladeshi data protection standards.

14Policy Updates নীতি আপডেট

This Privacy Policy will be reviewed at least annually or following significant changes to our services or the law. The current version will always be available at our premises and on our website.