How we handle your data.

Who we are

EORBangladesh Ltd. (RJSC C-186423/2019), registered office at Road 1, House 36, Block E, Banasree, Rampura, Dhaka – 1219. Data-protection queries: [email protected]. Phone +880 1711 009920.

What data we collect

We collect three categories of personal data:

• Website visitors: IP address, browser/device metadata, referring URL, and any form-submission content (name, email, phone, company, message).
• Candidates and prospective employees: CV, work history, references, education, government-issued IDs (NID, passport, TIN) as required for Bangladesh employment law.
• Employees hired under our EOR service: full HR record — contract, salary, bank details, PF, gratuity, medical, appraisals, leave, tax filings.

Lawful basis

• Contract performance — to deliver the EOR, payroll and HR services agreed with the client and employee.
• Legal obligation — Bangladesh Labour Act 2006, NBR income-tax rules and BIDA regulations require us to hold specific employment records.
• Legitimate interests — improving the website and responding to prospective-client enquiries.
• Consent — for marketing communications, cookie categories other than strictly-necessary, and any optional data.

Cookies & analytics

The site sets a small number of strictly-necessary cookies (session state, security). We use privacy-respecting analytics to understand aggregate traffic patterns; no analytics data is used to profile individual visitors. Google reCAPTCHA v3 is loaded on contact forms to prevent spam; its use is governed by Google's privacy policy.

Where data lives

Personal data is stored in AWS Mumbai (ap-south-1) with an encrypted backup in AWS Singapore (ap-southeast-1). Encryption is AES-256 at rest and TLS 1.3 in transit. Access is restricted to named staff on SSO with 2FA; access is reviewed quarterly.

How long we keep it

• Website enquiry data — up to 24 months after last contact.
• Candidate data — up to 24 months after the last relevant application, unless you ask us to delete sooner.
• Employee records — 7 years after termination to meet Bangladesh statutory record-keeping obligations, then securely destroyed.
• Payroll and tax filings — 7 years as required by NBR.

Your rights

You can ask us at any time to (a) confirm what personal data we hold about you, (b) correct it, (c) delete it (where we have no overriding legal obligation to retain it), (d) restrict processing, and (e) provide a copy in a portable format. Email [email protected] and we respond within 30 days.

Sub-processors

We use a short list of vetted sub-processors: cloud hosting (AWS), email delivery (SES), payment banking (Eastern Bank PLC), audit (A.Q. Khan & Co.), legal (Rahman & Rahman Associates), immigration (Bengal Legal Consultants). Each has a written DPA and is bound by NDAs. A current list is available on request.

Changes to this policy

We revise this policy when the law changes or when we introduce new tools. The date at the top of the page shows when the current version was reviewed. Material changes are notified to active clients by email 30 days in advance.