01
Who is responsible
WinstarIT decides how and why personal data from this website is handled, which makes us the controller of it. Our office is in Dhaka, Bangladesh, and our contact details are on the contact page.
This policy covers this website. Our products, Exkoo, PropertyChain and Mailkoo, each handle data under their own policy, agreed when an account is created.
02
What we collect
We keep this deliberately small. There are two ways data reaches us from this site.
- What you send us. When you fill in the enquiry form we receive your name, your phone number, your email address, the service you selected and the message you wrote. If you email or call instead, we have whatever you chose to tell us.
- What the server records. Like any web server, ours keeps technical logs — IP address, browser and device type, the pages requested and when. These are used to keep the site running and secure.
03
Why we use it
We use what you send us to answer your enquiry, to prepare a proposal, and to carry out work if you go on to become a client. We use server logs to keep the site available, to diagnose faults and to protect it from abuse.
- To reply to you and to discuss the work you asked about.
- To prepare and send proposals, and to run a project if one begins.
- To keep records we are required by law to keep, such as for tax and accounting.
- To keep the website secure and working.
04
Marketing
We do not add you to a mailing list because you sent an enquiry. If we ever want to send you something that is not a reply to you, we will ask first, and anything we do send will carry a way to stop it.
05
Cookies and tracking
This site runs no analytics, advertising or social tracking scripts, and it sets no cookies for those purposes. Nothing here follows you to another website.
Your browser stores one thing on our behalf: whether you chose the light or the dark theme, so the site opens the way you left it. It stays in your browser, it is not sent to us, and clearing your browser data removes it.
06
Who else sees it
We do not sell personal data, and we do not share it for anyone else's marketing.
An enquiry you send is passed to the system where our team works on it — our customer relationship system and our email provider — so that someone can answer you. Our website hosting provider necessarily processes requests to the site. Each of these acts on our instructions and only for these purposes.
We will disclose data if the law requires it, or to establish or defend a legal claim.
07
Where it is held
The services we use to host this site and to handle enquiries may store data on servers outside Bangladesh. Where that happens, we choose established providers and rely on their contractual protections for the data they hold for us.
08
How long we keep it
An enquiry that does not become a project is kept for up to two years, so we have the context if you come back to us, and is then deleted.
Records belonging to a client relationship are kept for as long as the relationship lasts and then for the period the law requires us to keep business records.
Server logs are kept for a short period, measured in weeks, and then overwritten.
09
Your choices
Write to us at any time and we will act on any of these without charge:
- ask what personal data of yours we hold, and get a copy
- have something corrected if it is wrong
- have your data deleted, where we are not required to keep it
- ask us to stop using it for a particular purpose
10
Keeping it safe
The site is served over an encrypted connection. Access to enquiries is limited to the people who need it, and we review that access as the team changes.
No system is perfectly secure. If something goes wrong in a way that affects you, we will tell you.
11
Children
This site is meant for business use and is not directed at children. We do not knowingly collect data about anyone under 18.
12
Changes to this policy
When how we handle data changes, this page changes with it, and the date at the top is updated. If a change is significant, we will say so here rather than let it pass quietly.
13
Asking us something
Any question about this policy, or any request about your data, can go to the email address on our contact page, and a person will answer it.