Privacy Policy

YESS Bangla Private Limited (“YESS Bangla”, “we”, “our”, “us”) is a private limited company incorporated in Bangladesh, with its registered office at Block A, Road 3, House 127 (Green View), 1st Floor, Mirpur 12, Dhaka 1216. We act as the data controller of personal information collected through this website and our service engagements.

Questions about this policy can be sent to privacy@yessbangla.com.

• Identity & contact data — name, email, phone, company, role and country provided through contact, careers, sales or support forms.
• Application data — résumé/CV, cover letter, employment history and any references you submit when applying for a role.
• Engagement data — project briefs, written communication, meeting notes and deliverables shared during paid engagements.
• Technical data — IP address, device, browser, language, referring URL and pages visited via cookies and analytics SDKs.
• Cookies — strictly-necessary cookies for sessions, plus optional analytics cookies (only set after consent where law requires).

• Contract — to deliver services you have engaged us for.
• Legitimate interests — to operate, secure and improve our website and respond to enquiries.
• Consent — for marketing emails, optional cookies and any sensitive data processing.
• Legal obligation — to comply with tax, accounting, employment and regulatory requirements.

We use personal data to respond to enquiries, deliver and invoice services, evaluate job applications, send service updates, secure our infrastructure, comply with legal obligations and — only with consent — send occasional newsletters.

We do not sell personal data. We share it only with vetted sub-processors under written confidentiality terms, including hosting (Cloudflare, Lovable Cloud), email delivery, analytics and customer-support tooling. A current list is available on request.

We may disclose information when required by Bangladeshi law, court order or to protect our legal rights.

Some sub-processors operate outside Bangladesh. Where personal data is transferred internationally, we rely on Standard Contractual Clauses or equivalent safeguards to ensure an adequate level of protection.

• Contact-form submissions: up to 24 months from last interaction.
• Job applications: up to 12 months after the role is closed (longer with explicit consent).
• Client engagement records: 7 years to meet statutory accounting and audit requirements.
• Analytics data: aggregated and retained up to 26 months.

Subject to applicable law (including GDPR, UK GDPR and Bangladesh’s Data Protection framework), you may:

• Access a copy of the personal data we hold about you.
• Request correction or deletion of inaccurate or outdated data.
• Object to or restrict processing based on legitimate interests.
• Withdraw consent for marketing or optional cookies at any time.
• Lodge a complaint with your local data protection authority.

To exercise any right, email privacy@yessbangla.com. We respond within 30 days.

We protect data with TLS in transit, encryption at rest, role-based access controls, audit logging on administrative actions, least-privilege service accounts and regular vulnerability reviews. No system is perfectly secure — we will notify you and the appropriate authority within 72 hours of becoming aware of a breach affecting your personal data.

Our services are not directed to children under 16. We do not knowingly collect personal data from minors; if you believe we have, please contact us so we can delete it.

We may update this policy to reflect operational, legal or regulatory changes. The “last updated” date below will change accordingly. Material changes will be announced on this page or via email where appropriate.