Privacy Policy

Last updated: May 2026
Version: 1.0

This Privacy Policy explains how Digitize Growth collects, uses, stores, and protects your personal data when you visit digitizegrowth.com or engage our services.

  • We are committed to protecting your privacy and handling your personal data in accordance with:
  • The EU General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679
  • The UK General Data Protection Regulation (UK GDPR)
  • The Privacy and Electronic Communications Regulations (PECR) where applicable

Please read this policy carefully. If you do not agree with its terms — please do not use our website or services.

Find It Fast

1. Who We Are

Digitize Growth is the data controller responsible for your personal data.

Business name: Digitize Growth
Address: Dhaka, Bangladesh
Email: hello@digitizegrowth.com
Whatsapp: +88 017 15916 753
Website: digitizegrowth.com

As data controller, we determine the purposes and means of processing your personal data.

We do not have a statutory obligation to appoint a Data Protection Officer (DPO) as we are a small business that does not carry out large-scale processing of special category data. However, all data protection queries can be directed to: hello@digitizegrowth.com

2. What Personal Data We Collect

We collect personal data in the following ways:

A. Data you provide directly:

When you fill in our contact form:

  • Full name
  • Email address
  • Phone number (optional)
  • Website URL (optional)
  • Project description and enquiry details
  • How you found us

When you book a strategy call via Calendly:

  • Full name
  • Email address
  • Call scheduling preferences and timezone

When you engage our services:

  • Business name and address
  • Billing information (processed securely via Stripe, Wise, or PayPal — we do not store card details directly)
  • Project-related content, files, and assets you share with us

B. Data collected automatically:

When you browse our website:

  • IP address (anonymised where possible)
  • Browser type and version
  • Operating system
  • Pages visited and time spent on each page
  • Referring website or source
  • Approximate geographic location (country/city level)

This data is collected via Google Analytics and our WordPress hosting provider.

C. Special category data:

We do not intentionally collect any special category personal data (such as health information, racial or ethnic origin, political opinions, or religious beliefs). Please do not submit such information through our website.

3. Our Lawful Basis for Processing Your Data

Under GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:

Contractual necessity (Article 6(1)(b)):

  • Processing your enquiry and project brief
  • Delivering the services you have requested
  • Managing payments and project communications

Legitimate interests (Article 6(1)(f)):

  • Improving our website and services
  • Understanding how visitors use our website via anonymised analytics
  • Protecting our business from fraud or misuse

Our legitimate interests do not override your fundamental rights and freedoms.

Legal obligation (Article 6(1)(c)):

  • Retaining financial records as required by applicable law

Consent (Article 6(1)(a)):

  • Placing non-essential cookies on your device
  • Sending you marketing communications (we will always ask permission first)

You have the right to withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

4. How We Use Your Personal Data

We use the personal data we collect to:

  • Respond to your project enquiry or brief
  • Prepare and send proposals and quotes
  • Schedule and manage strategy calls
  • Deliver the web design and development services you have engaged us for
  • Process payments securely
  • Send project updates and progress reports
  • Improve our website content and performance using anonymised analytics data
  • Comply with our legal and financial obligations

We will never:

  • Sell your personal data to any third party
  • Use your data for unsolicited marketing without your explicit consent
  • Add you to a mailing list without asking for your permission first
  • Share your data with third parties for their own marketing purposes

5. How Long We Keep Your Data

We retain your personal data only for as long as is necessary for the purpose it was collected.

Our standard retention periods are:

  • Enquiry and contact form data: 12 months from the date of last contact if no project is agreed.
  • Active client project data: For the duration of the project plus 24 months after project completion — in case of disputes or follow-up requests.
  • Financial and payment records: 7 years from the date of transaction — as required by applicable financial and tax regulations.
  • Website analytics data (Google Analytics): 26 months — as per our Google Analytics data retention settings.
  • Cookie consent records: 12 months from the date of consent.

After the applicable retention period, your data will be securely deleted or anonymised. You may request earlier deletion at any time — see Section 8 for your rights.

6. International Data Transfers

Digitize Growth is based in Dhaka, Bangladesh. When you provide personal data to us — your data will be transferred to and processed in Bangladesh.

Bangladesh does not currently hold an adequacy decision from the European Commission. We therefore rely on the following safeguards to protect your data when it is transferred:

  • We implement appropriate technical and organisational security measures to protect all personal data we handle.
  • Where we use third-party processors (such as Google, Calendly, Stripe, Wise, and PayPal) — these providers are either based in the EU, certified under applicable data transfer frameworks, or operate under Standard Contractual Clauses (SCCs) approved by the European Commission.
  • We limit data transfers to what is strictly necessary for the provision of our services.

By using our website or engaging our services, you acknowledge that your data will be transferred to Bangladesh and processed there. If you have concerns about this transfer — please contact us at hello@digitizegrowth.com before submitting any personal data.

7. Who We Share Your Data With

We do not sell, rent, or trade your personal data to any third party.

We share your data only with the following trusted service providers — and only to the extent necessary to deliver our services:

  • Calendly (calendly.com)
    Purpose: Call scheduling
    Location: United States
    Safeguard: Standard Contractual Clauses
    Privacy policy: calendly.com/privacy
  • Google Analytics (analytics.google.com)
    Purpose: Anonymised website analytics
    Location: United States
    Safeguard: Standard Contractual Clauses
    Privacy policy: policies.google.com/privacy
  • Stripe (stripe.com)
    Purpose: Payment processing
    Location: United States / EU
    Safeguard: Adequacy decision / SCCs
    Privacy policy: stripe.com/privacy
  • Wise (wise.com)
    Purpose: Payment processing
    Location: United Kingdom
    Safeguard: UK GDPR compliant
    Privacy policy: wise.com/gb/legal/privacy-policy
  • PayPal (paypal.com)
    Purpose: Payment processing
    Location: United States / Luxembourg
    Safeguard: Standard Contractual Clauses
    Privacy policy: paypal.com/privacy
  • WP Engine / Hosting Provider
    Purpose: Website hosting and data storage
    Safeguard: As per hosting provider agreement

We require all third-party processors to respect the security of your data and to treat it in accordance with applicable law. We do not permit them to use your data for their own purposes.

We may also disclose your data if required to do so by law — for example in response to a court order or regulatory obligation.

8. Your Rights Under GDPR

Under the GDPR and UK GDPR, you have the following rights regarding your personal data:

Right of access (Article 15)

You have the right to request a copy of the personal data we hold about you and information about how we process it.

Right to rectification (Article 16)

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

Right to erasure (Article 17)

You have the right to request deletion of your personal data where there is no compelling reason for us to continue processing it. This is also known as the “right to be forgotten.”

Right to restriction of processing (Article 18)

You have the right to request that we restrict the processing of your personal data in certain circumstances — for example while we verify the accuracy of your data.

Right to data portability (Article 20)

You have the right to receive the personal data you have provided to us in a structured, commonly used, machine-readable format — and to transfer that data to another controller.

Right to object (Article 21)

You have the right to object to processing of your personal data where we rely on legitimate interests as our lawful basis. We must stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Right to withdraw consent (Article 7(3))

Where we rely on your consent as the lawful basis for processing — you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

How to exercise your rights:

To exercise any of the above rights — please contact us at:

hello@digitizegrowth.com

We will respond to all requests within 30 days of receipt. We will not charge a fee for reasonable requests. We may need to verify your identity before processing your request.

9. Cookies

Our website uses cookies. For full details of the cookies we use, why we use them, and how to manage them — please read our Cookie Policy at:

digitizegrowth.com/cookie-policy/

Non-essential cookies are only placed on your device with your explicit consent, which you can give or withdraw at any time via the cookie consent banner on our website.

10. Children’s Privacy

Our website and services are not directed at children under the age of 16.

We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child under 16 — please contact us immediately at hello@digitizegrowth.com and we will delete that data promptly.

Our website may contain links to third-party websites including Calendly, LinkedIn, and portfolio client websites.

Clicking these links will take you away from digitizegrowth.com. We are not responsible for the privacy practices of those websites and we encourage you to read their own privacy policies before submitting any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make significant changes — we will update the version number and “Last updated” date at the top of this page.

We encourage you to review this policy periodically. Continued use of our website after any update constitutes your acknowledgement of the revised policy.

13. How to Contact Us or Lodge a Complaint

For any questions, requests, or concerns about this Privacy Policy or how we handle your personal data — please contact us:

We will respond within 5 business days.

If you are based in the EU and are not satisfied with our response — you have the right to lodge a complaint with your local supervisory authority.

A list of EU supervisory authorities is available at:

edpb.europa.eu/about-edpb/about-edpb/members_en

If you are based in the UK — you may lodge a complaint with the Information Commissioner’s Office:

ico.org.uk
Tel: 0303 123 1113