1. Who we are
This Privacy Policy explains how [Company legal name], trading as BestHosting BD (“we”, “us”), collects, uses, shares and protects personal data when you visit our website, create an account or use our hosting, domain and related services. We are the data controller for the personal data described in this policy.
2. Information we collect
We collect only what we need to provide and protect our Services:
- Account details: name, email, phone number, address, company name and password (stored encrypted).
- Identity documents: NID, passport or trade license copies, when needed for verification or for .bd domain registration with BTCL.
- Billing details: invoices, payment method, transaction IDs and mobile wallet numbers. Card numbers are handled by our payment gateways, not stored by us.
- Technical data: IP address, browser, device, login times, server logs and security events.
- Support data: tickets, chat transcripts, call notes and emails you send us.
- Cookies: small files that keep you logged in and help us understand how our website is used.
3. How we use your information
We use personal data to:
- Create and manage your account and deliver the services you order.
- Process payments, issue invoices and keep tax and VAT records.
- Register and manage domains with BTCL and other registries.
- Provide support and send service, security, billing and renewal notices.
- Detect and prevent fraud, abuse, spam and attacks on our network.
- Improve our website and services.
- Send offers and news, only where you have agreed. You can opt out at any time.
- Meet legal obligations and respond to lawful requests from authorities.
We process data because it is necessary to perform our contract with you, to meet legal obligations, for our legitimate interests in running a secure business, or with your consent.
4. Payments
Payments are processed by trusted providers such as bKash, Nagad, Rocket, SSLCommerz, card networks and banks. They handle your payment details under their own privacy policies. We receive only the information needed to confirm your payment, such as a transaction ID and the last digits of a card or wallet number.
5. Data you store on our servers
Websites, databases and email you host with us may contain personal data about your own visitors and customers. For that data you are the data controller and we act as your processor. We do not access or use it except to provide the Services, keep them secure, respond to your support requests or comply with the law.
6. When we share information
We never sell your personal data. We share it only when needed:
- With domain registries and registrars, including BTCL, which may publish some registrant details in WHOIS according to their rules.
- With service providers that help us run our business, such as data centers, payment gateways, SMS and email providers, under contracts that protect your data.
- With courts, BTRC, law enforcement or other authorities when required by a valid legal order or the law of Bangladesh.
- To protect our rights, our customers or the public from fraud, abuse or harm.
- As part of a merger, acquisition or sale of our business, with notice to you.
7. International transfers
Some of our servers and providers are outside Bangladesh, for example our Singapore data center. When data is transferred abroad, we use providers that protect it to a standard equivalent to this policy and to applicable Bangladeshi law.
8. How long we keep data
- Account and billing records: while your account is active, then for as long as Bangladeshi tax, VAT and accounting law requires, currently [X] years.
- Identity documents: for as long as the related service is active, unless the law or a registry requires longer.
- Server logs: up to [90] days, unless needed to investigate a security incident.
- Backups of hosted data: according to the backup schedule of your plan, after which they are overwritten.
- Marketing data: until you unsubscribe.
9. How we protect your data
We use encryption in transit (HTTPS), hashed passwords, two-factor authentication options, firewalls, malware scanning, access controls and staff confidentiality agreements. No system is completely secure, so we also ask you to use strong passwords and keep your devices secure. If a breach affects your personal data, we will notify you and the relevant authority as required by law.
10. Your rights
You can ask us to:
- Tell you what personal data we hold about you and give you a copy.
- Correct data that is wrong or incomplete.
- Delete data we no longer need, unless the law requires us to keep it.
- Withdraw consent for marketing or other consent-based uses at any time.
- Object to or limit certain uses of your data.
- Give you your data in a portable format.
Email privacy@besthosting.com.bd. We may need to verify your identity first, and we reply within [30] days. If you are not satisfied, you may complain to the relevant data protection authority in Bangladesh once it is established, or in your own country.
11. Cookies
We use essential cookies to keep you logged in and secure, and analytics cookies to understand how visitors use our website. You can block or delete cookies in your browser, but some parts of the Client Area may not work without essential cookies.
12. Children
Our services are not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
13. Marketing messages
We send promotional emails or SMS only with your consent. Every marketing email has an unsubscribe link, and you can change your preferences in your Client Area. Service and billing messages are not marketing and will still be sent.
14. Third-party websites
Our website may link to other websites. We are not responsible for their privacy practices, so please read their policies.
15. Applicable law
This policy is governed by the laws of the People’s Republic of Bangladesh, including the Information and Communication Technology Act 2006, the Cyber Security Ordinance 2025, and the Personal Data Protection Ordinance 2025 and related rules once they are in force. Where customers outside Bangladesh have additional rights under their own law, such as the GDPR, we respect those rights.
16. Changes to this policy
We may update this Privacy Policy. The date at the top shows the latest version, and we will notify you of significant changes by email or in your Client Area.
17. Contact us
