Privacy Policy
How BillZenBD collects, uses, shares and protects your personal information.
Overview
This Privacy Policy explains what personal information BillZenBD collects when you use our website, order a connection or contact our support desk, how we use it, and the choices you have. We handle all personal data in line with applicable Bangladeshi law and internationally recognised privacy principles.
By using our services you acknowledge the practices described here. Where a specific service has additional privacy terms, those will be presented to you before you use it.
Information we collect
We collect information you give us directly, information generated when you use the service, and information from authorised partners during installation and support.
- Identity and contact data — name, national ID or passport details required for subscription verification, phone number, email and installation address.
- Billing data — invoices, payment history, and the reference numbers returned by the payment gateway. We do not store full card numbers.
- Service and technical data — your connection details, equipment identifiers, package profile, session and diagnostic logs.
- Usage data — aggregated traffic volumes and network performance statistics used for capacity planning.
- Communications — the content of tickets, messages, calls and requests you raise with support.
How we use your information
We use personal information only for the purposes for which it was collected and for closely related purposes you would reasonably expect.
- To assess coverage, install and provision your connection.
- To raise invoices, process payments and manage your account.
- To operate, secure and improve the network and resolve faults.
- To respond to support requests and send service notifications.
- To meet regulatory, tax and law-enforcement obligations.
- To send marketing about new packages where you have opted in — you can stop this at any time.
Why we are allowed to process it
Depending on the activity, we rely on one of the following grounds:
- Performance of a contract — to provide the service you subscribed to and to bill you for it.
- Legal obligation — to comply with telecommunications, tax and record-keeping requirements.
- Legitimate interests — to secure the network, prevent fraud and improve reliability, balanced against your rights.
- Consent — for optional marketing communication and any non-essential cookies.
How long we keep it
We keep personal information only as long as it is needed for the purpose it was collected, or as long as the law requires.
- Account and billing records are retained for the period required by tax and telecommunications regulation.
- Diagnostic and session logs are kept for a limited operational window and then deleted or anonymised.
- Support conversations are retained so we can resolve repeat issues and improve service quality.
- When data is no longer needed it is securely deleted or irreversibly anonymised.
How we protect your data
We apply administrative, technical and physical safeguards designed to protect personal information against loss, misuse and unauthorised access.
- Encryption of data in transit, and encryption of sensitive fields at rest.
- Role-based access control with the principle of least privilege and staff confidentiality obligations.
- Network monitoring, logging and periodic review of access to customer data.
- Secure development practices and routine patching of production systems.
No system can be completely secure. If a breach affecting your rights occurs, we will notify you and the relevant authority as required by law.
Your rights
Subject to verification of your identity, you may exercise the following rights in relation to your personal information:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to fix inaccurate or incomplete data.
- Deletion — request erasure where there is no overriding legal or contractual reason to keep it.
- Restriction and objection — ask us to limit or stop certain processing, including marketing.
- Portability — receive applicable data in a structured, commonly used format.
To exercise a right, contact us using the details at the end of this policy. We respond to requests within a reasonable period and never charge a fee for a first request.
Children and minors
Our services are intended for adults. We do not knowingly collect personal information from anyone under 18 without the consent of a parent or guardian. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.
International transfers
Some of our service providers process data on infrastructure outside Bangladesh. When we transfer personal information internationally we require the recipient to apply protections consistent with this policy and with applicable law.
Changes to this policy
We may update this policy to reflect changes in our practices or in the law. Material changes will be notified through the client portal, SMS or email before they take effect, and the “last updated” date at the top of this page will always reflect the current version.
Contacting us about privacy
If you have a question, a concern, or wish to exercise a right, our privacy contact will help.
- Privacy email: [email protected]
- Hotline: 01700000000
- Registered address: Dhaka, Bangladesh
You can also send us a message through the website and we will route it to the right team within one business hour.
Questions about your data?
Ask our privacy team anything about how your information is handled. We reply within one business hour.