Datenschutz
Datenschutz & Cookies
Zuletzt aktualisiert: 25 September 2026
This policy explains what personal data is collected on bappe.dev, why, who it is shared with and the choices you have. It follows the EU and UK General Data Protection Regulation (GDPR). In short: data is used only to answer your enquiry and run this site, it is never sold, and measurement or advertising cookies are set only if you accept them.
1. Who is responsible
The controller of your personal data is Bappe Debnath, Gründer & Vorsitzender of iGen Solutions Limited, Block-A, House-42, Road No-3, Zoo Road, Dhaka 1216, Bangladesh. For anything about your data, write to [email protected].
2. What I collect and why
- Contact form. Name, email, company (optional), budget range, project type, your message, the site language, the page you arrived on and the campaign that brought you (for example a UTM tag or ad click id). Used to reply to you and prepare a proposal, and to learn which channels bring enquiries. Legal basis: steps you ask for before a contract (Art. 6(1)(b)) and legitimate interest in running the business (Art. 6(1)(f)).
- Booking a call. Cal.com collects your name, email, the time you pick and any answers you give, and shares them with me to hold the meeting. Legal basis: Art. 6(1)(b).
- Reviews. If I send you a personal review link: your rating, review, name and role. Published only after I approve it, and removed on request. Legal basis: your consent (Art. 6(1)(a)).
- Measurement and advertising. Only if you click Accept: pages visited, device and approximate location, collected by the analytics and advertising tools listed below. When you send the form, a hashed (unreadable) version of your email may be shared with Meta or Google to see whether an ad led to your enquiry; your message is never shared. Legal basis: consent (Art. 6(1)(a)), which you can withdraw at any time.
- Security. IP address and browser details sent with a form, and a Cloudflare Turnstile check, to stop spam and abuse. Legal basis: legitimate interest in keeping the site safe (Art. 6(1)(f)).
There is no automated decision-making or profiling that affects you.
3. Cookies and similar technologies
Essential items are always used because the site needs them. Everything else waits for your choice.
| Name | Purpose | Type | Kept for |
|---|---|---|---|
| bappe.consent | Remembers your cookie choice | Essential, local storage | Until you change it |
| bappe.lang | Remembers your language | Essential, local storage | Until you change it |
| bappe.attribution | Where you first came from, sent only if you submit the form | First-party, local storage | 90 days |
| Cloudflare Turnstile | Tells people from bots on the contact form | Essential | Session |
| _ga, _ga_* | Google Analytics: visits and pages | Analytics, needs consent | Up to 2 years |
| _gcl_* | Google Ads: which ad led to an enquiry | Advertising, needs consent | 90 days |
| _fbp, _fbc | Meta (Facebook, Instagram) ads measurement | Advertising, needs consent | 90 days |
| li_* | LinkedIn Insight: ads measurement | Advertising, needs consent | Up to 6 months |
| _clck, _clsk | Microsoft Clarity: anonymised usage heatmaps | Analytics, needs consent | Up to 1 year |
Only the tools that are switched on at the time are loaded. Until you accept, Google tags run in consent mode and set no cookies.
4. Service providers
These companies process data on my behalf, under data processing terms, and only for the purpose stated:
- Private server (VPS): hosts this site and the CRM where enquiries are stored.
- Cloudflare: network security and the Turnstile spam check.
- Cal.com: call scheduling.
- Hostinger: email delivery for replies and confirmations.
- Telegram: private notifications to me about new enquiries.
- Google, Meta, LinkedIn, Microsoft: analytics and advertising, only with your consent.
Nothing is sold, rented or shared for anyone else's marketing.
5. International transfers
I work from Bangladesh and some providers process data in other countries, including the United States. Where data leaves the EU or UK, it is protected by the European Commission's Standard Contractual Clauses or an equivalent safeguard offered by the provider.
6. How long data is kept
- Enquiries and related emails: while we are in contact, and up to three years after the last contact, then deleted.
- Client project records: as long as the law requires for contracts and accounting.
- Published reviews: until you ask for removal.
- Analytics and advertising data: as set by each provider, within the periods in the table above.
7. Your rights
You can ask to access, correct, delete or export your data, to restrict or object to its use, and to withdraw consent at any time without affecting earlier use. Email [email protected]; you will get an answer within 30 days. If you are in the EU or UK, you can also complain to your local data protection authority.
8. Security
Data travels over HTTPS and is stored on a hardened server with restricted access. The CRM uses individual accounts and two-factor authentication, and secret keys never reach the website. No method is perfectly secure, but reasonable technical and organisational measures are in place and reviewed.
9. Children and changes
This site is for businesses and is not directed at children under 16.
If this policy changes, the new version is posted here with a new date. Significant changes affecting how your data is used will be pointed out clearly on the site.