Privacy Policy গোপনীয়তা নীতি

Cox's Bazar Surf Hub Pvt. Ltd. is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information across all our services — physical, digital, and social. কক্সবাজার সার্ফ হাব আপনার গোপনীয়তা রক্ষায় প্রতিশ্রুতিবদ্ধ। এই নীতি ব্যাখ্যা করে আমরা কীভাবে তথ্য সংগ্রহ, ব্যবহার ও সুরক্ষা করি।

01Data Controller ডেটা নিয়ন্ত্রক

The data controller is Cox's Bazar Surf Hub Private Limited, represented by its CEO Sha Hosen, Cox's Bazar, Bangladesh. All data-related requests should be directed to: info@coxsbazarsurfhub.com

02Information We Collect আমরা যে তথ্য সংগ্রহ করি

A. Information You Provide Directly

• Full name, date of birth, nationality
• Contact details (phone number, email address, physical address)
• Emergency contact information
• Medical and health information (disclosed for safety purposes)
• Payment details (processed securely; card numbers are not stored)
• Booking and transaction history
• Coaching and fitness assessment data
• Correspondence, complaints, and feedback

B. Information We Collect Automatically

• IP address, browser type, and device information
• Pages visited on our website and time spent
• Social media interactions with our pages (likes, comments, shares)
• Cookie data (see our Cookie Policy)
• CCTV footage from our premises (for safety and security)

C. Information From Third Parties

• Social media profile information (when you connect or follow our platforms)
• Referral or booking data from travel agents or partner businesses

03How We Use Your Information আমরা যেভাবে তথ্য ব্যবহার করি

• To process bookings and manage your account
• To deliver surf lessons, coaching, restaurant, gym, and other services
• To ensure health and safety during all activities
• To send booking confirmations, reminders, and service updates
• To process payments and issue receipts
• To improve our services, facilities, and digital platforms
• To respond to enquiries, complaints, and feedback
• To send promotional communications (only with your consent)
• To comply with Bangladeshi legal and regulatory obligations
• To investigate and prevent fraud or misuse of our services

04Legal Basis for Processing প্রক্রিয়াকরণের আইনি ভিত্তি

We process your data on the following legal grounds:

• Contract performance — to deliver the service you have booked
• Legal obligation — to comply with Bangladeshi law
• Legitimate interests — to operate and improve our business safely
• Consent — for marketing communications and photography use

05Data Sharing তথ্য আদান-প্রদান

We do not sell your personal data. We may share your information with:

• Instructors, coaches, and staff involved in your session
• Emergency services or medical professionals in a safety emergency
• Payment processors and banking institutions
• Government authorities when required by law or court order
• IT service providers and hosting partners (bound by confidentiality)
• Surf Safari and travel partners where relevant to your booking

All third parties processing data on our behalf are bound by appropriate data protection obligations.

06Social Media & Digital Platforms সোশ্যাল মিডিয়া

Our social media presence spans Instagram, Facebook, YouTube, TikTok, and others. When you interact with our pages:

• Platform-level data is subject to that platform's own privacy policy.
• We may use your publicly available interaction data for analytics and community engagement.
• We will not share, sell, or misuse your personal messages or contact details obtained via social media.
• If you tag us in content, we may reshare it. Contact us to request removal.

07Photography, Video & Marketing ফটোগ্রাফি ও বিপণন

Photos and videos captured during activities may be used for our website, social media, and promotional materials. The following rules apply:

• We will always seek consent before using identifiable images of individuals.
• Images of minors will never be shared without explicit written guardian consent.
• You may opt out of photography at any time by informing staff in writing.
• To request removal of an image, contact: info@coxsbazarsurfhub.com

08Data Retention তথ্য সংরক্ষণ

• Booking records: minimum 5 years (for tax and legal compliance)
• Health/medical data: 3 years post last interaction, then securely deleted
• CCTV footage: overwritten after 30 days unless required for investigation
• Marketing consent records: until consent is withdrawn + 1 year
• Website/analytics data: 26 months

09Your Rights আপনার অধিকার

Under Bangladeshi law and as a matter of Company policy, you have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request erasure of your data (subject to legal retention requirements)
• Objection: object to processing for marketing purposes at any time
• Portability: receive your data in a structured, machine-readable format

To exercise any of these rights, email us at info@coxsbazarsurfhub.com with subject line "Data Rights Request". We will respond within 30 days.

10Data Security তথ্য নিরাপত্তা

We implement technical and organisational security measures including:

• Secure server infrastructure and encrypted data transmission (SSL/TLS)
• Access controls limiting staff access to personal data on a need-to-know basis
• Regular security reviews and staff data protection training
• Physical security measures at our premises

In the event of a data breach that poses risk to individuals, we will notify affected parties as required by law.

11Cookies কুকিজ

We keep this simple. Our website does not use advertising cookies, tracking pixels or analytics tools such as Google Analytics or the Facebook Pixel, so we do not show a cookie banner. আমরা বিজ্ঞাপন কুকি, ট্র্যাকিং পিক্সেল বা গুগল অ্যানালিটিক্স ও ফেসবুক পিক্সেলের মতো অ্যানালিটিক্স টুল ব্যবহার করি না, তাই কোনো কুকি ব্যানার দেখাই না।

• On your device: the site saves a few small settings in your browser's local storage, such as your language choice (English or Bangla) and, if you have a member account, your sign-in so you stay logged in. This stays on your device and is not used to track you. আপনার ডিভাইসে: ওয়েবসাইট আপনার ব্রাউজারে কিছু ছোট সেটিং সংরক্ষণ করে, যেমন ভাষা পছন্দ এবং মেম্বার অ্যাকাউন্ট থাকলে আপনার সাইন-ইন। এটি আপনার ডিভাইসেই থাকে এবং আপনাকে ট্র্যাক করতে ব্যবহার হয় না।
• Google services: our pages load fonts from Google Fonts, and the contact, safari and home pages show an embedded Google Map. When these load, Google may receive your IP address and set its own cookies under Google's privacy policy. গুগল সেবা: আমাদের পেজ গুগল ফন্ট লোড করে এবং যোগাযোগ, সাফারি ও হোম পেজে গুগল ম্যাপ দেখায়। এগুলো লোড হলে গুগল আপনার আইপি ঠিকানা পেতে পারে এবং তাদের নিজস্ব কুকি ব্যবহার করতে পারে।
• Payments: when online payments open, our licensed payment gateway may set cookies needed to process your payment securely. পেমেন্ট: অনলাইন পেমেন্ট চালু হলে আমাদের লাইসেন্সপ্রাপ্ত পেমেন্ট গেটওয়ে নিরাপদে পেমেন্ট সম্পন্ন করতে প্রয়োজনীয় কুকি ব্যবহার করতে পারে।

You can clear local storage and cookies at any time in your browser settings. If we add analytics or advertising tools in future, we will update this section and ask for your consent first. ব্রাউজার সেটিংস থেকে যেকোনো সময় এগুলো মুছে ফেলতে পারেন। ভবিষ্যতে অ্যানালিটিক্স বা বিজ্ঞাপন টুল যোগ করলে আমরা এই অংশ হালনাগাদ করব এবং আগে আপনার সম্মতি নেব।

12Children's Privacy শিশুদের গোপনীয়তা

We do not knowingly collect personal data from children under 8. Where services involve minors, we collect parental/guardian data and handle it with heightened care and confidentiality.

13International Data Transfers আন্তর্জাতিক ডেটা স্থানান্তর

Where our digital platforms use international service providers (e.g., Meta, Google), your data may be processed outside Bangladesh. We ensure such providers maintain appropriate safeguards equivalent to Bangladeshi data protection standards.

14Policy Updates নীতি আপডেট

This Privacy Policy will be reviewed at least annually or following significant changes to our services or the law. The current version will always be available at our premises and on our website.