Skip to main content
SAAFRIX

Privacy Policy

Last updated

Effective date: [Publication date]

This Privacy Policy explains how [Company legal name] (trading as SAAFRIX, "we", "us") collects, uses and protects your personal data when you use this website and our services. We handle personal data in line with the laws of Bangladesh, including the Personal Data Protection Ordinance, 2025.

1. Who is responsible for your data

[Company legal name], [Registered office address, Dhaka, Bangladesh], is responsible for your personal data. For any privacy question or request, email [privacy contact email].

2. What we collect

Information you give us

  • Contact details: your name, email address and mobile number. You give us these when you use our enquiry pop-up, sign up for our newsletter, send an enquiry or make a booking.
  • Booking and application details: payer details, traveller names, travel dates, destinations and preferences.
  • Travel documents where a service needs them: for example passport details and copies, photographs, national ID, bank statements, employment letters and medical certificates. Some of these are sensitive data. We collect them only for the service you ask for.
  • Messages you send us, and notes of calls with our team.

Information collected automatically

  • Technical data: your IP address, browser and device type, and the pages you visit. We use it to keep the website secure, prevent fraud and abuse, and fix problems.
  • Payment information: the transaction reference, amount, status and payment method from our payment gateway (SSLCommerz). We never receive or store your full card number, PIN or mobile wallet password.

3. How we use your data

  • To provide the service you asked for: to process visa applications and bookings, contact you about an enquiry, and send confirmations and updates.
  • To take payments and to prevent payment fraud.
  • To meet legal obligations: tax and VAT records, travel agency regulations, and lawful requests from authorities.
  • To keep our website and customers safe: security monitoring, rate limiting and investigating misuse.
  • To send you offers and travel updates by email, only if you agree. Our pop-up has a "Send me offers and travel updates" box, which is unticked unless you tick it. If you tick it, or sign up through our newsletter form, we will send you marketing emails. You can unsubscribe at any time using the link in every email. We will then stop, and we will not subscribe you again unless you ask us to.

We do not sell your personal data.

4. Who we share it with

We share personal data only as far as needed to deliver your service, or when the law requires it:

  • embassies, consulates and visa application centres, for visa applications;
  • airlines, hotels, tour operators and transport providers, for bookings;
  • insurance companies, for travel insurance;
  • medical centres, the Bureau of Manpower, Employment and Training (BMET) and licensed recruiting agencies, for manpower services you ask us to process;
  • our payment gateway (SSLCommerz) and banks, for payments and refunds;
  • service providers who work for us under contract, such as website hosting, secure file storage, email delivery and SMS. They may use your data only to provide their service to us;
  • government and law-enforcement authorities, when the law requires it.

5. Transfers outside Bangladesh

Some services require sending your data abroad. For example, a visa application goes to the destination country's embassy, and our email delivery provider may store data outside Bangladesh. When we transfer data abroad, we share only what is needed. We transfer it in line with the Personal Data Protection Ordinance, 2025, and use providers that protect it appropriately.

6. How long we keep it

  • Booking, payment and invoice records: for as long as Bangladeshi tax and accounting law requires.
  • Travel documents uploaded for an application: deleted within [12] months after the application is completed or closed, unless the law requires us to keep them longer or you choose to keep them in your account.
  • Enquiries and contact details: until you ask us to delete them, or [24] months after our last contact with you, whichever is earlier.
  • Newsletter unsubscribes: if you unsubscribe, we keep your email address on a "do not email" list so that we never email you by mistake.
  • Security logs: for up to [90] days, unless needed to investigate an incident.

7. How we protect it

  • All traffic to and from this website is encrypted (HTTPS).
  • Uploaded documents are stored encrypted, in private storage that is not publicly accessible.
  • Staff access is limited by role. It requires two-step verification for administrators, and access to customer records is logged.
  • Passwords are stored only in hashed form.

No system is completely secure. If a data breach is likely to affect you, we will inform you and the relevant authority as the law requires.

8. Your rights

Under the Personal Data Protection Ordinance, 2025 and other applicable law, you can ask us to:

  • give you a copy of the personal data we hold about you;
  • correct data that is inaccurate or incomplete;
  • delete your data, where we are not required to keep it;
  • stop using your data for marketing, or withdraw any consent you have given;
  • explain how and why we use your data.

To make a request, email [privacy contact email] from the email address you used with us, or include your booking reference. We may ask you to verify your identity. We aim to reply within [30] days. You may also complain to the data protection authority established under the Ordinance.

9. Cookies and browser storage

  • Essential cookies keep you signed in and protect forms and payments against misuse. The website cannot work properly without them.
  • Browser storage: after you give us your name and email in our pop-up, your browser remembers them. This means we don't ask again, and booking forms are filled in for you. To remove them, clear your browser's site data.
  • We do not use advertising cookies. If we start to use analytics or advertising tools, we will update this policy first.

10. Children

Our services are for adults. Information about children, for example for a family visa or package, must be given by a parent or legal guardian.

11. Changes to this policy

We may update this policy. The current version is always published on this page, with its effective date.