Privacy Policy

1. INTRODUCTION

Data State Ltd. ("we" "us" or "our") operates the lenden.space website (the "Platform"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our crowdfunding platform.

By accessing or using our Platform, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Platform.

2. INFORMATION WE COLLECT

We collect several types of information from and about users of our Platform in accordance with Bangladesh law. When you create an account, start a fundraising campaign, make a donation, contact our customer support, subscribe to our newsletter, or participate in surveys or promotions, you voluntarily provide us with personal information. This information may include your full name, email address, mobile phone number, mailing address, date of birth, National Identity Card (NID) number or other government-issued identification for verification purposes as required under the Bangladesh Bank laws and regulations, Money Laundering Prevention Act, Anti-Terrorism Act, payment information such as credit or debit card details, mobile financial service (MFS) account information including bKash, Nagad, or Rocket details, bank account information, profile photograph, campaign story and related content, and social media account information if you choose to link your accounts. Additionally, when you access our Platform, we automatically collect certain technical information including your IP address, browser type and version, device type and operating system, pages visited and time spent on pages, referring website addresses, clickstream data, cookies and similar tracking technologies, and location data with your permission. We may also receive information about you from third parties including payment processors, mobile financial service providers, identity verification services, social media platforms if you connect your accounts, marketing partners, and publicly available databases

3. LEGAL BASIS FOR PROCESSING

We process your personal information based on your explicit consent, which you provide when creating an account or using our services. Additionally, we process your information where necessary to perform our contractual obligations to you, comply with legal obligations under relevant Bangladesh law, and directives from Bangladesh Bank and the Bangladesh Telecommunication Regulatory Commission (BTRC), and pursue our legitimate business interests in operating and improving our crowdfunding platform whilst ensuring appropriate safeguards for your rights.

4. HOW WE USE YOUR INFORMATION

We use the collected information for various purposes related to operating and improving our Platform in compliance with Bangladesh law. For platform operations, we use your information to create and manage your account, process donations and fundraising campaigns, facilitate communication between campaign organizers and donors, verify your identity and prevent fraud as required under the applicable laws, maintain transaction records as required by Bangladesh Bank regulations, provide customer support, and send transactional SMS messages, emails, and notifications. To improve our Platform, we analyze usage patterns, develop new features and functionality, conduct research and analytics, and troubleshoot technical issues. For marketing and communications purposes, we may send promotional materials and newsletters with your explicit consent, inform you about campaigns that may interest you, conduct surveys and gather feedback, and display personalized content and advertisements in compliance with the applicable laws and regulations. We also use your information for legal and security purposes including complying with legal obligations under Bangladesh law, responding to requests from law enforcement agencies and regulatory authorities including Bangladesh Police, BTRC, and Bangladesh Financial Intelligence Unit (BFIU), enforcing our Terms of Service, protecting against illegal activity including cybercrimes under the relevant laws and regulations, resolving disputes, and protecting the rights, property, and safety of Data State Ltd., our users, and the public.

5. HOW WE SHARE YOUR INFORMATION

We may share your information in several circumstances whilst ensuring compliance with Bangladesh data protection principles. Regarding campaign visibility, campaign organizers' names, campaign stories, and fundraising progress are publicly visible on the Platform, and donor names may be displayed on campaign pages unless you choose to donate anonymously. Campaign updates and comments may also be publicly accessible. We share information with third-party service providers who perform services on our behalf, including payment processors and mobile financial service providers operating in Bangladesh such as bKash, Nagad, Rocket, and local and international payment gateways, cloud hosting providers, email and SMS service providers, customer support platforms, analytics providers, identity verification services, and marketing and advertising partners. All third-party service providers are required to maintain confidentiality and security of your information. We may disclose your information to Bangladesh Bank, BFIU, and other financial regulatory authorities as required under the Money Laundering Prevention laws and related regulations. If Data State Ltd. is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction subject to the same privacy protections. We will disclose your information when required by law or in response to court orders issued by courts in Bangladesh, legal processes, requests from law enforcement agencies including Bangladesh Police and other government authorities, directives from BTRC or other regulatory bodies, to protect our rights and property, or during investigation of fraud, cybercrimes, or security issues under the relevant laws. We may also share your information with third parties when you have given us explicit written or electronic consent to do so.

6. PAYMENT INFORMATION AND FINANCIAL COMPLIANCE

Payment information is processed by our third-party payment processors and mobile financial service providers licensed to operate in Bangladesh. We comply with Bangladesh Bank's Payment System Department guidelines and regulations. We do not store complete credit card or bank account information on our servers. Payment processors are required to comply with international security standards as well as Bangladesh Bank's directives on payment system security. We maintain transaction records for the period required under the Money Laundering Prevention laws and Bangladesh Bank regulations, which is currently a minimum of five years. We implement Know Your Customer (KYC) and Customer Due Diligence (CDD) procedures as required under Bangladesh Bank guidelines and report suspicious transactions to the Bangladesh Financial Intelligence Unit (BFIU) as mandated by law.

7. DATA RETENTION

We retain your personal information in accordance with Bangladesh legal requirements and business needs. Transaction records and financial information are retained for a minimum of five years as required under the Money Laundering Prevention Act 2012 and Bangladesh Bank regulations. Account information is retained for as long as your account remains active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. Campaign information may be retained indefinitely for transparency, accountability, and record-keeping purposes. Tax-related information is retained as required under the relevant tax laws and regulations. You may request deletion of your account, but certain information will be retained as required by law, regulatory directives, or for legitimate business purposes including fraud prevention and legal compliance.

8. YOUR RIGHTS AND CHOICES

Under Bangladesh law and our commitment to data protection, you have several rights regarding your personal information. You have the right to access your personal information and request a copy of the data we hold about you. You can update or correct inaccurate information through your account settings at any time or by contacting us directly. You may request deletion of your personal information, subject to legal and regulatory requirements that mandate retention of certain data. You can withdraw your consent for data processing at any time by contacting us, though this may limit your ability to use certain features of the Platform. You can opt out of marketing communications by unsubscribing from marketing emails or SMS messages via the link or instructions provided, disable cookies through your browser settings, and opt out of personalised advertising. You have the right to lodge a complaint with relevant authorities in Bangladesh if you believe your privacy rights have been violated. To exercise these rights, please contact us through the contact details provided in our Platform.

9. COOKIES AND TRACKING TECHNOLOGIES

We use cookies, web beacons, and similar technologies in compliance with BTRC guidelines and international best practices. These technologies help us remember your preferences, understand how you use our Platform, improve user experience, deliver targeted advertising, and ensure security of your account. You can control cookies through your browser settings; however, disabling cookies may limit your ability to use certain features of the Platform. By continuing to use our Platform, you consent to our use of cookies as described in this policy.

10. SECURITY MEASURES

We implement appropriate technical and organizational measures to protect your personal information in accordance with the applicable laws and best international practices. Our security measures include encryption of data in transit and at rest using industry-standard protocols, secure socket layer (SSL) technology for all data transmissions, regular security assessments and vulnerability testing, access controls and multi-factor authentication, firewalls and intrusion detection systems, employee training on data protection and cybersecurity, secured data centers with physical security measures, and regular backups and disaster recovery procedures. We comply with the relevant applicable laws regarding protection of digital data and prevention of unauthorized access, and we report any data breaches to affected users and relevant authorities as required by law. However, no method of transmission over the internet is 100% secure, and whilst we strive to protect your information using commercially reasonable means, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately of any unauthorized access to your account.

11. CHILDREN'S PRIVACY

Our Platform is not intended for individuals under the age of 18 years, as persons below this age are considered minors. We do not knowingly collect personal information from children. Fundraising campaigns for minors must be created and managed by parents, legal guardians, or authorized adults. If you believe we have collected information from a child without proper parental or guardian consent, please contact us immediately and we will take prompt steps to delete such information from our systems.

12. DATA STORAGE AND TRANSFERS

Your personal information is primarily stored on servers located within Bangladesh to ensure compliance with local data protection requirements. However, some of your information may be transferred to and processed in countries other than Bangladesh where our service providers operate, including cloud hosting services and payment processors. When we transfer data outside Bangladesh, we ensure appropriate safeguards are in place through contractual obligations requiring service providers to maintain security standards equivalent to those required under Bangladesh law, compliance with international data protection standards, and encryption and secure transmission protocols. We obtain your consent for international data transfers where required by law. You acknowledge and consent to such transfers by using our Platform.

13. COMPLIANCE WITH BANGLADESH LAWS

We are committed to full compliance with all applicable laws and regulations of Bangladesh. We comply with the Cyber Security Act 2023 regarding protection of digital data, prevention of cybercrimes, and cooperation with law enforcement authorities. We adhere to the Information and Communication Technology Act 2006 (as amended in 2013) regarding electronic transactions, digital signatures, and cybersecurity. We follow the relevant guidelines from Bangladesh Bank, Money Laundering Prevention Act 2012 and Anti-Terrorism Act 2009 by implementing KYC procedures, maintaining transaction records, and reporting suspicious activities to BFIU. We comply with Bangladesh Bank regulations and directives regarding payment systems, mobile financial services, and financial transactions. We adhere to BTRC regulations regarding telecommunications, internet services, and digital communications. We comply with the Income Tax Ordinance 1984 and VAT and Supplementary Duty Act 2012 regarding tax obligations and record-keeping. We follow the Companies Act 1994 regarding corporate governance and record maintenance. We cooperate fully with law enforcement agencies and regulatory authorities in Bangladesh and respond promptly to lawful requests for information.

14. THIRD-PARTY LINKS AND SERVICES

Our Platform may contain links to third-party websites, social media platforms, and services including Facebook, YouTube, X and other platforms accessible in Bangladesh. We are not responsible for the privacy practices of these third parties and encourage you to review their privacy policies before providing any personal information to them. When you use third-party payment services or mobile financial services through our Platform, you are also subject to their terms and privacy policies.

15. DISPUTE RESOLUTION

Any disputes arising from this Privacy Policy or our data practices shall be resolved in accordance with the laws of Bangladesh. You agree that the courts of Dhaka, Bangladesh shall have exclusive jurisdiction over any disputes. We encourage you to contact us first to resolve any concerns, and we will make reasonable efforts to address your issues promptly and fairly.

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will notify you of material changes by posting the updated policy on our Platform with a new "Last Updated" date, sending an email notification to the email address associated with your account, sending an SMS notification to your registered mobile number for significant changes, and posting a prominent notice on our Platform homepage. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after changes become effective constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should discontinue use of the Platform and may request deletion of your account subject to legal retention requirements.

17. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at Data State Ltd. via email at contact@datastateltd.com through our website at lenden.space, by telephone at +88 09666707635, or by post at House 8/B, Road #1, Gulshan-1, Dhaka-1212, Bangladesh. For data protection inquiries and to exercise your privacy rights, you may also contact our Data Protection Officer. We will respond to your inquiries within a reasonable timeframe, typically within 15 business days.

18. LANGUAGE

This Privacy Policy is provided in English. In case of any conflict between the English version and any translation, the English version shall prevail. However, we will make reasonable efforts to provide Bengali translations upon request.

19. ACKNOWLEDGEMENT AND CONSENT

By using our Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. You consent to the collection, use, disclosure, and processing of your personal information as described in this Privacy Policy. You confirm that all information provided by you is accurate and complete, and you agree to update your information promptly if it changes.