Privacy Policy

1Who we are

Core360 Solutions (“Core360”, “we”, “us”) is a digital agency based in Bangladesh that serves clients worldwide. We are the controller of the personal data described in this policy, which means we decide how and why it is used. You can contact us about privacy at info@core360solutions.com.

We handle personal data in line with Bangladesh’s Personal Data Protection Ordinance 2025 and, where they apply to you, the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, US state privacy laws such as the California Consumer Privacy Act (CCPA), Canada’s PIPEDA and Australia’s Privacy Act 1988.

This policy covers www.core360solutions.com and our dealings with prospects and clients. When we handle personal data for a client during a project, such as their customers’ data, we do so on the client’s behalf and the client’s own privacy notice applies (see Data we process for clients).

2The data we collect

• When you send a project brief: your name, email address, company (optional), the services, plan and timeline you choose, your message, the language of the page and the address of the page you sent it from.
• When you email us or work with us: your name, contact details, job title and company, the content of our emails and calls, project materials you share, and billing details such as your billing address, tax number and payment records. We do not store card numbers.
• When you browse the website: Google Analytics collects usage information, including pages viewed, time on page, clicks and events such as sending the form, the website that referred you, your device, browser, operating system, screen size, language, and approximate location (country and city) derived from your IP address. Our hosting provider’s servers automatically log technical data, such as IP address, browser type, the page requested and the time, to keep the website secure and working.
• When you use the AI visibility checker: the brand, website, service and location you type stay in your browser and are not sent to us. If you ask for a report, we receive your name, email address, those details, your answers and your score.
• Stored in your browser: small preferences that let the website remember your theme, language and currency. See Cookies and browser storage.

We do not ask for sensitive data, such as information about health, religion, political views or biometrics. Please do not include it in the brief form or in emails.

3How and why we use it

Under Bangladesh’s Personal Data Protection Ordinance 2025, we rely on your consent when you send us information, and on the needs of our contract with you or the law where those apply. You can withdraw your consent at any time. This does not affect anything we did with your data before.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects, and we do not use your personal data to train AI models.

4Who we share it with

We share personal data only with providers that help us run our business, and only as much as they need:

• Web3Forms delivers our website forms, the project brief, AI visibility report requests and client reviews, to our inbox by email.
• Google (United States and worldwide) provides Google Analytics and Google Tag Manager for website statistics, and Google Fonts for typefaces.
• Namecheap (United States) hosts this website and keeps its server logs.
• Cloudflare (cdnjs) and jsDelivr deliver the open-source code this website runs on and the daily exchange rates used to convert prices, with ExchangeRate-API as a backup rate source. They receive your IP address as part of delivering these files.
• Our email and workspace providers, which store our emails and documents.
• Banks and payment providers that process your payments to us.
• Professional advisers, such as accountants and lawyers, who are bound by confidentiality.
• Vetted subcontractors who work on your project under confidentiality agreements.

We may also disclose data when the law requires it, to protect our rights or someone’s safety, or to a buyer or successor if our business is reorganised or sold, in which case this policy will continue to protect your data.

We do not sell personal data, and we do not share it for cross-context behavioural advertising, as those terms are defined in US state privacy laws.

5International transfers

We are based in Bangladesh, and our providers operate in the United States and other countries. Your data may therefore be processed outside the country where you live, including in countries whose data protection laws differ from yours.

When the law requires it, we protect international transfers with recognised safeguards, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or a provider’s certification under the EU-US Data Privacy Framework, together with the security measures described below. You can ask us for more information about these safeguards at info@core360solutions.com.

6How long we keep it

• Enquiries that do not lead to work: up to 24 months after our last contact, then deleted.
• Client records, contracts and invoices: for as long as we work together and then up to 7 years, as tax and accounting laws require.
• Google Analytics data: user-level and event-level data is deleted automatically after no more than 14 months.
• Server logs: kept for a limited period by our hosting provider for security and troubleshooting.
• Browser storage: stays on your device until you clear it. The intro animation marker is removed when you close the tab.

When we no longer need data, we delete it or anonymise it securely.

7Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy
• correct data that is inaccurate or incomplete
• have your data deleted
• restrict or object to our use of your data, including objecting at any time to direct marketing
• receive your data in a portable format
• withdraw your consent at any time
• not be subject to decisions based solely on automated processing
• know what personal information we have collected about you, and not be treated differently for using your rights (California residents)

We extend these rights to everyone, wherever they live, as far as we reasonably can. To use any of them, email info@core360solutions.com with the subject “Privacy request”. We may need to confirm your identity first. We will respond within one month (45 days for California requests), free of charge, unless a request is clearly unfounded or excessive. Someone you authorise in writing can make a request for you.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to a data protection authority: in the EU, the authority in your country; in the UK, the Information Commissioner’s Office (ico.org.uk); in Bangladesh, the authority responsible under the Personal Data Protection Ordinance 2025; or the regulator where you live.

8Cookies and browser storage

Cookies and similar technologies are small pieces of data stored in your browser. We keep them to a minimum:

Google Tag Manager only loads other tags and does not set cookies itself. We do not use advertising or social media tracking cookies. If that changes, we will update this table first.

Your choices: you can block or delete cookies in your browser settings and clear local storage at any time, and the website will still work. To stop Google Analytics on every website you visit, install Google’s opt-out browser add-on. Google explains how it uses data from sites that use its services at policies.google.com/technologies/partner-sites.

9How we protect your data

We protect personal data with measures that suit the risk, including encrypted HTTPS connections across this website, access limited to team members who need it and are bound by confidentiality, reputable providers with strong security practices, and regular reviews of who has access to what.

No method of transmission or storage is completely secure. If a breach is likely to put your rights at risk, we will tell you and the relevant authorities as the law requires.

10Data we process for clients

When clients ask us to handle personal data as part of a project, such as customer lists for campaigns, website or app user data, or CRM records, we act as the client’s processor. We use that data only on the client’s documented instructions, keep it confidential and secure, and delete or return it when the work ends. The client’s privacy notice explains how that data is used, and requests about it should go to the client first. We will help them respond. See our Terms and Conditions.

11Children

Our services are for businesses and professionals, and this website is not aimed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, please contact us and we will delete it.

12Other websites

This website links to other websites and platforms. Their privacy practices are their own, so please read their policies.

13Changes to this policy

We will update this policy when our practices or the law change. The “Last updated” date at the top shows the current version. If we make significant changes, we will highlight them on this page and, where appropriate, tell clients by email.

14Contact us

For any privacy question or request, email info@core360solutions.com. We reply within one business day and complete requests within the time limits above.

Core360 Solutions · Bangladesh (GMT+6) · www.core360solutions.com