Legal · Privacy

Privacy Policy

This policy explains what data we collect, why we collect it, and how we protect it. Last updated: 23 June 2026.

1. Who we are

The Centre for Humanitarian Research and Social Development Foundation (CHRSD, "we", "us", "our") is a non-profit organisation registered under the Societies Registration Act, 1860 (Reg. No. S-14480/2026), with its principal office at 29 Toyenbee Circular Road (5th Floor), Motijheel C/A, Dhaka-1000. CHRSD is the data controller for all personal information collected through this website.

2. Data we collect

We only collect information you actively provide or that arises from normal website operation. This includes:

  • Contact enquiries — name, email address, subject, and the message body submitted through our contact form.
  • Newsletter subscriptions — email address submitted via the footer subscription form.
  • Volunteer and partnership applications — name, email, phone number, and any supporting information you choose to provide.
  • Technical data — IP address, browser type, pages visited, and referrer URL collected automatically via server logs and analytics. This data is aggregated and not linked to individuals.

We do not collect payment card data, government identification numbers, or sensitive personal data as defined under Bangladeshi and international data protection frameworks.

3. How we use your information

We use the information you provide solely to:

  • Respond to enquiries and provide requested information.
  • Send newsletters and programme updates (only where you have subscribed).
  • Process volunteer or partnership applications.
  • Improve website content, accessibility, and performance.
  • Meet our legal and regulatory obligations.

We will never use your data for automated decision-making or profiling.

4. Sharing and disclosure

We do not sell, rent, or trade personal data. We may share data only with:

  • Formspree Inc. — our form processing service provider, acting as a data processor under a data processing agreement. See Formspree's Privacy Policy.
  • Regulatory authorities — if required by applicable law or a lawful court order.

Any third-party processors are contractually bound to handle data only on our instructions and in compliance with applicable privacy law.

5. Cookies

This website uses a minimal set of cookies. A strictly necessary cookie stores your cookie consent preference. We do not currently deploy advertising or cross-site tracking cookies.

You may withdraw cookie consent at any time by clearing your browser cookies. The site will continue to function correctly without optional cookies.

6. Data retention

Contact enquiry data is retained for up to 24 months from the date of submission, after which it is securely deleted. Newsletter subscriber data is retained until you unsubscribe. Technical logs are retained for up to 90 days for security purposes.

7. Your rights

You have the right to:

  • Access — request a copy of personal data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure — request deletion of your data where no legal obligation requires retention.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interests.
  • Withdraw consent — unsubscribe from newsletters at any time via the link in each email.

To exercise any right, contact us using the details in Section 9. We will respond within 30 calendar days.

8. Security

We apply industry-standard technical and organisational measures to protect your data — including TLS encryption in transit, access controls, and regular security reviews. No method of transmission over the internet is completely secure; we take all reasonable steps to minimise risk.

9. Contact us

For privacy enquiries, data subject requests, or to file a complaint, please contact our Privacy Lead:

CHRSD Foundation
29 Toyenbee Circular Road (5th Floor), Motijheel C/A, Dhaka-1000
Email: info@chrsd.org
Phone: +880-2-47122566

We aim to resolve all privacy concerns promptly. If you remain unsatisfied, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

This policy was last reviewed and updated on 23 June 2026.