Privacy Policy
Your privacy matters. This page explains clearly how zobaydakhatun.com collects, uses and protects your personal information.
Plain English summary: We only collect data you give us directly (contact forms, email, bookings). We never sell your data. You can ask us to delete it at any time. The full legal details are below.
Who we are
This Privacy Policy applies to zobaydakhatun.com (the “Website”), operated by Zobayda Khatun, a freelance Virtual Assistant and Operations Specialist based in Dhaka, Bangladesh.
For the purposes of data protection law, Zobayda Khatun is the data controller responsible for your personal information collected through this website.
Contact details:
Name: Zobayda Khatun
Email: zobayda@zobaydakhatun.com
Website: zobaydakhatun.com
Data we collect
We collect only the information necessary to provide our services and respond to your enquiries. This includes:
| Data type | Examples | How collected |
|---|---|---|
| Contact information | Name, email address, phone number | Contact forms, email, WhatsApp |
| Project information | Business name, project brief, requirements | Project brief form, consultations |
| Booking data | Appointment time, timezone, meeting notes | Calendly booking system |
| Payment data | Transaction records (not card details) | Stripe, Upwork (processed externally) |
| Technical data | IP address, browser type, pages visited | Automatically via cookies / analytics |
| Communication data | Emails, messages, call notes | Direct communication with us |
We do not collect sensitive personal data such as health information, racial or ethnic origin, political opinions or financial account details.
How we use your data
We use the information we collect for the following purposes:
- To respond to your enquiries and contact form submissions
- To schedule and manage consultations and discovery calls
- To deliver agreed virtual assistant and operations services
- To send invoices and process payments via third-party platforms
- To communicate project updates, progress reports and check-ins
- To improve the website based on how visitors use it
- To comply with legal and tax obligations
- To send occasional newsletters or updates (only with your explicit consent)
We will never sell, rent or trade your personal data to any third party for marketing purposes.
Legal basis for processing
Under GDPR and applicable data protection laws, we process your data under the following legal bases:
- Contract: Processing is necessary to fulfil or prepare a service contract with you
- Legitimate interests: To operate and improve our website and respond to enquiries
- Consent: For marketing emails or cookies — you can withdraw consent at any time
- Legal obligation: To comply with applicable laws, tax and financial record-keeping
Cookies
Our website uses cookies — small text files placed on your device — to improve your experience and analyse website traffic.
| Cookie type | Purpose | Can opt out? |
|---|---|---|
| Essential | Required for the website to function (WordPress, session cookies) | No — required |
| Analytics | Google Analytics — understanding how visitors use the site | Yes |
| Functional | Remembering your preferences and settings | Yes |
| Third-party | Calendly, Google Fonts, embedded content | Yes |
You can control cookies through your browser settings or by rejecting non-essential cookies when prompted. Disabling certain cookies may affect website functionality.
Google Analytics: We use Google Analytics to understand website traffic. This data is anonymised and aggregated. You can opt out using the Google Analytics Opt-out Browser Add-on.
Third-party services
We use trusted third-party services to operate our website and business. Each has its own privacy policy:
- Calendly — appointment scheduling (Privacy Policy)
- Stripe — secure payment processing (Privacy Policy)
- Upwork — freelance platform and contract management (Privacy Policy)
- Google Analytics — website traffic analysis (Privacy Policy)
- Google Fonts — web typography (may log IP address)
- WhatsApp / Meta — client communications (Privacy Policy)
- WordPress / WPCode — website platform and code management
We do not control how these third-party services process your data. We recommend reviewing their privacy policies directly.
International transfers: Some third-party services (e.g. Google, Stripe, Calendly) may transfer your data outside of your home country. Where this occurs, appropriate safeguards such as Standard Contractual Clauses are in place. Contact us at zobayda@zobaydakhatun.com for more information.
Data retention
We keep your personal data only for as long as necessary to fulfil the purposes described in this policy or to comply with legal obligations.
- Client project records — retained for 5 years after project completion for tax and legal purposes
- Enquiry and contact data — deleted within 12 months if no project is started
- Email communications — retained for 3 years then deleted
- Analytics data — retained for 26 months (Google Analytics default)
- Newsletter subscribers — retained until you unsubscribe
You may request earlier deletion of your data at any time. See Your Rights below.
Your rights
Depending on where you are located, you have the following rights regarding your personal data:
Right to access
Request a copy of the personal data we hold about you.
Right to rectification
Ask us to correct inaccurate or incomplete personal data.
Right to erasure
Request deletion of your personal data (“right to be forgotten”).
Right to portability
Receive your data in a structured, machine-readable format.
Right to object
Object to processing of your data for marketing or legitimate interests.
Right to restrict
Ask us to limit how we use your personal data.
To exercise any of these rights, please contact us at zobayda@zobaydakhatun.com. We will respond within 30 days. We may need to verify your identity before processing your request.
Complaints: If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority. In the EU/EEA, this is your national Data Protection Authority (DPA).
Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, or disclosure. These include:
- SSL/TLS encryption on all website pages (HTTPS)
- Secure, password-protected access to website admin and email accounts
- Use of trusted, reputable third-party platforms (Stripe, Calendly, Google)
- Regular software and plugin updates to patch security vulnerabilities
- Limiting access to personal data to only those who need it
While we take all reasonable precautions, no method of transmission over the internet is 100% secure. If you have concerns about a security incident, please contact us immediately at zobayda@zobaydakhatun.com.
Children’s privacy
Our website and services are intended for individuals aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18.
If you believe a minor has provided us with personal data, please contact us at zobayda@zobaydakhatun.com and we will delete that information promptly.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. When we do, we will update the “Last updated” date at the top of this page.
We encourage you to review this page periodically. For significant changes, we may also notify active clients directly by email.
Your continued use of our website after any changes constitutes your acceptance of the updated policy.
Contact us
If you have any questions, concerns or requests about this Privacy Policy or how we handle your personal data, please get in touch:
- Email: zobayda@zobaydakhatun.com
- Website: zobaydakhatun.com/contact
- WhatsApp: +880 1994 764700
We aim to respond to all privacy-related requests within 30 days.
Still have questions?
We are happy to explain anything in plain English. Just send us a message.