Privacy Policy
What personal data we hold, why we hold it, who else sees it, and what you can ask us to do with it — including if you met us at an activation rather than on this website.
1In short
- This website sets no cookies of its own, runs no analytics and no advertising tags, and has nothing to log in to. Reading it does not identify you.
- The only third-party embed is the Vimeo showreel. It loads when you press play, and only if you have allowed it.
- We do hold personal data about clients, suppliers, field staff, candidates and people who attend the activations we run. That is what the rest of this page is about.
- To see what we hold, or to have it corrected or deleted, write to us. Section 10 says how, and what we will do.
2Who is responsible
Impact Marketing Agency, Dhaka, Bangladesh, is responsible for the personal data described here. Our postal address and phone number are in the footer of every page; for anything about data, write to privacy@impactbd.marketing.
When we run a campaign for a client, the client is often the one responsible for data collected in it, and we act on their instructions. Where that is the case their notice governs, not this one — and we will tell you whose it is at the point you are asked: on the entry form, at the sampling counter, on the kiosk screen.
3What we collect
| Who | What | Where it comes from |
|---|---|---|
| Website visitors | IP address, time of request, page, and browser details — in the hosting provider’s server logs. Your cookie choice, in your own browser. | Automatically, from the request |
| Clients and prospects | Name, role, employer, email, phone, address, brief and budget detail, correspondence, invoicing and payment records | From you and your colleagues |
| Suppliers, venues, freelancers | Contact details, rates, contracts, bank and tax details, insurance and licence documents | From you |
| Field and event staff | Name, contact details, photograph, shift and payment records, and an identity document where a venue or authority requires one for accreditation | From you, or from the agency that supplies you |
| People at an activation | Whatever the activity involves — a name and phone or email on an entry, sampling or competition form, a survey answer — and photography or film of the event | From you, at the event |
| Candidates | CV, contact details, work history, references, interview notes | From you |
We do not seek sensitive categories of data — health, religion, politics, biometrics — and we ask that you do not send them. Where a venue or authority requires an identity document for accreditation, we collect it for that and nothing else, and we do not keep it after the accreditation lapses.
4Why we use it
| Purpose | On what basis |
|---|---|
| Answering enquiries and preparing proposals | Steps taken at your request before a contract |
| Running a project — planning, sourcing, accreditation, staffing, production, reporting | Performance of our contract with you |
| Paying suppliers and staff, invoicing clients, keeping accounts | Legal obligation, and our interest in running the business |
| Applying for permits and venue approvals | Our legitimate interest, and the requirements of the authority concerned |
| Measuring a campaign — footfall, stop rate, sampling counts, survey answers | Performance of our contract with the client. Individual answers are aggregated before they are reported. |
| Photographing and filming an activation, and showing it as our work | Our legitimate interest in showing what we do, balanced as set out below |
| Sending campaign notes to people who asked for them | Your consent, withdrawable in every message |
| Keeping this site available and secure | Our legitimate interest |
| Answering a lawful request from an authority, and defending claims | Legal obligation, and our legitimate interest |
5Photography and film at events
Public activations are photographed and filmed. The footage goes into the client’s reporting and, unless the project is confidential, into our own portfolio.
- Where a space is ticketed or enclosed, signage at the entrance says that filming is taking place.
- We do not put a close, identifiable portrait of someone into our own marketing without asking them there and then.
- If you appear in something we have published and you want it down, write to us with enough detail to find the frame and we will remove it. We cannot recall material a client has already published — but we will tell you who to ask.
8Where it goes
Some of the services we use store data outside Bangladesh — this site’s hosting, and our email and file storage, among them. Where personal data goes abroad we satisfy ourselves by contract with the provider that it is protected to a comparable standard.
The Vimeo player, if you allow it, connects your browser straight to Vimeo. That connection is between you and them, and we are not in it.
9How long we keep it
| What | How long |
|---|---|
| Enquiries that do not become projects | 24 months from the last contact |
| Project files, correspondence and creative assets | 7 years from the end of the project |
| Accounting and tax records | As long as Bangladeshi tax and companies law requires |
| Event photography and film | Indefinitely, as a record of our work — subject to a takedown request |
| Entry, sampling and survey forms from an activation | 90 days after the campaign is reported, unless the client is responsible for the data and has specified otherwise. Aggregate figures are kept. |
| Accreditation identity documents | Destroyed once the accreditation ends |
| Candidate applications | 12 months after the decision, unless you ask us to keep you on file |
| Your cookie choice | In your browser until you clear it. We never receive it. |
10What you can ask for
So far as it applies to you, you can ask us to:
- Show you what we hold
- A copy of your personal data, and where we got it.
- Correct it
- If something is wrong or out of date.
- Delete it
- Where we no longer need it and no law requires us to keep it.
- Stop or narrow a use
- Including our use of your image, and anything that rests on our legitimate interest rather than on a contract or a statute.
- Withdraw consent
- For anything you consented to. It does not unpick what was already done, but it stops it happening again.
- Hand it over
- A machine-readable copy of what you gave us, where that is technically possible.
Write to privacy@impactbd.marketing. We answer within 30 days, and tell you if we need longer and why. We may ask you to confirm who you are first — that check is there to protect you, not us.
11The law that applies
We operate in Bangladesh and follow Bangladeshi law. Bangladesh has no single, comprehensive data protection statute in force at the date of this page; when one comes into force we will bring this notice in line with it, and say so here.
Some of our clients — and some of their audiences — are in Europe or the United Kingdom. Where the GDPR or the UK GDPR applies to what we are doing, we meet it. The rights above are written to that standard deliberately, so that they hold whichever regime covers you.
12Children
We do not knowingly collect data from children under 18 for our own purposes. Activations aimed at families or campuses take entry details from an accompanying adult. If you think we hold a child’s data, write to us and we will delete it.
13How we protect it
Access is limited to the people who need it. Accounts are individual and use two-factor authentication where the service supports it, laptops are encrypted, and files sit in managed storage rather than on field devices. Paper forms collected at an activation are transported in one batch and destroyed once they are digitised.
No arrangement is perfect. If something goes wrong we will assess it, contain it, and tell the people affected — and the client concerned — wherever there is a real risk to them.
14Changes to this notice
The date at the top is the current version. Material changes are posted here, and we tell clients and subscribers directly where the change affects them.
15Contact and complaints
Write to privacy@impactbd.marketing, or by post to the address in the footer. If we have not put something right to your satisfaction, say so in writing — we would far rather fix it ourselves, and we will tell you plainly what your other options are.