GYMNATE (“we”, “us”, “our”) values your privacy. This policy outlines how we collect, use, store, and protect your personal data, consistent with the Constitution of Bangladesh (Article 43(b)), the ICT Act 2006, and evolving Data Protection legislation (e.g., PDPA drafts).

Information We Collect

Personal Data

  • Name, phone number, email address
  • Billing/delivery address
  • Payment information (e.g., partial card details)
  • Order history and preferences

Technical & Usage Data

  • IP address, browser/device info, visit timestamps
  • Pages visited, interaction with our site/app

Marketing Data

  • Email/SMS preferences if you opt in

How We Collect Data

  • Directly from you (forms, account registration, orders)
  • Automatically via website/app activity
  • From third parties (e.g., courier partners, with your permission)

Purpose & Legal Basis

We process your data to:

  • Manage orders and deliveries
  • Communicate updates, offers, or support
  • Improve our products, website, and services
  • Fulfill legal obligations (e.g., accounting, tax)

Processing is lawful under contract necessity, consent, or compliance with legal requirements (as per the ICT Act).

Data Protection & Storage

We safeguard your data through technical and organizational measures—secure servers, controlled access, etc.—following privacy-by-design principles. We retain personal data only as long as necessary for its original purpose or legal requirements.

Sharing Your Information

We may share your data with:

  • Courier/payment partners (e.g., Pathao, RedX) for order fulfilment
  • Service providers (e.g., IT, marketing, analytics) under confidentiality agreements
  • Legal or regulatory bodies, if required by law

We do not sell or rent your personal information to third parties.

International Data Transfers

While most data is handled within Bangladesh, certain operations may involve servers outside the country. We ensure data is protected under widely accepted safeguards.

Your Rights

Under draft PDPA and existing law, you have right to:

  • Request access to your personal data
  • Correct or delete inaccurate/incomplete data
  • Withdraw consent at any time
  • Object to certain data processing

Submit your request via WhatsApp, email, or our Contact page. We’ll respond within a reasonable time.

Cookies & Tracking

Our site uses standard cookies (e.g., session identifiers, analytics). No personal data is shared through cookies. You can manage or disable cookies via your browser at any time.

Children’s Privacy

We do not knowingly collect personal data from children under 16. If we learn of any such data, we will delete it promptly.

Policy Updates

We review and update this Privacy Policy periodically, especially as new laws (like the draft PDPA) are enacted. The “June 2025” date at the top will reflect changes.