Privacy & Cookies

This Notice applies whenever you visit intactic.net or any of its subdomains, submit an inquiry or quotation request, subscribe to our insights, or engage our professional services. It does not apply to third-party platforms that we merely link to.

Where you become a client, additional data processing terms — including confidentiality and data processing schedules — are defined in your Engagement Agreement. Those agreements operate alongside this Notice and provide additional protections for client materials.

We collect data through two channels — information you provide directly, and data gathered automatically.

We do not collect special-category data (such as health, biometric, or political data), and we do not knowingly collect data from children — see Section 14.

We process personal data only for defined, legitimate purposes:

• Responding to your inquiries and delivering information you request — such as proposals, quotations, and technical guidance.
• Delivering and managing our professional services, including project communication, invoicing, and support.
• Improving our Site, services, and content through aggregated analytics and performance monitoring.
• Protecting the security and integrity of our systems — including fraud prevention and abuse detection.
• Sending insights and marketing communications — only where you have opted in, and with one-click unsubscribe in every message.
• Meeting legal, accounting, and regulatory obligations applicable to our operations.

Where data protection law requires a legal basis, we rely on the following:

We share personal data only with carefully selected categories of recipients:

• Service providers and sub-processors — cloud hosting, analytics, email delivery, and payment infrastructure — bound by contractual confidentiality and data protection commitments.
• Professional advisors — lawyers, accountants, and auditors — under confidentiality obligations, where necessary for legitimate business purposes.
• Law enforcement or regulators — only where disclosure is required by applicable law, regulation, or valid legal process.
• Business restructuring — in the event of a merger, acquisition, or asset sale, data may be transferred subject to this Notice and applicable law.

Every sub-processor we engage is assessed for security posture and contractual safeguards before receiving any data, and we maintain an internal register of processing activities.

Our infrastructure partners — including cloud hosting, database, and media delivery services — may process data in data centers located outside Bangladesh. Where personal data is transferred internationally, we apply appropriate safeguards such as contractual data protection clauses and, where applicable, standard contractual clauses.

We select providers whose infrastructure meets internationally recognized security certifications, and we minimize the scope of transferred data to what is strictly necessary for the service provided.

We retain personal data only as long as necessary for the purposes described in this Notice, and in accordance with statutory retention obligations:

When retention periods expire, data is securely deleted or irreversibly anonymized. You may request earlier deletion at any time — see Section 9 — subject to legal retention obligations which may require us to keep certain records (such as invoices) for the statutory period.

We implement layered, industry-standard controls aligned with enterprise practice to protect personal data against unauthorized access, alteration, disclosure, or destruction:

No system is perfectly secure. In the unlikely event of a personal data breach affecting your rights, we will notify you and the relevant supervisory authority without undue delay, consistent with our incident response procedures and applicable law.

Depending on your jurisdiction, you may exercise the following rights over your personal data at any time:

You may also withdraw consent for marketing or non-essential cookies at any time — withdrawal does not affect the lawfulness of earlier processing. To exercise any right, email [email protected]. We respond within thirty (30) days, may verify your identity before acting, and never charge a fee — except where requests are manifestly excessive or repetitive.

Cookies are small text files placed on your device when you visit a website. They allow the site to remember your actions and preferences — enabling everything from keeping you signed in to understanding which articles resonate with readers.

Cookies are not programs: they cannot install malware, access your files, or transmit viruses. They simply store small amounts of data — set either by us (first-party) or by embedded third-party services (third-party) — that your browser returns on subsequent visits.

The following table presents our complete cookie inventory, reviewed regularly by our engineering team:

We periodically audit this inventory and remove cookies that are no longer required. Changes are reflected in the "Last Updated" date on this page.

You have full control over non-essential cookies through your browser settings. Blocking any category is straightforward — note that blocking strictly necessary cookies may affect core site functionality:

You may also opt out of Google Analytics tracking entirely using the official Analytics opt-out browser add-on. Deleting cookies is equally effective — most browsers offer a clear-cookies action within the same settings panels shown above.

The Site embeds or relies upon a small number of established third-party technologies — including Google Analytics for aggregate traffic measurement, Cloudflare for security and performance, and select media or video embeds within our insights. These parties may set their own cookies under their own policies.

We apply a least-privilege approach to third-party integrations: each one must serve a defined purpose, and each is reviewed before deployment. We encourage you to consult the privacy policies of these providers through the links available when their content is presented.

The Site is intended for business audiences and is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you are a parent or guardian who believes a child has provided us with personal data, please contact us at [email protected] and we will delete such data promptly upon verification.

We may update this Notice to reflect changes in our data practices, technology stack, or legal requirements. Material changes will be signaled by an updated "Last Updated" date and, where appropriate, a revised version number and direct notice to affected individuals.

We recommend reviewing this page periodically. Your continued use of the Site following any update constitutes acknowledgment of the revised Notice, except where additional consent is required by law — in which case we will request it explicitly.