Table of Contents
1. INTRODUCTION
Data State Ltd. ("we" "us" or "our") operates the https://lenden.com.bd/ website (the "Platform"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our crowdfunding platform.
By accessing or using our Platform, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Platform.
2. INFORMATION WE COLLECT
We collect several types of information from and about users of our Platform in accordance with Bangladesh law. When you create an account, start a fundraising campaign, make a donation, contact our customer support, subscribe to our newsletter, or participate in surveys or promotions, you voluntarily provide us with personal information. This information may include your full name, email address, mobile phone number, mailing address, date of birth, National Identity Card (NID) number or other government-issued identification for verification purposes as required under the Bangladeshi laws and regulations, Money Laundering Prevention Act, Anti-Terrorism Act, payment information such as credit or debit card details, mobile financial service (MFS) account information including bKash, Nagad, or Rocket details, bank account information, profile photograph, campaign story and related content, and social media account information if you choose to link your accounts. To comply with KYC and AML requirements, we may verify your identity information with government databases, mobile network operators, financial institutions, licensed verification service providers, and publicly available records. Such verification is conducted strictly for compliance and security purposes. Additionally, when you access our Platform, we automatically collect certain technical information including your IP address, browser type and version, device type and operating system, pages visited and time spent on pages, referring website addresses, clickstream data, cookies and similar tracking technologies, and location data with your permission. We may also receive information about you from third parties including payment processors, mobile financial service providers, identity verification services, social media platforms if you connect your accounts, marketing partners, and publicly available databases.
3. LEGAL BASIS FOR PROCESSING
We process your personal information based on your explicit consent, which you provide when creating an account or using our services. Additionally, we process your information where necessary to perform our contractual obligations to you, comply with legal obligations under relevant Bangladeshi laws, and directives from Bangladesh Bank and the Bangladesh Telecommunication Regulatory Commission (BTRC), and pursue our legitimate business interests in operating and improving our crowdfunding platform whilst ensuring appropriate safeguards for your rights.
We may use automated tools, algorithms, and manual review processes to detect fraud, identity misuse, suspicious transactions, money laundering risks, or activities prohibited under applicable laws. These processes involve analysis of personal and transactional data as required for regulatory compliance and platform security.
4. HOW WE USE YOUR INFORMATION
We use the collected information for various purposes related to operating and improving our Platform in compliance with Bangladesh law. For platform operations, we use your information to create and manage your account, process donations and fundraising campaigns, facilitate communication between campaign organizers and donors, verify your identity and prevent fraud as required under the applicable laws, maintain transaction records as required by Bangladesh Bank regulations, provide customer support, and send transactional SMS messages, emails, and notifications. To improve our Platform, we analyze usage patterns, develop new features and functionality, conduct research and analytics, and troubleshoot technical issues. For marketing and communications purposes, we may send promotional materials and newsletters with your explicit consent, inform you about campaigns that may interest you, conduct surveys and gather feedback, and display personalized content and advertisements in compliance with the applicable laws and regulations. We also use your information for legal and security purposes including complying with legal obligations under Bangladesh law, responding to requests from law enforcement agencies and regulatory authorities including Bangladesh Police, BTRC, and Bangladesh Financial Intelligence Unit (BFIU), enforcing our Terms of Service, protecting against illegal activity including cybercrimes under the relevant laws and regulations, resolving disputes, and protecting the rights, property, and safety of Data State Ltd., our users, and the public.
5. HOW WE SHARE YOUR INFORMATION
We may share your information in several circumstances whilst ensuring compliance with Bangladesh data protection laws. Regarding campaign visibility, campaign organizers' names, campaign stories, and fundraising progress are publicly visible on the Platform, and donor names may be displayed on campaign pages unless you choose to donate anonymously. Campaign updates and comments may also be publicly accessible. We share information with third-party service providers who perform services on our behalf, including payment processors and mobile financial service providers operating in Bangladesh such as bKash, Nagad, Rocket, and local and international payment gateways, cloud hosting providers, email and SMS service providers, customer support platforms, analytics providers, identity verification services, and marketing and advertising partners. All third-party service providers are required to maintain confidentiality and security of your information. We may disclose your information to Bangladesh Bank, BFIU, and other financial regulatory authorities as required under the Money Laundering Prevention laws and related regulations. If Data State Ltd. is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction subject to the same privacy protections. We will disclose your information when required by law or in response to court orders issued by courts in Bangladesh, legal processes, requests from law enforcement agencies including Bangladesh Police and other government authorities, directives from BTRC or other regulatory bodies, to protect our rights and property, or during investigation of fraud, cybercrimes, or security issues under the relevant laws. We may also share your information with third parties when you have given us explicit written or electronic consent to do so. We may also share relevant personal and transactional information with banks, mobile financial service providers, payment processors, or law‑enforcement agencies for the purpose of resolving chargebacks, preventing payment fraud, or recovering misappropriated funds.
6. PAYMENT INFORMATION AND FINANCIAL COMPLIANCE
Payment information is processed by our third-party payment processors and mobile financial service providers licensed to operate in Bangladesh. We comply with Bangladesh Bank's Payment System Department guidelines and regulations. We do not store complete credit card or bank account information on our servers. Payment processors are required to comply with international security standards as well as Bangladesh Bank's directives on payment system security. We maintain transaction records for the period required under the Money Laundering Prevention laws and Bangladesh Bank regulations, which is currently a minimum of five years. We implement Know Your Customer (KYC) and Customer Due Diligence (CDD) procedures as required under Bangladesh Bank guidelines and report suspicious transactions to the Bangladesh Financial Intelligence Unit (BFIU) as mandated by law.
7. DATA RETENTION
We retain your personal information in accordance with applicable legal requirements and our business needs. Transaction records and financial information are retained for as long as required under applicable laws and regulatory guidelines, and for such additional periods as may be necessary for audit, compliance, fraud prevention, dispute resolution, and other legitimate business purposes. Account information is retained for as long as your account remains active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. Campaign information may be retained indefinitely for transparency, accountability, and record‑keeping purposes. Tax‑related information is retained as required under the relevant tax laws and regulations. You may request deletion of your account, but certain information may be retained as required by law, regulatory directives, or for legitimate business purposes including fraud prevention and legal compliance. We may retain and preserve your personal information, communication logs, and transaction records beyond standard retention periods where required to comply with legal obligations, regulatory investigations, audits, dispute resolution processes, or for the establishment, exercise, or defence of legal claims.
8. YOUR RIGHTS AND CHOICES
You are responsible for ensuring that all personal information you submit is accurate, complete, and up to date. We shall not be liable for issues arising from incorrect or falsified information provided by you. Under Bangladesh law and our commitment to data protection, you have several rights regarding your personal information. You have the right to access your personal information and request a copy of the data we hold about you. You can update or correct inaccurate information through your account settings at any time or by contacting us directly. You may request deletion of your personal information, subject to legal and regulatory requirements that mandate retention of certain data. You can withdraw your consent for data processing at any time by contacting us, though this may limit your ability to use certain features of the Platform. You can opt out of marketing communications by unsubscribing from marketing emails or SMS messages via the link or instructions provided, disable cookies through your browser settings, and opt out of personalised advertising. If you have any questions, concerns, or complaints regarding our handling of your personal information, you should contact us using the contact details provided on our Platform, and we will make reasonable efforts to address your concerns. To exercise any of your rights, please contact us through the contact details provided on our Platform.
9. COOKIES AND TRACKING TECHNOLOGIES
We use cookies, web beacons, and similar technologies in compliance with BTRC guidelines and international best practices. These technologies help us remember your preferences, understand how you use our Platform, improve user experience, deliver targeted advertising, and ensure security of your account. You can control cookies through your browser settings; however, disabling cookies may limit your ability to use certain features of the Platform. By continuing to use our Platform, you consent to our use of cookies as described in this policy. We may use third‑party analytics and tracking tools such as Google Analytics, Meta Pixel, and similar technologies to understand Platform usage, improve performance, and deliver personalised content. These third parties may collect information about your browsing behaviour in accordance with their own privacy policies.
10. SECURITY MEASURES
Data State Ltd. implements reasonable technical and organizational measures designed to protect your personal information against unauthorized access, loss, misuse, alteration, or disclosure, in accordance with applicable laws and industry‑appropriate practices. These measures may include encryption, access controls, monitoring for suspicious activity, and other safeguards appropriate to the nature of the information and the risks involved.
However, no method of electronic transmission or storage is completely secure. Although we take commercially reasonable steps to protect your information, we do not guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly of any unauthorized access or suspected compromise.
11. CHILDREN'S PRIVACY
Our Platform is not intended for individuals under the age of 18 years, as persons below this age are considered minors. We do not knowingly collect personal information from children. Fundraising campaigns for minors must be created and managed by parents, legal guardians, or authorized adults. If you believe we have collected information from a child without proper parental or guardian consent, please contact us immediately and we will take prompt steps to delete such information from our systems.
12. DATA STORAGE AND TRANSFERS
Your personal information is primarily stored on servers located within Bangladesh to ensure compliance with local data protection requirements. However, some of your information may be transferred to and processed in countries other than Bangladesh where our service providers operate, including cloud hosting services and payment processors. When we transfer data outside Bangladesh, we ensure appropriate safeguards are in place through contractual obligations requiring service providers to maintain security standards equivalent to those required under Bangladesh law, compliance with international data protection standards, and encryption and secure transmission protocols. We obtain your consent for international data transfers where required by law. You acknowledge and consent to such transfers by using our Platform.
13. COMPLIANCE WITH BANGLADESH LAWS
Data State Ltd. processes personal information in accordance with the laws of Bangladesh that are applicable to its activities as an online platform. Where required, we may implement identification, verification, record‑keeping, reporting, or other measures to comply with obligations relating to data protection, cybersecurity, prevention of fraud, and other legal or regulatory requirements. We also cooperate with law enforcement agencies and competent authorities in Bangladesh when we receive lawful and appropriately scoped requests for information.
14. THIRD-PARTY LINKS AND SERVICES
Our Platform may contain links to third-party websites, social media platforms, and services including Facebook, YouTube, X and other platforms accessible in Bangladesh. We are not responsible for the privacy practices of these third parties and encourage you to review their privacy policies before providing any personal information to them. When you use third-party payment services or mobile financial services through our Platform, you are also subject to their terms and privacy policies.
15. DISPUTE RESOLUTION
Any disputes arising from this Privacy Policy or our data practices shall be resolved in accordance with the laws of Bangladesh. You agree that the courts of Dhaka, Bangladesh shall have exclusive jurisdiction over any disputes. We encourage you to contact us first to resolve any concerns, and we will make reasonable efforts to address your issues promptly and fairly.
16. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will notify you of material changes by posting the updated policy on our Platform with a new "Last Updated" date, sending an email notification to the email address associated with your account, sending an SMS notification to your registered mobile number for significant changes, and posting a prominent notice on our Platform homepage. We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after changes become effective constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should discontinue use of the Platform and may request deletion of your account subject to legal retention requirements.
17. CONTACT US
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at Data State Ltd. via email at contact@datastateltd.com through our website at https://lenden.com.bd/, by telephone at +8809666707635, or by post at House 8/B, Road #1, Gulshan-1, Dhaka-1212, Bangladesh. For data protection inquiries and to exercise your privacy rights, you may also contact our Data Protection Officer. We will respond to your inquiries within a reasonable timeframe, typically within 15 business days.
18. LANGUAGE
This Privacy Policy is provided in English. In case of any conflict between the English version and any translation, the English version shall prevail. However, we will make reasonable efforts to provide Bengali translations upon request.
19. ACKNOWLEDGEMENT AND CONSENT
By using our Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. You consent to the collection, use, disclosure, and processing of your personal information as described in this Privacy Policy. You confirm that all information provided by you is accurate and complete, and you agree to update your information promptly if it changes.
You further acknowledge and agree that the collection, use, or processing of your personal information does not create any fiduciary, trust, agency, or similar relationship between you and Data State Ltd., and that our role is limited solely to processing your personal data for the purposes described in this Privacy Policy.