Privacy Policy

This Privacy Policy explains how North Bengal Agro Farms Ltd. ("NBAFL", "we", "us", "our") collects, uses, stores and shares personal information when you visit nbafl.net, create an account, place an order, or contact us. We are a Bangladesh-registered company; this policy is governed by the laws of Bangladesh and incorporates GDPR-style rights for visitors from the United Kingdom and European Union.

1. Information we collect

1.1 Information you provide directly

• Account details — name, email address and password when you create an account.
• Order details — name, shipping address, phone number, payment-method selection and order contents when you place an order.
• Contact form submissions — name, email, optional company name, inquiry type and message body.
• Communications — content of emails, WhatsApp messages or phone calls you make to us, and our replies.

1.2 Information collected automatically

• Session cookies — to keep you signed in and to remember the contents of your cart between page loads.
• Server logs — IP address, user agent, referring URL and timestamps. Used for security, fraud prevention and service health monitoring. Retained for 90 days.
• Image and asset loading — our images are served from Cloudflare R2; loading them exposes your IP address and user agent to Cloudflare in the normal course of HTTP traffic.

1.3 Information we do NOT collect

• We do not store full card numbers or banking credentials on our servers. Payments via bKash, Nagad and Rocket are handled directly by those providers; we only receive a confirmation token.
• We do not use third-party advertising trackers or behavioural ad networks on this site.

2. How we use your information

• Fulfilling orders — packing, dispatching and delivering produce; calculating shipping; processing payments; issuing invoices.
• Customer support — responding to inquiries, quality claims, refund requests and quotes.
• Account management — letting you sign in, review past orders, manage addresses and reset your password.
• Operational emails — order confirmations, shipping notifications, password resets. You cannot opt out of these while you have an active order or account.
• Legal compliance — meeting tax, accounting and consumer-protection obligations under Bangladesh law.
• Security and fraud prevention — investigating suspected fraud, abuse, or violations of our terms.

3. Who we share information with

We do not sell your personal information. We share it only with the parties below, only as needed to operate the service:

• Payment providers — bKash, Nagad and Rocket receive only what they need to process your transaction.
• Delivery partners — courier services receive your name, address and phone number to complete the delivery.
• Email infrastructure — outbound transactional emails are sent via our SMTP provider; the email body and your email address pass through their systems.
• Hosting and infrastructure — our database is hosted with a managed cloud Postgres provider; static and uploaded images are stored on Cloudflare R2. These providers process data on our behalf under standard data-processing agreements.
• Authorities — when required by law, court order, or to protect rights, property or safety.

On written request to [email protected] we will provide a current list of the specific vendors handling each category of data above.

4. Cookies

This site uses a minimal set of cookies:

• Strictly necessary — session ID (sign-in), cart ID (so your selections persist between pages). Cannot be disabled if you use the shop.
• Preference — none currently set.
• Analytics or advertising — none currently set.

You can block cookies in your browser settings, but doing so will prevent you from signing in or completing a purchase.

5. Data retention

• Order records — retained for 6 years to meet Bangladesh tax-record obligations under the Income Tax Ordinance.
• Account data — retained while your account is active. Deleted within 30 days of an account-deletion request, except where retention is required for legal or tax reasons.
• Contact form submissions — retained for 2 years for follow-up and service-quality purposes.
• Server logs — retained for 90 days.

6. Your rights

Subject to applicable law, you may:

• Access — request a copy of the personal data we hold about you.
• Correct — ask us to fix inaccurate or incomplete data.
• Delete — ask us to delete your account and associated personal data (subject to legal retention obligations).
• Object or restrict — object to certain processing or ask us to limit it.
• Withdraw consent — for any processing based on your consent.
• Lodge a complaint — with the relevant data protection authority in your jurisdiction. In Bangladesh, consumer-protection complaints can be filed with the Directorate of National Consumer Rights Protection pending the establishment of a dedicated data-protection authority.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. International data transfers

Our infrastructure providers (Cloudflare, our managed cloud database host) operate in multiple regions and may process data outside Bangladesh. We rely on standard contractual clauses and equivalent safeguards to ensure your data remains protected to the standard required by applicable law.

8. Children

This site is not intended for children under 13. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us and we will delete it.

9. Security

We use HTTPS across the site, hashed password storage, and access controls on our admin and database systems. No system is perfectly secure; we do not guarantee absolute security but we commit to using reasonable industry-standard measures.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date above will change. Material changes will be communicated by email to registered account holders, and via a notice on the home page for at least 30 days.

11. Contact

For any privacy-related question or request:

North Bengal Agro Farms Ltd.
SM Tower, House 14, Road 2, Sector 3, Uttara, Dhaka, Bangladesh
+880 1913 500677 · [email protected]