Official Application Policy
BABI BOSTA MOBILE APP

Privacy Policy

Application: Babi Bosta • Operated by BABI SWEATERS LTD.

Effective Date
September 30, 2026
Last Updated
September 30, 2026
Data Controller
BABI SWEATERS LTD.
Jurisdiction & Support
Dhaka, Bangladesh

BABI SWEATERS LTD. ("Company," "Service Provider," "we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, disclose, and protect information when you download, access, or use the Babi Bosta mobile application and any related services operated by BABI SWEATERS LTD. (collectively, the "Application").

By using the Application, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please discontinue using the Application.

01

Information We Collect

We may collect information that you voluntarily provide, information generated through your use of the Application, and certain technical information from your device.

The categories of information collected depend on the Application's functionality, the features you use, and the permissions you grant.

1.1 Information You Provide

Depending on the features you use, information you provide may include:

  • Account or profile information, where applicable.
  • Information entered into the Application.
  • Records, descriptions, notes, or other content submitted through available features.
  • Information provided when contacting customer support.
  • Feedback, inquiries, and other communications submitted to us.
Please avoid submitting sensitive personal information unless it is specifically required for a feature and you are comfortable providing it.

1.2 Automatically Collected Information

When you use the Application, certain technical information may be collected automatically, including:

  • Internet Protocol (IP) address.
  • Device type, model, and manufacturer.
  • Mobile operating system and version.
  • Application version and installation information.
  • Device identifiers, where permitted.
  • Application usage information, including screens or features accessed.
  • Date, time, and duration of Application usage.
  • Diagnostic information, crash reports, and performance data, where applicable.
  • Network and connectivity information necessary for service operation.

This information may be collected directly by the Application or through third-party services integrated into it.

1.3 Device Permissions

The Application may request access to certain device features or information when necessary to provide specific functionality.

Any permission requested will be associated with the relevant feature. You may manage permissions through your device settings, although disabling certain permissions may affect the availability of related features.

We do not intentionally access device information unrelated to the Application's functionality.

02

How We Use Your Information

We may use collected information for the following purposes:

  • To provide, operate, and maintain the Application.
  • To enable features and functionalities requested by users.
  • To store and manage information submitted through the Application.
  • To improve usability, performance, reliability, and user experience.
  • To identify, investigate, and resolve technical issues.
  • To monitor application performance and prevent misuse.
  • To respond to customer inquiries and support requests.
  • To protect the rights, property, and security of users and the Company.
  • To comply with applicable laws, regulations, and legal obligations.
  • To communicate important service updates, security notices, and policy changes.
  • To provide promotional communications where permitted by applicable law and, where required, with your consent.
We process personal information only for legitimate and disclosed purposes and do not use it in ways that are incompatible with those purposes without an appropriate legal basis.
03

Legal Basis for Processing

Where applicable data protection laws require a legal basis for processing personal information, we rely on one or more of the following:

  • Consent: Where you have voluntarily agreed to a specific processing activity.
  • Contractual necessity: Where processing is necessary to provide requested services or perform an agreement with you.
  • Legitimate interests: Where processing is necessary for legitimate business purposes, provided those interests do not override your rights and freedoms.
  • Legal obligations: Where processing is necessary to comply with applicable laws, regulations, or lawful requests.

Where processing relies on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing performed before withdrawal.

04

Data Storage and Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.

Our general retention practices are as follows:

Information Category Retention Period
User-provided information Duration of use and up to 12 months thereafter, unless otherwise required by law
Automatically collected technical information Up to 24 months from collection, unless a longer period is necessary or legally required
Customer support communications As long as necessary to resolve inquiries and maintain relevant records
Aggregated and anonymized information May be retained indefinitely where it cannot reasonably identify an individual
Information required for legal compliance For the period required by applicable law

Retention periods may vary depending on the nature of the information, operational requirements, legal obligations, and legitimate business needs.

When information is no longer required, we will take reasonable steps to delete, anonymize, or securely dispose of it.

You may request deletion of your personal information by contacting us at babisweaters@gmail.com.

Certain information may need to be retained where required by law, necessary to resolve disputes, or needed to protect legitimate legal interests.

05

Data Sharing and Third-Party Access

We do not disclose personal information to third parties except as described in this Privacy Policy or where otherwise permitted or required by applicable law.

Depending on the Application's actual implementation, information may be shared with the following categories of recipients:

5.1 Service Providers

We may engage trusted third-party service providers to support Application operations, including:

  • Application hosting and infrastructure providers.
  • Analytics and application performance monitoring providers.
  • Crash reporting and diagnostic service providers.
  • Technical support and maintenance providers.
  • Security and fraud prevention providers.

Such providers may process information on our behalf only for authorized purposes and subject to appropriate contractual or legal obligations.

5.2 Legal and Regulatory Disclosures

We may disclose information when reasonably necessary to:

  • Comply with applicable laws, regulations, court orders, or lawful legal processes.
  • Respond to valid requests from government authorities.
  • Protect the rights, property, or safety of the Company, users, or other individuals.
  • Investigate suspected fraud, security incidents, or unlawful activities.
  • Enforce applicable terms and protect against legal liability.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, sale of assets, or similar business transaction, personal information may be transferred as part of the transaction, subject to applicable privacy laws and appropriate safeguards.

5.4 Aggregated and Anonymized Information

We may use or share aggregated or anonymized information for analytical, operational, research, or service improvement purposes, provided such information does not reasonably identify an individual.

We do not authorize third-party service providers to independently use personal information entrusted to them for purposes unrelated to the services they provide to us.

06

Cookies, SDKs, and Similar Technologies

The Application or its integrated third-party services may use cookies, software development kits (SDKs), pixels, device identifiers, and similar technologies where applicable.

These technologies may support:

  • Application functionality.
  • Performance monitoring.
  • Error detection and diagnostics.
  • Usage analytics.
  • Security and service reliability.

Where required by applicable law, we will obtain consent before using non-essential tracking technologies.

You may be able to restrict certain technologies through your device settings or available privacy controls. Disabling them may affect some Application features.

07

International Data Transfers

Your information may be processed or stored in countries other than your country of residence, including countries that may have different data protection laws.

Where international transfers are subject to legal restrictions, we will implement appropriate safeguards as required by applicable law.

Such safeguards may include:

  • Standard Contractual Clauses approved by the European Commission.
  • Adequacy decisions or other legally recognized transfer mechanisms.
  • Appropriate contractual protections.
  • Your consent, where legally required and permitted.

We will take reasonable measures to ensure that transferred information receives an appropriate level of protection.

08

Your Privacy Rights

Depending on your location and applicable law, you may have certain rights concerning your personal information.

These rights may include:

  • Right of Access: Request confirmation of whether we process your personal information and obtain a copy of relevant information.
  • Right to Correction: Request correction of inaccurate or incomplete information.
  • Right to Deletion: Request deletion of personal information, subject to applicable legal exceptions.
  • Right to Restrict Processing: Request restriction of certain processing activities.
  • Right to Data Portability: Request a copy of certain information in a structured, commonly used, machine-readable format.
  • Right to Object: Object to certain processing activities where permitted by law.
  • Right to Withdraw Consent: Withdraw consent where processing is based on consent.
  • Right to Lodge a Complaint: Submit a complaint to the relevant data protection authority where applicable.
To exercise any applicable rights, contact us at babisweaters@gmail.com.

We may request reasonable information to verify your identity before fulfilling a request. We will respond within the timeframes required by applicable law.

Some requests may be limited where fulfilling them would conflict with legal obligations, security requirements, or other lawful exceptions.

09

California Privacy Rights (CCPA/CPRA)

If you are a California resident and the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to our processing of your information, you may have the following rights:

  • The right to know the categories and specific pieces of personal information collected about you.
  • The right to know the categories of sources from which personal information is collected.
  • The right to know the purposes for collecting, using, or disclosing personal information.
  • The right to request deletion of personal information, subject to applicable exceptions.
  • The right to request correction of inaccurate personal information.
  • The right to opt out of the sale or sharing of personal information, where applicable.
  • The right to limit certain uses and disclosures of sensitive personal information, where applicable.
  • The right to receive equal service and treatment for exercising your privacy rights.
  • The right to use an authorized agent to submit a request, where permitted by law.
To submit a request, contact us at babisweaters@gmail.com.

We will verify requests as required by applicable law and respond within the legally prescribed timeframe.

We will not discriminate against you for exercising rights granted under applicable California privacy laws.

10

Children's Privacy

The Application is not intended for children under 16 years of age, or any higher minimum age required by applicable law.

We do not knowingly solicit or collect personal information from children below the applicable minimum age without legally required authorization.

We encourage parents and legal guardians to supervise children's use of mobile applications and to help prevent the unauthorized disclosure of personal information.

If we become aware that personal information has been collected from a child in violation of applicable law, we will take reasonable steps to investigate and delete such information where required.

If you believe that a child has provided personal information through the Application, please contact us at babisweaters@gmail.com.

Where applicable law permits processing based on parental or guardian consent, we will obtain such consent when legally required.

11

Data Security

We take the confidentiality and security of personal information seriously.

We maintain reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Depending on the nature of the information and the services involved, safeguards may include:

  • Access restrictions and authorization controls.
  • Secure data handling procedures.
  • Appropriate technical security measures.
  • Monitoring and investigation of suspected security incidents.
  • Reasonable safeguards when engaging third-party service providers.
  • Internal procedures for handling personal information.

However, no electronic storage system, transmission method, or security measure can be guaranteed to be completely secure. While we take reasonable steps to protect information, we cannot guarantee absolute security against every possible threat.

12

Data Breach Notification

If a security incident results in unauthorized access to, disclosure of, or loss of personal information, we will investigate the incident and take reasonable steps to contain, mitigate, and remediate its effects.

Where notification is required by applicable law, we will notify affected individuals and relevant authorities within the legally prescribed timeframe.

Such notification may include information about the nature of the incident, the types of information affected, recommended protective measures, and steps taken to address the incident.

13

Third-Party Websites and Services

The Application may contain links to third-party websites, services, or platforms.

These external services operate independently and may have their own privacy policies and data handling practices.

We are not responsible for the privacy practices, content, or security measures of third-party services that we do not operate.

We encourage users to review the privacy policies of external services before providing personal information.

14

Opt-Out and Account or Application Removal

You may discontinue using the Application at any time by uninstalling it from your device.

Uninstalling the Application may stop future information collection initiated by the Application on that device. However, uninstalling does not automatically delete information previously transmitted to or retained by the Company or third-party service providers.

Where applicable, you may also manage certain permissions through your device settings.

To request deletion of information previously collected, contact us at babisweaters@gmail.com.

We will process deletion requests in accordance with applicable legal requirements and the retention provisions described in this Policy.

15

Marketing and Communications

We may use contact information you provide to communicate important service information, operational notices, security updates, and changes to this Privacy Policy.

Where permitted by applicable law, we may also send promotional or marketing communications.

You may opt out of marketing communications at any time by following the unsubscribe instructions included in the communication or by contacting us directly.

Opting out of marketing communications will not prevent us from sending essential service-related or legally required notices.

16

Changes to This Privacy Policy

We may revise this Privacy Policy periodically to reflect changes in our Application, data processing practices, legal obligations, or operational requirements.

When changes are made, we will update the "Last Updated" date at the beginning of this Policy.

For material changes, we will provide additional notice through the Application, an appropriate communication channel, or another method required by applicable law.

Where legally required, we will obtain your consent before implementing changes that require consent.

Previous versions of this Privacy Policy may be requested by contacting babisweaters@gmail.com.

Your continued use of the Application after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated Policy, to the extent permitted by applicable law.

17

Governing Law and Applicable Regulations

This Privacy Policy is intended to operate in accordance with applicable data protection and privacy laws.

Where applicable, this includes relevant requirements under:

  • The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).
  • The European Union General Data Protection Regulation (GDPR).
  • Applicable national data protection and privacy legislation.
  • Other privacy laws applicable to the Company or its users.

Nothing in this Privacy Policy is intended to limit any mandatory privacy rights granted to users under applicable law.

18

Your Consent

Where consent is required as the legal basis for processing, you provide consent through an affirmative action, such as enabling a relevant feature, granting a permission, or submitting information after being presented with an appropriate notice.

You may withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal or processing based on another valid legal basis.

19

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of personal information, please contact:

Company & Operator

BABI SWEATERS LTD.

Application

Babi Bosta

Official Privacy Email

babisweaters@gmail.com

Factory & Registered Location

Dhaka, Bangladesh

Processing Note: For privacy-related requests, please include "Privacy Request – Babi Bosta" in the subject line of your email to help us identify and process your inquiry swiftly.
Send Privacy Request Email

This Privacy Policy is effective as of September 30, 2026.