Information We Collect
We may collect information that you voluntarily provide, information generated through your use of the Application, and certain technical information from your device.
The categories of information collected depend on the Application's functionality, the features you use, and the permissions you grant.
1.1 Information You Provide
Depending on the features you use, information you provide may include:
- Account or profile information, where applicable.
- Information entered into the Application.
- Records, descriptions, notes, or other content submitted through available features.
- Information provided when contacting customer support.
- Feedback, inquiries, and other communications submitted to us.
1.2 Automatically Collected Information
When you use the Application, certain technical information may be collected automatically, including:
- Internet Protocol (IP) address.
- Device type, model, and manufacturer.
- Mobile operating system and version.
- Application version and installation information.
- Device identifiers, where permitted.
- Application usage information, including screens or features accessed.
- Date, time, and duration of Application usage.
- Diagnostic information, crash reports, and performance data, where applicable.
- Network and connectivity information necessary for service operation.
This information may be collected directly by the Application or through third-party services integrated into it.
1.3 Device Permissions
The Application may request access to certain device features or information when necessary to provide specific functionality.
Any permission requested will be associated with the relevant feature. You may manage permissions through your device settings, although disabling certain permissions may affect the availability of related features.
We do not intentionally access device information unrelated to the Application's functionality.
How We Use Your Information
We may use collected information for the following purposes:
- To provide, operate, and maintain the Application.
- To enable features and functionalities requested by users.
- To store and manage information submitted through the Application.
- To improve usability, performance, reliability, and user experience.
- To identify, investigate, and resolve technical issues.
- To monitor application performance and prevent misuse.
- To respond to customer inquiries and support requests.
- To protect the rights, property, and security of users and the Company.
- To comply with applicable laws, regulations, and legal obligations.
- To communicate important service updates, security notices, and policy changes.
- To provide promotional communications where permitted by applicable law and, where required, with your consent.
Legal Basis for Processing
Where applicable data protection laws require a legal basis for processing personal information, we rely on one or more of the following:
- Consent: Where you have voluntarily agreed to a specific processing activity.
- Contractual necessity: Where processing is necessary to provide requested services or perform an agreement with you.
- Legitimate interests: Where processing is necessary for legitimate business purposes, provided those interests do not override your rights and freedoms.
- Legal obligations: Where processing is necessary to comply with applicable laws, regulations, or lawful requests.
Where processing relies on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing performed before withdrawal.
Data Storage and Retention
We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.
Our general retention practices are as follows:
| Information Category | Retention Period |
|---|---|
| User-provided information | Duration of use and up to 12 months thereafter, unless otherwise required by law |
| Automatically collected technical information | Up to 24 months from collection, unless a longer period is necessary or legally required |
| Customer support communications | As long as necessary to resolve inquiries and maintain relevant records |
| Aggregated and anonymized information | May be retained indefinitely where it cannot reasonably identify an individual |
| Information required for legal compliance | For the period required by applicable law |
Retention periods may vary depending on the nature of the information, operational requirements, legal obligations, and legitimate business needs.
When information is no longer required, we will take reasonable steps to delete, anonymize, or securely dispose of it.
You may request deletion of your personal information by contacting us at babisweaters@gmail.com.
Certain information may need to be retained where required by law, necessary to resolve disputes, or needed to protect legitimate legal interests.
Data Sharing and Third-Party Access
We do not disclose personal information to third parties except as described in this Privacy Policy or where otherwise permitted or required by applicable law.
Depending on the Application's actual implementation, information may be shared with the following categories of recipients:
5.1 Service Providers
We may engage trusted third-party service providers to support Application operations, including:
- Application hosting and infrastructure providers.
- Analytics and application performance monitoring providers.
- Crash reporting and diagnostic service providers.
- Technical support and maintenance providers.
- Security and fraud prevention providers.
Such providers may process information on our behalf only for authorized purposes and subject to appropriate contractual or legal obligations.
5.2 Legal and Regulatory Disclosures
We may disclose information when reasonably necessary to:
- Comply with applicable laws, regulations, court orders, or lawful legal processes.
- Respond to valid requests from government authorities.
- Protect the rights, property, or safety of the Company, users, or other individuals.
- Investigate suspected fraud, security incidents, or unlawful activities.
- Enforce applicable terms and protect against legal liability.
5.3 Business Transfers
In the event of a merger, acquisition, restructuring, sale of assets, or similar business transaction, personal information may be transferred as part of the transaction, subject to applicable privacy laws and appropriate safeguards.
5.4 Aggregated and Anonymized Information
We may use or share aggregated or anonymized information for analytical, operational, research, or service improvement purposes, provided such information does not reasonably identify an individual.
We do not authorize third-party service providers to independently use personal information entrusted to them for purposes unrelated to the services they provide to us.
Cookies, SDKs, and Similar Technologies
The Application or its integrated third-party services may use cookies, software development kits (SDKs), pixels, device identifiers, and similar technologies where applicable.
These technologies may support:
- Application functionality.
- Performance monitoring.
- Error detection and diagnostics.
- Usage analytics.
- Security and service reliability.
Where required by applicable law, we will obtain consent before using non-essential tracking technologies.
You may be able to restrict certain technologies through your device settings or available privacy controls. Disabling them may affect some Application features.
International Data Transfers
Your information may be processed or stored in countries other than your country of residence, including countries that may have different data protection laws.
Where international transfers are subject to legal restrictions, we will implement appropriate safeguards as required by applicable law.
Such safeguards may include:
- Standard Contractual Clauses approved by the European Commission.
- Adequacy decisions or other legally recognized transfer mechanisms.
- Appropriate contractual protections.
- Your consent, where legally required and permitted.
We will take reasonable measures to ensure that transferred information receives an appropriate level of protection.
Your Privacy Rights
Depending on your location and applicable law, you may have certain rights concerning your personal information.
These rights may include:
- Right of Access: Request confirmation of whether we process your personal information and obtain a copy of relevant information.
- Right to Correction: Request correction of inaccurate or incomplete information.
- Right to Deletion: Request deletion of personal information, subject to applicable legal exceptions.
- Right to Restrict Processing: Request restriction of certain processing activities.
- Right to Data Portability: Request a copy of certain information in a structured, commonly used, machine-readable format.
- Right to Object: Object to certain processing activities where permitted by law.
- Right to Withdraw Consent: Withdraw consent where processing is based on consent.
- Right to Lodge a Complaint: Submit a complaint to the relevant data protection authority where applicable.
We may request reasonable information to verify your identity before fulfilling a request. We will respond within the timeframes required by applicable law.
Some requests may be limited where fulfilling them would conflict with legal obligations, security requirements, or other lawful exceptions.
California Privacy Rights (CCPA/CPRA)
If you are a California resident and the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to our processing of your information, you may have the following rights:
- The right to know the categories and specific pieces of personal information collected about you.
- The right to know the categories of sources from which personal information is collected.
- The right to know the purposes for collecting, using, or disclosing personal information.
- The right to request deletion of personal information, subject to applicable exceptions.
- The right to request correction of inaccurate personal information.
- The right to opt out of the sale or sharing of personal information, where applicable.
- The right to limit certain uses and disclosures of sensitive personal information, where applicable.
- The right to receive equal service and treatment for exercising your privacy rights.
- The right to use an authorized agent to submit a request, where permitted by law.
We will verify requests as required by applicable law and respond within the legally prescribed timeframe.
We will not discriminate against you for exercising rights granted under applicable California privacy laws.
Children's Privacy
The Application is not intended for children under 16 years of age, or any higher minimum age required by applicable law.
We do not knowingly solicit or collect personal information from children below the applicable minimum age without legally required authorization.
We encourage parents and legal guardians to supervise children's use of mobile applications and to help prevent the unauthorized disclosure of personal information.
If we become aware that personal information has been collected from a child in violation of applicable law, we will take reasonable steps to investigate and delete such information where required.
If you believe that a child has provided personal information through the Application, please contact us at babisweaters@gmail.com.
Where applicable law permits processing based on parental or guardian consent, we will obtain such consent when legally required.
Data Security
We take the confidentiality and security of personal information seriously.
We maintain reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.
Depending on the nature of the information and the services involved, safeguards may include:
- Access restrictions and authorization controls.
- Secure data handling procedures.
- Appropriate technical security measures.
- Monitoring and investigation of suspected security incidents.
- Reasonable safeguards when engaging third-party service providers.
- Internal procedures for handling personal information.
However, no electronic storage system, transmission method, or security measure can be guaranteed to be completely secure. While we take reasonable steps to protect information, we cannot guarantee absolute security against every possible threat.
Data Breach Notification
If a security incident results in unauthorized access to, disclosure of, or loss of personal information, we will investigate the incident and take reasonable steps to contain, mitigate, and remediate its effects.
Where notification is required by applicable law, we will notify affected individuals and relevant authorities within the legally prescribed timeframe.
Such notification may include information about the nature of the incident, the types of information affected, recommended protective measures, and steps taken to address the incident.
Third-Party Websites and Services
The Application may contain links to third-party websites, services, or platforms.
These external services operate independently and may have their own privacy policies and data handling practices.
We are not responsible for the privacy practices, content, or security measures of third-party services that we do not operate.
We encourage users to review the privacy policies of external services before providing personal information.
Opt-Out and Account or Application Removal
You may discontinue using the Application at any time by uninstalling it from your device.
Uninstalling the Application may stop future information collection initiated by the Application on that device. However, uninstalling does not automatically delete information previously transmitted to or retained by the Company or third-party service providers.
Where applicable, you may also manage certain permissions through your device settings.
To request deletion of information previously collected, contact us at babisweaters@gmail.com.
We will process deletion requests in accordance with applicable legal requirements and the retention provisions described in this Policy.
Marketing and Communications
We may use contact information you provide to communicate important service information, operational notices, security updates, and changes to this Privacy Policy.
Where permitted by applicable law, we may also send promotional or marketing communications.
You may opt out of marketing communications at any time by following the unsubscribe instructions included in the communication or by contacting us directly.
Opting out of marketing communications will not prevent us from sending essential service-related or legally required notices.
Changes to This Privacy Policy
We may revise this Privacy Policy periodically to reflect changes in our Application, data processing practices, legal obligations, or operational requirements.
When changes are made, we will update the "Last Updated" date at the beginning of this Policy.
For material changes, we will provide additional notice through the Application, an appropriate communication channel, or another method required by applicable law.
Where legally required, we will obtain your consent before implementing changes that require consent.
Previous versions of this Privacy Policy may be requested by contacting babisweaters@gmail.com.
Your continued use of the Application after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated Policy, to the extent permitted by applicable law.
Governing Law and Applicable Regulations
This Privacy Policy is intended to operate in accordance with applicable data protection and privacy laws.
Where applicable, this includes relevant requirements under:
- The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).
- The European Union General Data Protection Regulation (GDPR).
- Applicable national data protection and privacy legislation.
- Other privacy laws applicable to the Company or its users.
Nothing in this Privacy Policy is intended to limit any mandatory privacy rights granted to users under applicable law.
Your Consent
Where consent is required as the legal basis for processing, you provide consent through an affirmative action, such as enabling a relevant feature, granting a permission, or submitting information after being presented with an appropriate notice.
You may withdraw consent at any time where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing conducted before withdrawal or processing based on another valid legal basis.
Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our handling of personal information, please contact:
Company & Operator
BABI SWEATERS LTD.
Application
Babi Bosta
Official Privacy Email
babisweaters@gmail.comFactory & Registered Location
Dhaka, Bangladesh
This Privacy Policy is effective as of September 30, 2026.