Privacy Policy

Welcome to Tusi Haytham Bio Limited ("we," "our," "us," or "Company"). We respect your privacy and are committed to protecting personal and business data in compliance with the laws of Bangladesh, including the Information and Communication Technology (ICT) Act, applicable Cyber Security regulations, and international data protection standards (GDPR/CCPA guidelines). This policy outlines how we handle data collected on https://tusihaytham.com.

1. Who We Are

Our official website address is: https://tusihaytham.com. Tusi Haytham Bio Limited is a registered corporate entity in Bangladesh specializing in sustainable textile auxiliaries and industrial water treatment chemical solutions.

2. Information We Collect

We collect essential commercial, technical, and personal data necessary for legal compliance and business interactions:

• Business & Contact Data: Corporate name, job title, work email, phone number, shipping address, tax registration (BIN/TIN) details submitted via contact forms or Technical Data Sheet (TDS) requests.
• Technical & Session Data: IP address, user agent string, browser type, geographic location, and device telemetry logged automatically for security monitoring and spam prevention.
• Comments & Media Uploads: Information provided in comments forms (along with IP and user agent data for spam protection) and media files uploaded to the site. Users are advised to strip EXIF GPS location data before uploading images.

3. Legal Basis and Purpose of Processing

Under Bangladeshi commercial laws and international standards, we process data based on legitimate business interests, statutory obligations, and contractual necessity to:

• Process requests for chemical product samples, Technical Data Sheets (TDS), and Material Safety Data Sheets (MSDS).
• Execute pre-contractual negotiations and formal B2B commercial agreements.
• Maintain cyber security infrastructure and detect unauthorized penetration or automated misuse.
• Comply with regulatory directives from lawful Bangladeshi statutory authorities.

4. Interrelation with B2B Contracts & Confidentiality

While this Privacy Policy applies to public website interactions, any proprietary chemical formulations, Technical Data Sheets, or trade secrets shared pursuant to an executed Non-Disclosure Agreement (NDA) or B2B Supply Contract shall be governed primarily by the terms of that specific B2B contract, which supersedes general website disclosures.

5. Cookies and Tracking Technologies

We utilize essential and performance cookies to optimize site operations:

• Comment & Session Cookies: Save user details for 1 year for convenience during form submissions.
• Authentication Cookies: Temporary login state cookies discarded upon browser closure or session timeout (persisting up to 2 weeks if "Remember Me" is enabled).

6. Third-Party Embedded Content & Services

Content on this website may include embedded third-party media or links to regulatory portals. Interacting with embedded content is equivalent to directly visiting the external provider's platform, which may independently harvest data according to their respective privacy terms.

7. Data Retention & Archival Policies

Corporate inquiry records, communication logs, and comment metadata are retained as required under Bangladeshi corporate accounting, tax compliance, and commercial limitation statutes. Registered profile information remains editable or deletable by users, subject to administrative overrides required by law enforcement or tax auditors.

8. International Data Transfer & Third-Party Disclosure

We do not commercialize, trade, or rent corporate or personal data. Data transfers are limited to:

• Authorized logistics carriers for chemical sample dispatch under strict confidentiality.
• Cloud storage providers and automated security monitoring systems compliant with cyber protection protocols.
• Law enforcement agencies upon receipt of formal legal processes issued under Bangladeshi jurisdiction.

9. Data Security Infrastructure

We implement end-to-end SSL/TLS encryption, firewall access control, and administrative safeguards to protect electronic records from cyber threats, unauthorized tampering, or unlawful access as defined under cyber law regulations.

10. Your Data Subject Rights

Subject to statutory legal limitations, users retain rights to request an exported copy of stored personal data, demand corrections of inaccuracies, or request data erasure, provided such erasure does not conflict with mandatory corporate accounting or statutory recordkeeping duties.

11. Revisions to Policy

We reserve the right to amend this Privacy Policy to align with revised statutory mandates or operational enhancements. Updates take immediate effect upon publication.