1. Who We Are
The Business Development Services (BDS) Portal (the “Portal”) is operated by SME Foundation (SMEF), in collaboration with the ProGRESS project ILO and technical partners.
2. Scope
This Privacy Policy applies to visitors and registered users of the Portal, including entrepreneurs, experts, and service providers.
3. Information We Collect
3.1 Information you provide (Registration/Profile)
When you register or update your profile, we may collect personal and business information such as: full name, phone number, profile image, gender, website/social media, district, business sector/category, business name, year of registration, number of employees, business description, business registration document(s), email, and password (login credentials).
3.2 nformation you submit through Portal forms
This includes feedback and other submissions made through Portal forms.
3.3 Technical data & essential cookies
We collect limited technical data (e.g., server logs, device/browser type, IP address) to operate, protect, and troubleshoot the Portal. We may use essential cookies required for login sessions, language preferences, and basic site functions.
If we introduce non-essential cookies or third-party analytics, we will provide a separate cookie notice and obtain consent before they run, in accordance with applicable legal requirements and best practices.
4. Why We Use Your Information
We use your information to:
5. Verification and Administrative Review
To maintain trust and prevent misuse, SMEF (and authorized administrators) may review, verify, approve, reject, restrict, or remove profiles and submitted information/documents, especially for experts and service providers.
6. How We Share Information
We do not sell personal data.
We may share information:
7. Contact Details Visibility (Core Rule)
Your phone number and email address are shared with other users only based on your consent and Portal visibility controls.
8. Handling of Uploaded Business Documents
Access to uploaded business registration documents is restricted to authorized SMEF administrators and verification personnel only.
9. Data Retention
We generally retain account data while your account is active. Accounts with no login activity for 24 months may be flagged for deletion or anonymization.
We will make reasonable efforts to notify the registered email address at least 30 days before deletion, unless the email address is invalid or notifications repeatedly bounce.
We may retain limited records (e.g., consent logs and security/audit records) as necessary for compliance, dispute resolution, and fraud prevention.
10. Security
We apply reasonable safeguards to protect data.
11.Data Breach Notification
If a security incident results in unauthorized access to personal information, we will take appropriate remedial steps.
If we determine the incident has likely caused harm or exposed sensitive personal data, we will notify affected users within a reasonable timeframe and notify relevant authorities as required by applicable law.
12. Your Controls & Requests
You can update your profile and adjust visibility settings at any time.
Account deletion requests: Contact [rakhi.progressbd@gmail.com or najiba.progressbd@gmail.com]
We will acknowledge deletion requests within 7 business days and aim to complete them within 45 days, unless we must retain certain information for legal, security, fraud-prevention, or dispute-resolution purposes.
Deletion requests may be withdrawn by contacting the same email address before processing is completed.
13. Updates
We may update this Policy and will post the revised version with a new “Last Updated” date.
14. Contact
Privacy inquiries: [rakhi.progressbd@gmail.com or najiba.progressbd@gmail.com]. SMEF general contact is published on the Portal.