1. Information Collection Methods and Types
1.1. Personal Identification Information (PII)
BD Host may collect personal identification information from Users in a variety of ways, including but not limited to when Users visit our website, create an account, submit an order, register a domain name, request support, open a ticket, contact sales, respond to verification requests, or otherwise interact with our systems and services.
Personal identification information may include full name, billing address, physical address, company name, email address, phone number, country, postal information, and any additional information necessary for account administration, legal compliance, or fraud prevention.
1.2. Billing and Transaction Information
When You purchase or renew services, we may collect transaction-related information such as payment method, invoice number, payment status, transaction reference ID, payer details, gateway response, and the amount paid. BD Host generally does not store full card numbers when payments are handled through external processors; instead, we retain only the limited transaction data needed for billing, accounting, support, dispute handling, and compliance.
1.3. Technical and Non-Personal Information
We may automatically collect technical information about devices and systems used to access our website or Services. This may include IP address, browser type, device type, operating system, language preference, referring pages, access timestamps, session identifiers, and general website interaction data.
1.4. Support and Communication Data
When You contact us through support tickets, email, chat, or other communication channels, we may collect the contents of the communication, attachments, screenshots, diagnostic files, server logs, and any related follow-up information exchanged during the support process.
1.5. Verification and Compliance Information
In some situations, BD Host may request identity verification information, ownership proof, business registration documents, address proof, or payment authorization evidence. Such requests may occur for account security, fraud prevention, suspicious activity review, domain ownership verification, or legal compliance reasons.
2. Lawful Basis and Processing Purposes
2.1. Contractual Necessity
Much of the information we process is necessary to provide the Services You request, including account setup, hosting service activation, domain registration management, invoice generation, renewal processing, and support handling.
2.2. Legitimate Operational Interests
BD Host may process information where necessary for fraud detection, abuse prevention, platform security, service administration, infrastructure analysis, internal auditing, customer communication, service improvement, and business continuity.
2.3. Legal and Regulatory Compliance
We may process and retain information where required to comply with applicable legal obligations, accounting and tax requirements, lawful requests from competent authorities, anti-fraud obligations, dispute resolution processes, or rights protection needs.
3. How BD Host Utilizes Collected Data
3.1. Service Provision and Account Management
We use collected information to create and maintain customer accounts, provision hosting services, process domain registrations, manage renewals, configure service access, administer billing records, and maintain the lifecycle of products purchased through our website or client area.
3.2. Communications and Notifications
Contact details may be used to send order confirmations, invoices, renewal reminders, service notices, maintenance alerts, abuse warnings, security notifications, account verification requests, policy updates, and replies to customer inquiries.
3.3. Infrastructure Monitoring and Service Improvement
BD Host may use aggregated or operationally relevant data to understand how services are used, diagnose technical issues, analyze system performance, improve platform stability, detect misuse, optimize product design, and improve the customer experience.
3.4. Security, Abuse Prevention, and Auditing
We may analyze logs, account activity, access history, and transaction patterns to detect suspicious behavior, unauthorized access attempts, malware events, spam activity, or service abuse. Such processing helps protect our infrastructure, customers, partners, and the public.
4. Disclosure and Sharing of Personal Information
4.1. Necessary Third-Party Disclosure
BD Host shares personal information with third parties only where reasonably required to operate, deliver, secure, support, or legally administer the Services.
- Domain Registrars and Registry Operators: Domain registration data may be shared with domain registrars, registry providers, and related domain authorities. Such processing is subject to registrar rules, ICANN requirements, and TLD-specific policies.
- Payment Processors: Billing and payment-related data may be shared with payment gateways, banks, mobile financial service providers, and financial intermediaries for transaction processing and reconciliation.
- SSL and Service Partners: Certain information may be shared with certificate authorities, licensing vendors, anti-fraud tools, infrastructure vendors, or other service partners where needed to deliver the requested service.
4.2. Legal Compliance and Law Enforcement
BD Host may disclose customer information where required by law, legal process, lawful governmental request, valid court order, fraud investigation, or where necessary to protect rights, property, platform integrity, or the safety of customers and the public.
4.3. Corporate Transactions
If BD Host undergoes restructuring, merger, acquisition, reorganization, business transfer, or asset sale, customer information may be transferred as part of that transaction subject to applicable legal obligations.
5. WHMCS Client Area and Hosting Data Specifics
5.1. Client Area Data
Our client area may store account profile data, service identifiers, invoices, payment history, domain records, support tickets, communication history, login history, IP logs, service status, and administrative events relevant to account security and auditing.
5.2. Hosting Content and Customer Responsibility
BD Host does not routinely review the content of files, databases, emails, or applications hosted by customers except where operationally necessary, legally required, or triggered by abuse detection, malware scanning, support requests, compliance review, or security investigation.
5.3. Administrative Access
Access by BD Host staff to hosting-related data is limited to legitimate operational purposes such as service support, troubleshooting, security response, migration assistance, backup-related tasks, abuse handling, and legal compliance. Internal access may be logged and restricted by role-based controls.
6. Payment Data, Fraud Prevention, and Risk Monitoring
6.1. Payment Review
BD Host may review transaction metadata, IP address, device indicators, order patterns, and billing consistency to detect fraud, payment misuse, stolen payment instrument activity, or suspicious account behavior.
6.2. Chargeback and Dispute Handling
If a payment dispute, chargeback, reversal, or unauthorized transaction claim occurs, we may retain relevant billing, identity, service, and communication records as necessary to investigate and defend the transaction, respond to financial institutions, and enforce service-related rights.
6.3. Risk-Based Verification
Where fraud indicators appear, BD Host may request additional documentation, temporarily delay activation, or suspend account functions until the verification process is completed to our satisfaction.
8. Data Security, Integrity, and Retention Periods
8.1. Security Measures
BD Host adopts administrative, technical, and organizational safeguards intended to reduce the risk of unauthorized access, disclosure, alteration, misuse, or destruction of personal information. These safeguards may include access controls, encryption in transit, authentication layers, monitoring systems, password protection, internal permission restrictions, and security review processes.
8.2. No Absolute Security Guarantee
Although we apply reasonable safeguards, no internet transmission, hosting environment, storage platform, or electronic system can be guaranteed completely secure. Customers are also responsible for protecting their devices, account credentials, websites, plugins, applications, and local access environments.
8.3. Retention Periods
Personal data may be retained for as long as necessary to operate the account, provide services, maintain accurate records, comply with legal obligations, resolve disputes, investigate fraud or abuse, enforce agreements, or preserve audit trails. Some billing and accounting records may be kept for extended periods where required by applicable law or legitimate business necessity.
8.4. Post-Termination Retention
Even after account closure or service cancellation, BD Host may retain certain limited records such as invoices, transaction history, communication logs, verification records, and abuse-related documentation where necessary for compliance, bookkeeping, fraud prevention, or legal defense.
9. Customer Data Rights and Access Procedures
9.1. Access and Update Rights
Customers may review and update much of their account information through the official client area. We encourage Users to keep their account details complete and accurate at all times.
9.2. Data Access Requests
You may request confirmation of what personal data we maintain about You, subject to identity verification, service security considerations, and applicable legal restrictions.
9.3. Data Portability
Where appropriate and reasonably feasible, You may request a copy of certain personal data in a commonly used format. Such requests must be submitted through an official channel and may require identity confirmation.
9.4. Correction and Deletion Requests
You may request correction of inaccurate information or request deletion of certain personal data. However, BD Host may decline deletion where retention is required for billing, fraud prevention, dispute resolution, tax, accounting, abuse handling, legal obligations, or other legitimate and lawful reasons.
9.5. Restriction or Objection
In certain circumstances, You may request that we restrict certain processing activities or raise objections to specific forms of data handling, subject to legal, operational, and contractual limitations.
10. Third-Party Service Providers and International Processing
10.1. Service Providers
BD Host may use third-party vendors and infrastructure providers for services such as payment handling, anti-fraud review, domain operations, analytics, server infrastructure, software licensing, customer communications, or ticketing-related functions.
10.2. Cross-Border Processing
Some technical vendors, registrars, processors, or software partners may process information outside Bangladesh depending on service architecture and provider location. Where such processing occurs, it is done only to the extent necessary for service operation, administration, or compliance.
11. Third-Party Websites and External Links
Our website or client area may contain links to third-party websites, services, payment gateways, registrars, knowledge resources, partner pages, or externally operated content. BD Host is not responsible for the privacy practices, security controls, content, or policies of third-party sites that we do not own or control.
Users should review the privacy statements and terms of any external services they access through links appearing on our website or in our communications.
12. Policy Concerning Children’s Online Privacy
BD Host services are not directed to children and are not intended to be knowingly used by persons who are not legally capable of entering into binding service agreements under applicable law. We do not knowingly collect personal information from children in a manner inconsistent with applicable legal requirements.
If we become aware that information has been submitted in violation of this principle, we may take reasonable steps to remove the information or restrict the related account where appropriate.
13. Changes to this Privacy Policy
13.1. Policy Updates
BD Host reserves the right to update, revise, expand, or replace this Privacy Policy at any time. Changes may reflect legal requirements, operational changes, new services, security practices, or improvements in our internal procedures.
13.2. Effective Use After Changes
Updated versions may become effective upon publication or on a specified later date. Continued use of the Site or Services after the effective date of an updated Privacy Policy constitutes acknowledgement of the revised policy.
14. Contacting BD Host Regarding Privacy Concerns
14.1. Privacy Contact
If You have any questions, requests, or concerns regarding this Privacy Policy, Your personal data, or privacy-related practices at BD Host, You should contact us through our official support and communication channels.