Privacy Policy

PRIVACY STATEMENT

This privacy statement is effective as of July 1, 2025. Please note that this privacy statement will regularly be updated to reflect any changes in the way we handle your personal data or any changes in applicable laws.

Unless stated otherwise, this privacy statement applies to all of BRAC IT’s externally facing applications, services, games, tools, websites and other data processing activities where BRAC IT is acting as a data controller (or any local equivalent).

This page and its sub-pages tell you everything you need to know about how BRAC IT and/or its affiliates, subsidiaries and newly acquired companies (“BRAC IT”; “we”) protect the personal data we process and control relating to you (“your personal data”; “your data”) and which rights you have in relation to the processing of your personal data.

If the BRAC IT entity acting as the controller of your personal data is located outside Bangladesh or European Union, if applicable, BRAC IT will represent it in data privacy matters.

How does BRAC IT protect your personal data?

BRAC IT attaches great importance to your right to privacy and the protection of your personal data. We want you to feel secure that when you deal with BRAC IT, your personal data are in good hands.

BRAC IT protects your personal data in accordance with applicable laws and our data privacy policies. In addition, BRAC IT maintains the appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing and/or against accidental loss, alteration, disclosure or access, or accidental or unlawful destruction of or damage thereto.

Which categories of personal data do we collect and how do we process such personal data?

We collect personal data of our employees, potential employees, clients and their current/former/prospective employees/directors, suppliers, business contacts, shareholders and website users. If the data we collect are not listed in this privacy statement, we will give individuals (when required by law) appropriate notice of which other data will be collected and how they will be used.

The personal data we collect include the categories of personal data described in this Privacy Policy “How do we use personal data when you visit BRAC IT’s website?”, “How do we use cookies (and other tracking technologies)?”, “How do we use personal data when you visit our offices?” and “How do we use personal data for marketing purposes?”, as well as any other categories of personal data referred to in this privacy statement or in other statements you have received.

Below is also a chart describing the categories of personal data we collect:

Category of personal information	Types of personal information captured by category
Personal details, contact details, and identifiers.	Name, pronoun, all types of identifiers and contact details (such as e-mail, phone numbers, physical address) and occasionally, when necessary for specific purposes, gender, date of birth, age, place of birth.
Commercial information.	History and records of the products and services you have obtained from BRAC IT. Correspondence between you and us when it is sent to a dedicated mailbox or via other electronic communication means (including communication channels supported by AI that – for example – generates content to assist our personnel when interacting with you), for the purpose of processing account receivable payments and commercial follow-up.
Marketing and research information	1. Identifiers – the IP address, social media handle or other online identifiers of a person, e-mail address/mobile number if used for direct marketing, and name and address 2. Demographic data – (e.g. income, family status, age bracket, gender, interests, pets, home ownership, health, current service providers) 3. Browser/web history data and preferences expressed through selection/viewing/purchase of goods, services and content, information about your mobile device including (where available) type of device, device identification number, mobile operating system. 4. Social media content – blogs, posts and anything posted by an individual online or which mentioned/references an individual 5. Analytics and profiles of the individuals based on the data collected on them 6. Voice-enabled services (Speech-to-Text engines for search requests) without being recorded or stored by the mobile device.
Sensitive data and biometric information.	BRAC IT may also collect certain types of sensitive information when permitted by local law or with your consent, such as health/medical information (including disability status/access requirements and dietary requirements/allergies in the framework of the events we organize/sponsor) or biometric information, for example as when you elect to use fingerprint authentication.
Audiovisual materials, including transcriptions.	Photograph, and images/footage captured/recorded on CCTV or other audio, video and related security/monitoring systems or captured during marketing/public filming events/sessions (including recording of virtual or live workshops or similar events/sessions), voice search functionality to enable a voice command feature that allows you to ask a question and see results (functionality enabled for mobile applications only), and/or audio video recording and transcription during meetings.
Position and professional or employment-related information.	Professional or employment-related information, such as description of current position, job title, employer, location, and BRAC IT contact(s).
System and application access data and Internet and electronic network activity information.	Where you are provided with access to BRAC IT’s systems, BRAC IT may collect information required to access such BRAC IT systems and applications such as System ID, LAN ID, e-mail account, instant messaging account, mainframe ID, system passwords, and internet or other electronic network activity information, including access logs, activity logs, and electronic content produced using BRAC IT systems.
Cookies and geolocation data	As described below, we also may collect geolocation data in some circumstances. Please see our Cookies policy for more details regarding our use of cookies.
BRAC IT alumni related information	Information you provide us when you register as an BRAC IT alumnus/alumna or update your profile including your name and email address. If you were previously a user of another BRAC IT alumni website, additional data that you provided to that site may be automatically added to your profile at the Alumni Site. In addition, your user profile offers you the opportunity to provide a wide range of additional data, including postal address, current occupation, industry, education, and personal and business interests. Correspondence between you and us in relation to the Alumni Site. Data you post on the Alumni Site, such as on the chat pages. Responses to online surveys that we use for research and quality control purposes. Details on (former) compensation and payroll. Details on (former) position. Birth year when necessary for specific purposes Personal information we already have in our BRAC IT systems such as (former) Enterprise ID, (former) office location, telephone number, home address and education or training – this to verify your identity when registering on our Alumni Site.

In addition, for recruitment/employment purposes and to provide assessment and HR consultancy services to our clients, BRAC IT may process the personal information set out in the below table.

Additional personal details, contact details and identifiers/demographics.	In addition to the personal details listed above, BRAC IT may collect additional personal details for recruitment/employment purposes, such as national identification number, social security number, insurance information, marital/civil partnership status, domestic partners, dependents, emergency contact information, and military history; professional/personal calendar availability/scheduling information for meeting/communication purposes.
Educational information and professional or employment-related information.	BRAC IT may collect information about your education and professional or employment-related information, such as your employment history.
Sensitive data for recruitment purposes or for providing assessment/HR consultancy services.	BRAC IT may collect certain types of sensitive information when permitted by local law or with your consent, such as health/medical information (including disability status), trade union membership information, religion, race or ethnicity, minority flag, and information on criminal convictions and offences. BRAC IT collects this information for specific purposes, such as health/medical information in order to accommodate a disability or illness (subject to legal limits on the timing of collection of such information and other applicable limitations) and to provide benefits; background checks and diversity-related personal information (such as race or ethnicity) in order to comply with legal obligations and internal policies relating to diversity and anti-discrimination.
Documentation required under immigration laws.	BRAC IT may collect data on citizenship, passport data, and details of residency or work permit (a physical copy and/or an electronic copy).
Financial information for payroll/benefits purposes	Your banking and other relevant financial details we need for payroll/benefits purposes.
Talent management information.	Information necessary to complete a background check, details on performance decisions and outcomes, performance feedback and warnings, e-learning/training programs, performance and development reviews (including information you provide when asking for/providing feedback, creating priorities, updating your input in relevant tools), driver’s license and car ownership information, and information used to populate biographies.
Requested recruitment information	Information requested to provide during the recruitment process, to the extent allowed by applicable law.
Recruitment information you submit	Information that you submit in résumés / CVs, letters, writing samples, or other written materials (including photographs).
Information generated by us during recruitment or during assessments	Information generated by interviewers and recruiters related to you, based on their interactions with you or basic Internet searches where allowed under applicable law.
Recruitment information received from third parties	Information related to you provided by third-party placement firms, recruiters, or job-search websites, clients where applicable.
Audiovisual materials	Photograph and images/audio/footage captured/recorded on CCTV or other video systems when visiting our office or captured in the course of recruitment events or video recruitment interviews or during any other virtual and live events (including recordings during virtual workshops or similar events).
Recommendations	Recommendations related information provided on your behalf by others.
Immigration	Documentation and related information required under immigration laws.
Employment history and background checks	Information about your prior employment, education, and where applicable and allowed by applicable law, credit history, criminal records or other information revealed during background screenings.
Diversity related information	Information about race, ethnicity, religion, disability, gender (legal and identity) and/or sexual orientation, for purposes of government reporting where required by law, as well as to understand the diversity characteristics of the candidate pool and workforce and undertake analytics, subject to legal limits and consent where applicable.
Assessment information	Information generated by your participation in psychological, technical or behavioral assessments. You will receive more information about the nature of such assessments before your participation in any of them.

Except for certain information that is required by law or by BRAC IT policies (including management of an employment relationship with BRAC IT), your decision to provide any personal data to us is voluntary. You will therefore not be subject to adverse consequences if you do not wish to provide us with your personal data. However, please note that if you do not provide certain information, we may not be able to accomplish some or all of the purposes outlined in this privacy statement, and you may not be able to use certain tools and systems which require the use of such personal data.

If you provide us with personal data of another person (for instance, a potential employee/referral), you are responsible for ensuring that such person is made aware of the information contained in this privacy statement and that the person has given you his/her consent for sharing the information with BRAC IT.

The above-mentioned categories of personal data have been obtained either directly from you (for example, when you provide information to sign up for a newsletter or register to comment on a forum website) or indirectly from certain third parties (for example, through our website’s technology). Such third parties include our affiliates, public authorities, public websites and social media, suppliers, clients and vendors. Except where certain information is required by law or by BRAC IT policies (including management of an employment relationship with BRAC IT), your decision to provide any personal data to us is voluntary. Please note that if you do not provide certain information, we may not be able to accomplish some or all of the purposes outlined in this privacy statement, and you may not be able to use certain tools and systems which require the use of such personal data.

For which purposes and on which legal basis do we use your personal data?

BRAC IT uses your personal data only where required for specific purposes. Please view the table below for (i) a list of the purposes for which BRAC IT uses your personal data and (ii) an overview of the legal basis for each such purpose.

Purpose	Legal basis
Managing our contractual and/or employment relationship with you.	Necessary for the performance of a contract to which you are a party.
Recruitment.	Justified on the basis of our legitimate interests for ensuring that we recruit the appropriate employees.
Facilitating communication with you, which may include AI-powered support capabilities (including facilitating meetings, meeting recaps, email suggested content, communication in case of emergencies, and to provide you with requested information).	Justified on the basis of our legitimate interests for ensuring proper communication and emergency handling within the organization.
Operating and managing our business operations including or being part of the provision of our services to our clients and their employees/contractors and their customers, for example in collecting their data as part of surveys/assessments/psychometrics, data analytics, Marketing research or other purposes.	Justified on the basis of our legitimate interests for ensuring the proper functioning of our business operations.
Complying with legal requirements.	Necessary for the compliance with a legal obligation to which we are subject.
Monitoring your use of our systems (including monitoring the use of our website and any apps and tools you use).	Justified on the basis of our legitimate interests of avoiding non-compliance and protecting our reputation.
Social listening (Identifying and assessing what is being said about BRAC IT and our clients on social media (only publicly accessible content) to understand sentiment, intent, mood and market trends and our stakeholders’ needs and thereby improving our services. We do this through key-word searches and our goal is to gain insights in conversation trends over a specified period and not to identify an individual. To achieve this, we analyze and monitor conversation streams and monitor publicly available opinions, statements or other interactions on social media channels.)	Justified on the basis of our legitimate interest of protecting our assets and our brand on social media
Improving the security and functioning of our website, networks and information.	Justified on the basis of our legitimate interests for ensuring that you receive an excellent user experience and our networks and information are secure.
Undertaking data analytics, i.e. applying analytics to business operations and data to describe, predict and improve business performance within BRAC IT and/or to provide a better user experience, including the use of AI (e.g., machine learning). This includes marketing analytics and analytics related to the organization of events/meetings. (more details on how we run analytics on our website can be found in our cookies policy).	Justified on the basis of our legitimate interests for ensuring the proper functioning of our business operations.
Marketing our products and services to you (unless you objected against such processing, as further described in the section “How do we use personal data for marketing purposes?” below).	Justified on the basis of our legitimate interests for ensuring that we can conduct and increase our business.
Audio, video and transcription captured during live/recorded events and meetings (including virtual events/webinars) to inform interested stakeholders about the content of such events/meetings (including online publication of recordings for marketing purposes).	Based on your informed consent obtained prior to the event.
Specific Recruitment/Employment Purposes	Legal basis
Assess your suitability for employment for the role for which you are applying, as well as future roles that may become available.	Justified on the basis of BRAC IT’s legitimate interests of ensuring that it recruits the appropriate employees.
Manage your application.	Justified on the basis of BRAC IT’s legitimate interests of ensuring that it recruits the appropriate employees.
Facilitate communication with you.	Justified on the basis of BRAC IT’s legitimate interests of ensuring proper communication within the organization and with you.
Perform administrative functions (e.g. reimburse you for interview-related expenses).	Justified on the basis of BRAC IT’s legitimate interests of ensuring that it recruits the appropriate employees.
Perform data analytics, including analysis of our applicant pool in order to better understand who is applying to positions at BRAC IT and how to attract and keep top talent.	Justified on the basis of BRAC IT’s legitimate interests of ensuring that it continually improves its recruitment processes.
In some cases, record your online interview for review by additional recruiters and hiring managers.	Justified on the basis of BRAC IT’s legitimate interests of ensuring that it recruits the appropriate employees.
If you register on our Careers website, we will enter you into a database to receive future mailings about BRAC IT positions and events. You may also receive personalized job recommendations while browsing our Careers website.	Justified on the basis of BRAC IT’s legitimate interests of ensuring that it recruits the appropriate employees.
Transfer your contact information, education data, employment data, application information and the CV, all as supplied by you in our recruitment system, to the BRAC IT Talent Site—a site that we maintain to notify you about new positions that may be of interest to you.	Justified on the basis of BRAC IT’s legitimate interests of ensuring that it recruits the appropriate employees.
Administration of employee benefits	Justified on the basis of BRAC IT’s legitimate interests of ensuring that our employees receive the applicable benefits.
Perform any legally-required reporting and respond to legal process.	Compliance with a legal obligation.
Specific alumni information related purposes	Legal basis
To enable alumni to search for and locate you via the directory if you are registered as an BRAC IT alumnus/alumna.	Justified on the basis of our legitimate interests of offering users the possibility to use the Alumni Site to contact other alumni.
Provide users of the Alumni Site with a customized experience on the Alumni Site, including personalization services such as News and Events and interactive communications.	Justified on the basis of our legitimate interests of providing our users with a customized experience.
To research and analyze our alumni demographics, interests and behavior in an aggregated form.	Justified on the basis of our legitimate interests to better understand and serve our users and improve the Alumni Site and its offerings.
To contact alumni periodically with communications about events, publications or employment opportunities with BRAC IT, which we feel might interest you, unless you ask not to be contacted. You will have an opportunity to opt out of receiving further messages.	Justified on the basis of our legitimate interest for ensuring proper communication with, and sending marketing to, our alumni.
To share alumni information with other internal BRAC IT systems, specifically our internal sales tool (salesforce.com), to contact you with industry relevant information.	Justified on the basis of our legitimate interest for ensuring proper communication with, and sending marketing to, our alumni.

Where the above table states that we rely on our legitimate interests for a given purpose, we are of the opinion that our legitimate interests are not overridden by your interests, rights or freedoms, given (i) the transparency we provide on the processing activity, (ii) our privacy by design approach, (iii) our regular privacy reviews and (iv) the rights you have in relation to the processing activity. If you wish to obtain further information on this balancing test approach, please contact BRAC IT’s Chief Information Security Officer.

We will process your personal information for the purposes mentioned above based on your prior consent, to the extent such consent is mandatory under applicable laws.

To the extent you are asked to click on/check “I accept”, “I agree” or similar buttons/checkboxes/functionalities in relation to a privacy statement, doing so will be considered as providing your consent to process your personal information, only where such consent is required by mandatory law.

We will not use your personal information for purposes that are incompatible with the purposes of which you have been informed, unless it is required or authorized by law, or it is in your own vital interest (e.g. in case of a medical emergency) to do so.

Will we share your personal data with third parties?

We may transfer personal data to our service providers and professional advisors, public and governmental authorities, BRAC IT companies/affiliates or third parties in connection with BRAC IT’s operation of its business, including any (potential) corporate or commercial transaction and including clients if the data has been processed to provide client services. Such third parties may be located in other countries. Before we do so, we shall take the necessary steps to ensure that your personal data will be given adequate protection as required by relevant data privacy laws and BRAC IT’s internal policies. BRAC IT may also transfer your personal data to any of its global affiliates/partners in furtherance of any visits to our BRAC IT locations. If you would like more information on the categories of personal information we may share please read the section titled “Which categories of personal data do we collect and how do we process such personal data?”

For example, we may disclose personal information to third parties for other business purposes as follows:

We share your information with third-party service providers that provide services to us, including billing, payment processing, customer service, email deployment, advertising and marketing, security and performance monitoring, maintaining or servicing accounts, processing or fulfilling orders and transactions, verifying customer information, research, data hosting, auditing, and data processing;

To protect and defend the legal rights, safety, and security of BRAC IT, our affiliates, users, or the public, including to protect against fraud and malicious activity; and

For other business purposes described in this privacy statement or for any other purpose disclosed to you at the time we collect the information or pursuant to your consent.

We may also share your information in connection with a substantial corporate transaction, such as the sale of a website, a merger, consolidation, asset sale, initial public offering, or in the unlikely event of a bankruptcy.

Unless you are otherwise notified, any transfers of your personal data from within Bangladesh to third parties outside the region will be based on an adequacy decision or are governed by the standard contractual clauses (a copy of which can be obtained through the contact information included below). Any other International transfers of your personal data will take place in accordance with the appropriate international data transfer mechanisms and standards.

What about sensitive data?

We do not generally seek to collect sensitive data as defined in the second paragraph below through this site or otherwise. In the limited cases where we do seek to collect such data, we will do this in accordance with data privacy law requirements and/or ask for your consent.

The term “sensitive data” refers to the various categories of personal data identified by data privacy laws as requiring special treatment, including in some circumstances the need to obtain explicit consent from you. These categories include racial or ethnic origin, political opinions, religious, philosophical or other similar beliefs, membership of a trade union, physical or mental health, biometric or genetic data, sexual life or orientation, or criminal convictions and offences (including information about suspected criminal activities).

What about data security?

We maintain organizational, physical and technical security arrangements for all the personal data we hold. We have protocols, controls and relevant policies, procedures and guidance to maintain these arrangements taking into account the risks associated with the categories of personal data and the processing we undertake.

We adopt market leading security measures to protect your personal data. This includes (without being limitative):

We hold ISO/IEC 27001:2022 certification, which indicates that we adhere to the highest and strictest information security standards.

We have a Data Leakage Prevention (DLP) policy in place which governs the stewardship of client information and systems entrusted to us.

We have regular penetration testing performed by a third-party provider, which continues to show the strength of our technical defenses.

Where will your personal data be processed?

As a global organization with offices and operations throughout the world, personal data we collect may be transferred or be accessible internationally throughout BRAC IT’s global business and between its entities and affiliates.

Any such transfers throughout BRAC IT’s global business take place in accordance with the applicable data privacy laws and in accordance with our Binding Corporate Rules (“PRIVACY POLICY”).

Our PRIVACY POLICY reflects the standards contained in European data privacy laws (including the General Data Protection Regulation). Having our PRIVACY POLICY means that all our group entities which have signed up to our PRIVACY POLICY have to comply with the same internal rules. It also means that your rights (see “Which rights do you have with respect to the processing of your personal data?”) stay the same no matter where your data are processed by BRAC IT.

What are the sources we get your personal information from?

If we do not obtain your personal information directly from you, we may obtain it from the following sources: publicly available sources (registers or the internet), BRAC IT employees, contractors, (prospective) members of board of directors, shareholders, BRAC IT’s affiliates, subsidiaries and newly acquired businesses, employers of our contractors, our clients, public authorities, public websites and social media, previous employers, educational institutions, suppliers and vendors (including third party data providers).

In section 5, you can find more information on the sources of your personal information for marketing purposes.

How long will your personal data be retained by us?

We will retain your personal data only for as long as is necessary. We maintain specific records management and retention policies and procedures, so that personal data is deleted after a reasonable time according to the following retention criteria:

We retain your data as long as we have an ongoing relationship with you (in particular, if you have an account with us).
We will only keep the data while your account is active or for as long as needed to provide services to you.
We retain your data for as long as needed in order to comply with our global legal and contractual obligations.

Which rights do you have with respect to the processing of your personal data?

You are entitled (in the circumstances and under the conditions, and subject to the exceptions, set out in applicable law) to:

Request access to the personal data we process about you: this right entitles you to know whether we hold personal data about you and, if we do, to obtain information on and a copy of that personal data.

Request a rectification of your personal data: this right entitles you to have your personal data be corrected if it is inaccurate or incomplete.

Object to the processing of your personal data: this right entitles you to request that BRAC IT no longer processes your personal data.

Request the erasure of your personal data: this right entitles you to request the erasure of your personal data, including where such personal data would no longer be necessary to achieve the purposes.

Request the restriction of the processing of your personal data: this right entitles you to request that BRAC IT only processes your personal data in limited circumstances, including with your consent.

Request portability of your personal data: this right entitles you to receive a copy (in a structured, commonly used and machine-readable format) of personal data that you have provided to BRAC IT, or request BRAC IT to transmit such personal data to another data controller.

To the extent the processing of your personal data falls in scope of our PRIVACY POLICY, you may also want to review your rights under our PRIVACY POLICY.

To the extent that the processing of your personal data is based on your consent, you have the right to withdraw such consent at any time by contacting BRAC IT’s Data Privacy Officer. Please note that this will not affect BRAC IT’s right to process personal data obtained prior to the withdrawal of your consent, or its right to continue parts of the processing based on other legal bases than your consent.

If, despite our commitment and efforts to protect your personal data, you believe that your data privacy rights have been violated, we encourage and welcome individuals to come to BRAC IT first to seek resolution of any complaint. You have the right at all times to register a complaint directly with the relevant supervisory authority or to make a claim against BRAC IT with a competent court (either in the country where you live, the country where you work or the country where you deem that data privacy law has been infringed).

If you would like to exercise your erasure, rectification, or access rights in reference to your data as a job applicant or any other rights can be exercised by contacting us.

How do we use personal data when you visit BRAC IT’s website?

In addition to the information set out above, the following sections describe how we use personal data when you visit BRAC IT’s website:

Which personal data do we gather?
Do we include (links to) websites and programs of third parties?
How do we use personal data that we collect from our websites?

Which personal data do we gather?

BRAC IT collects personal data at its websites in two ways: (1) directly (for example, when you provide personal data to sign up for a newsletter or register to comment on a forum website); and (2) indirectly (for example, through our website’s technology).

We may collect and process the following personal data:

Personal data that you provide by filling in forms on our website. This includes registering to use the website, subscribing to services, newsletters and alerts, registering for a conference or requesting a white paper or further information. Pages that collect this type of personal data may provide further information as to why your personal data are needed and how it will be used. It is completely up to you whether you want to provide it.

If you contact us, we may keep a record of that correspondence.

We may ask you to complete surveys that we use for research purposes, although you do not have to respond to them.

Any postings, comments or other content that you upload or post to an BRAC IT website.

Our website or mobile applications can collect personal information about your computer or your mobile device, including (where available) your IP address, operating system, type of device, device identification number, mobile operating system and browser type, for system administration, to filter traffic, to look up user domains and to report on statistics.

Details of your visits to our website, the pages you view and resources you access or download, including but not limited to, traffic data, location data, weblogs and other communication data. Please see the Cookies section below for more information.

Do we include (links to) websites and programs of third parties?

Our websites may include:

Links to and from the sites of our partner networks, advertisers and affiliates
Certain programs (widgets and apps) of third parties. Where this is the case, note that such third parties may process your personal data collected through such programs for their own purposes.

We do not accept any responsibility or liability for such third parties’ sites or programs. Please check such third parties’ terms of use and privacy statements before using and providing any information to such third parties’ sites and programs.

How do we use personal data that we collect from our websites?

We use personal data for the purposes described in the section “For which purposes and on which legal basis do we use your personal data?” above, as well as to provide you with information you request, process online job applications, and for other purposes which we would describe to you at the point where it is collected. For example:

Links to and from the sites of our partner networks, advertisers and affiliates.
Certain programs (widgets and apps) of third parties. Where this is the case, note that such third parties may process your personal data collected through such programs for their own purposes.

We analyze your IP and browser information to determine what is most effective about our website, to help us identify ways to improve it and make it more effective. Please see the Cookies section below for more information.

How do we use cookies (and other tracking technologies)?

In addition to the information set out above, this section describes how we use cookies and other tracking technologies.

We analyze your IP and browser information to determine what is most effective about our website, to help us identify ways to improve it and, eventually, to determine how we can tailor our website to make it a more positive and relevant user experience.

Please see our Cookies policy for more details including for information about your choices with respect to advertising and social media cookies and for access to our cookie consent manager. By using our website, you agree that we can place cookies and other similar technologies on your device as explained in our Cookies policy.

How do we use personal data when you visit our offices?

When you visit our offices, we process your personal data in accordance with this privacy statement and some specific information regarding the use of visitor data and the potential use of CCTV in our offices is provided in the reception area.

How do we use personal data for marketing purposes?

In addition to the information set out above, the following sections describe how we use personal data for marketing purposes:

What are the sources of marketing data?
Do we send targeted e-mails?
Do we send push notifications?
Do we maintain Customer Relationship Management(CRM) databases?
Do we combine and analyze personal data?
Do we share personal data with third parties?
What are your rights regarding marketing communications?

What are the sources of marketing data?

The bulk of the personal data we collect and use for marketing purposes relates to individual employees of our clients and other companies with which we have an existing business relationship. We may also obtain contact information from public sources, including content made public at social media websites, to make an initial contact with a relevant individual at a client or other company.

Do we send targeted e-mails?

We send commercial e-mail to individuals at our client or other companies with whom we want to develop or maintain a business relationship in accordance with applicable marketing laws. Our targeted e-mail messages typically include web beacons, cookies, and similar technologies that allow us to know whether you open, read, or delete the message, and links you may click. When you click a link in a marketing e-mail you receive from BRAC IT, we will also use a cookie to log what pages you view and what content you download from our websites, even if you are not registered at or signed into our site.

Targeted e-mails from BRAC IT may include additional data privacy information, as required by applicable laws.

Do we send push notifications?

If you use our mobile applications, you may receive notifications such as notifications of industry topics you selected to follow within the mobile app or live events information. With your consent provided through the app permissions/settings, we may send push notifications or alerts to your mobile device even when you are not logged in. At any time, you can manage your push notification preferences or deactivate these notifications by turning off the notification settings in the mobile app or in the device settings/app permissions of your mobile device.

Do we maintain Customer Relationship Management (CRM) databases?

Like most companies, BRAC IT uses customer relationship management (CRM) database technology to manage and track our marketing efforts. Our CRM databases include personal data belonging to individuals at our client and other companies with whom we already have a business relationship or want to develop one. The personal data used for these purposes includes relevant business information, such as: contact data, publicly available information (e.g. board membership, published articles, press releases, your public posts on social media sites if relevant for business purpose), your responses to targeted e-mail (including web activity following links from our e-mails), website activity of registered users of our website, and other business information included by BRAC IT professionals based on their personal interactions with you.

Do we combine and analyze personal data?

We may combine data from publicly available sources, and from our different e-mail, website, and personal interactions with you (this includes information collected across our different websites such as our careers and corporate sites and information collected when you sign-up or log on to our sites or connect to our sites using your social media credentials (such as LinkedIn and Xing). We combine this data to better assess your experience with BRAC IT and to perform the other activities described throughout our privacy policy.

Do we share personal data with third parties?

In addition to the third parties mentioned in the section “Will we share your personal data with third parties?” above, we may share your personal data with marketing agencies.

What are your rights regarding marketing communications?

You can exercise your right to prevent marketing communications to you by checking certain boxes on the forms we use to collect your personal data, or by utilizing opt-out mechanisms in e-mails we send to you. In such cases, we will retain minimum personal data to note that you opted out in order to avoid contacting you again.

How else might we use your personal data

In addition to the information set out above, the following sections describe other specific uses of personal data by some BRAC IT affiliates.

Below, we provide you with further details about how we process your personal data in connection with any content creation / production purposes.

Content creation / production activities

Some BRAC IT entities are in the business of content production. We may process your personal data for these TV, film, marketing, advertising or other related content creation, production and distribution activities.

What personal data do we process in connection with production activities?

The personal data that we process for production purposes include images and footage of you and may include your location at the time of filming.

If you are a member of public, we will diligently attempt to make you aware of our location and filming activities in advance and will give you an opportunity not to enter the location where filming is taking place and participate in them.

If you are a focus of our filming activities (i.e. a contributor or talent such as an interviewee, extra or actor, as opposed to a member of public) we will also collect and process your name, contact information and any other information provided in any pre-filming questionnaires and/or release forms, such as next of kin details.

We may also collect and process special categories of data a such as health or disability information to the extent that this is necessary to enable us to make any necessary adjustments to our filming arrangements to assist or support you.

If you have any questions on data privacy aspects of our production activities, please contact us.

Contact us

Please contact us if:

You have a general question about how BRAC IT protects your personal data.

You wish to exercise your rights in relation to your personal data rights (as set out in the sections “Which rights do you have with respect to the processing of your personal data?” and “Your rights regarding marketing communications”).

You wish to make a complaint about BRAC IT’s use of your data.

You can also contact BRAC IT as data controller of your personal data via our Data Privacy Officer (preferably electronically) or via letter, clearly marked for the attention of the Data Privacy Officer, on the this address: BRAC IT Services Limited, Nafi Tower, 53 Gulshan Ave, Dhaka 1212

Below is information about how BRAC IT and its affiliates (“we”) use cookies and other similar technology on this website.

This policy is effective as of July 1, 2025. Please note that this privacy statement will be updated from time to time.

We can place cookies and other similar technology on your device, including mobile device, in accordance with your preferences set on our cookie consent manager. Depending on your settings in our cookie consent manager on your mobile device, the following information may be collected through cookies or similar technology: your unique device identifier, mobile device IP address, information about your device’s operating system, mobile carrier and your location information (to the extent permissible under applicable law).

What are cookies?

Cookies are text files containing small amounts of information which are downloaded to your computer or mobile device when you visit a site and allow a site to recognize your device. Cookies managed by BRAC IT only are called “first party cookies” whereas cookies from third parties are called “third party cookies” as explained below.

Why do we use cookies and similar technologies?

Cookies do a lot of different jobs, such as letting you navigate between pages efficiently, remembering your preferences and generally improving the user experience. They can also help to ensure that the advertisements you see online are more relevant to you and your interests. In addition, cookies can help us to analyze the use of our websites and online content (analytics cookies) and they can also facilitate/track the interaction on our websites and online content with social media (e.g. links to social media sites, like buttons, etc.).

Does BRAC IT use cookies for marketing and analytics?

Yes, we may use information collected from our cookies to identify user behavior and to serve content and offers based on your profile, and for the other purposes described below, to the extent legally permissible in certain jurisdictions.

In other cases, we can associate cookie information (including information from cookies placed via our advertisements on third party sites) with an identifiable individual. For example:

If we send you a targeted email which includes web beacons, cookies or similar technologies we will know whether you open, read, or delete the message.
When you click a link in a marketing e-mail you receive from BRAC IT, we will also use a cookie to log what pages you view and what content you download from our websites, even if you are not registered at or signed into our site.
Combining and analyzing personal data – As described above, we may combine data from publicly available sources, and from our different e-mail, website, and personal interactions with you (this includes information collected across our different websites such as our careers and corporate sites and information collected when you sign-up or log on to our sites or connect to our sites using your social media credentials (such as LinkedIn). We combine this data to better assess your experience with BRAC IT and to perform the other activities described throughout our privacy policy.

Do you use any cookies from third party companies?

Some cookies, web beacons and other tracking and storage technologies that we use are from third party companies (third party cookies), such as Facebook, Microsoft, Google, X (formerly Twitter), Instagram, and Linkedin Analytics to provide us with web analytics and intelligence about our sites which may also be used to provide measurement services and target ads. These companies use programming code to collect information about your interaction with our sites, such as the pages you visit, the links you click on and how long you are on our sites. This code is only active while you are on BRAC IT website. For more information on how these companies collect and use information on our behalf, please refer to their privacy policies: Facebook at Facebook Data Policy Google (including YouTube) at Google Privacy & Terms, Microsoft at Microsoft Privacy Statement, Linkedin at Linkedin Privacy Policy, X at X Privacy Policy, Instagram at Instagram Data Policy.

Does BRAC IT use any tracking technologies similar to cookies?

We may also use web beacons (including conversion pixels) or other technologies for similar purposes as above and we may include these on our sites, in marketing e-mail messages or our newsletter, affiliated websites, to determine whether messages have been opened and links clicked on. Web beacons do not place information on your device, but they may work in conjunction with cookies to monitor website activity. The information provided below about cookies also applies to web beacons and similar technologies. Conversion pixels are small codes located on a particular web page which are triggered when someone visits a page resulting in an increase in the conversion count.

What if I don’t want cookies or similar tracking technologies?

You can adjust your cookie settings through our cookie consent manager. If you want to remove existing cookies from your device, you can do this using your browser options. If you want to block future cookies being placed on your device you can use our cookie consent manager.

Please bear in mind that deleting and blocking cookies may have an impact on your user experience.

What types of cookies does the site use?

The cookies used on BRAC IT sites have been categorized as per the table below. However, it is important to note that not all cookies may be used in all jurisdictions or websites. A list of the categories of cookies used on this website is set out below.

Category	Description
Strictly Necessary cookies	These cookies are essential in order to enable you to move around the site and use its features, such as accessing secure areas of the site. Without these cookies, services you have asked for cannot be provided.
First party analytics cookies	These cookies allow us to employ data analytics so we can measure and improve the performance of our site and provide more relevant content to you. These cookies don’t collect information that identifies a visitor down to an individual level that is available to us. These cookies are not passing personally identifiable information to any external third party other than in limited cases when we engage a service provider to act on our behalf but who is then unable to use the data for their own purposes. These include, Adobe’s Analytics, Target and Audience Manager; Contentsquare and Demandbase.
Performance cookies	Performance cookies are generally third-party cookies from vendors we work with or who work on our behalf that collect information about your visit and use of the BRAC IT website, for instance which pages you visit the most often, and if you get error messages from web pages. These cookies don’t collect information that identifies a visitor. All information these cookies collect is anonymous and is only used to improve how the website works. Third party vendors may have access to this data and may use it to improve their overall services and offerings.
Functionality cookies	These cookies allow a site to remember choices you make (such as your username, language or the region you are in) and provide more enhanced, personal features. These cookies cannot track your browsing activity on other websites. They don’t gather any information about you that could be used for advertising or remembering where you’ve been on the Internet outside our site.
Advertising and social media cookies	Advertising and social media cookies (including web beacons and other tracking and storage technologies) are used to (1) deliver advertisements more relevant to you and your interests; (2) limit the number of times you see an advertisement; (3) help measure the effectiveness of the advertising campaign; (4) retargeting to BRAC IT websites/information and (5) understand people’s behavior after they view an advertisement. They are usually placed on behalf of advertising networks with the site operator’s permission. They remember that you have visited a site and quite often they will be linked to site functionality provided by the other organization. This may impact the content and messages you see on other websites you visit.