Privacy policy

Because your privacy is important to us. Here's everything we collect, why, and what we'll never do with it.

1. Who we are. Optyv is a specialist CRO and ecommerce development agency with offices at House 58, Flat A2, Road 3, Sector 12, Uttara, Dhaka 1230, Bangladesh, and Dubai Internet City, Building 16, Al Soufouh 2, P.O. Box 73030, UAE. For anything in this policy, we’re the "data controller", which means the responsibility is ours, not a processor’s.

2. What we collect. If you contact us: your name, email, company, and whatever you write in the message. If you subscribe to the newsletter: your email. If you apply for a job: your CV and application answers. If you browse and accept analytics: usage data via Google Analytics 4 (pages viewed, rough location by country, device type), loaded through Google Tag Manager. That's the full list.

3. What we never collect. We don't buy data about you, we don't enrich your profile from third-party brokers, and we don't fingerprint your device. Analytics cookies are only set after you accept them in the banner; until then, Google's tags run in cookieless consent mode and store nothing on your device.

4. Why we collect it. To reply to you, to send the newsletter you asked for, to consider your job application, and to understand which pages of our site are useful. The legal bases are consent (newsletter, analytics), legitimate interest (replying to enquiries), and contract (client work).

5. How long we keep it. Enquiries: two years, then deleted. Newsletter emails: until you unsubscribe. Job applications: six months, then deleted unless you ask us to keep your details for future roles. Client project data: for the length of the contract plus the legal retention period for invoices.

6. Who we share it with. Our email provider, our hosting provider, our accountant (invoices only), and, if you accept analytics, Google (as our analytics processor; Google may process that data outside the EU under standard contractual clauses). All of them work under data-processing agreements. We have never sold personal data and never will. If a court order ever compels disclosure, we'll tell you unless legally barred.

7. Client store data. When we run tests on a client's store, we work with their customers' behavioural data as a processor under the client's instructions. That data stays in the client's tools, is never copied to our systems beyond aggregated results, and is covered by a separate processing agreement.

8. Your rights. You can ask for a copy of everything we hold about you, correct it, delete it, restrict how we use it, or object to our processing. Email us and we'll action it within 30 days, usually much faster. You can also complain to your local data-protection authority if you think we've got it wrong.

9. Changes. If we change this policy, the date at the top changes and material updates get a note in the newsletter. We won't quietly move the goalposts.

Cookies

We use Google Analytics, and it only sets cookies after you accept them in the consent banner. Decline (or ignore the banner) and nothing is stored on your device; the tags run in cookieless consent mode instead. No advertising pixels, no remarketing, no banner with 400 "partners". Block cookies entirely and the site still works.

Changed your mind? You can reopen the banner any time: Change your analytics choice

Questions?

Email [email protected] with "privacy" in the subject line and a human (usually Motin) will reply within one working day.