Table of Contents
Effective Date: April 20, 2025
Last Updated: April 20, 2025
PayPack is committed to protecting your personal and organizational data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the GDPR, Bangladesh's Digital Security Act 2018, and other applicable data protection laws.
1. Information We Collect
We may collect and process the following categories of data:
- Account Information: Name, email, phone number, company name.
- Employee Data: As entered by HR/admins — names, IDs, attendance logs, payroll info, etc.
- Billing Data: Payment method, address, transaction history.
- Technical Data: IP address, browser type, device data, log files.
- Usage Data: Click behavior, access logs, support tickets.
2. How We Use Your Data
Your data is used to:
- Provide and improve the PayPack platform;
- Automate payroll, attendance, and compliance;
- Generate reports and dashboards;
- Support legal or regulatory compliance (e.g., tax, labor laws);
- Communicate service updates or alerts;
- Offer customer support.
3. Legal Basis for Processing
We process your data based on:
- Contractual obligation (for service delivery);
- Legitimate interests (product improvement, fraud prevention);
- Legal compliance;
- Consent (for marketing or optional features).
4. Data Sharing and Third-Party Access
We do not sell your data. We only share data with:
- Authorized employees of PayPack;
- Cloud infrastructure and payment processors under NDA and DPA agreements;
- Legal or regulatory bodies as required by law.
All third-party vendors are GDPR-compliant and undergo data protection reviews.
5. Data Storage & Retention
- All data is stored securely on encrypted servers.
- We retain data as long as your account is active or as required by law.
- Upon account deletion, data is anonymized or deleted, unless legal retention is required.
6. Your Rights
Depending on your location, you may have the right to:
- Access your data;
- Correct or update information;
- Delete or restrict processing;
- Object to data use;
- Request data portability;
- Withdraw consent at any time.
To exercise any rights, contact us at paypack369@gmail.com.
7. Security Measures
We implement:
- SSL encryption;
- Two-factor authentication (2FA);
- Role-based access controls (RBAC);
- Regular backups and vulnerability scans.
8. Children's Privacy
Our service is intended for legal entities and individuals 18+. We do not knowingly collect data from minors.
9. Policy Updates
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Effective Date."
10. Contact Us
If you have any questions or data protection concerns, contact:
📧 Email: info@paypack.cloud