Privacy policy

This policy explains what personal data dmahasan.com (“the site”, run by MD Ahasan, Dhaka, Bangladesh) collects, why, who else handles it, and the choices you have. It applies to the website, the Tools store and the apps sold through it. See also the cookie policy.

1. Data we collect

• Contact and audit requests: name, email, phone or WhatsApp, service needed, budget, website and your message, plus the page you sent it from.
• Purchases: name, email, country and order details. Payment is handled by Lemon Squeezy; card numbers never reach this site.
• Licence activation (Leadran): licence key, a device identifier for the PC you activate, and activation date. No scraped lead data leaves your computer.
• Blog and comments: any comment details you submit, if comments are enabled.
• Technical data: IP address, browser and pages requested, kept in standard server logs for security.
• Dashboard users: account name, email and a hashed password for staff who sign in.

2. Why we use it

• To reply to your enquiry and prepare the free audit you asked for.
• To deliver purchases, licence keys, downloads and support.
• To keep the site secure and prevent spam or abuse.
• To meet tax, accounting and legal duties.
• With your consent only: analytics and marketing measurement, if ever enabled.

Legal bases, where GDPR or similar laws apply: your request (contract), our legitimate interest in running and securing the site, legal obligation, and your consent.

3. Who else handles your data

I do not sell your personal data. It is shared only with service providers needed to run the site: Lemon Squeezy (payments, tax and licence keys, acting as merchant of record), our web hosting provider, and email delivery services. They process data under their own privacy terms. Data may be processed outside your country, including outside Bangladesh and the EU.

4. How long we keep it

Enquiries are kept while a conversation or project is active and then up to 24 months. Order and licence records are kept as long as needed for support, tax and accounting rules. Server logs are kept for a short period. You can ask for earlier deletion at any time.

5. Your rights (GDPR and data protection)

You can ask to access, correct, export or delete your data, object to or restrict its use, and withdraw consent whenever consent is the basis. If you are in the EU or UK you may also complain to your data protection authority. Email info@dmahasan.com and I will reply within 30 days.

California residents: I do not sell or share personal information for cross-context advertising.

6. Cookies

Essential cookies keep staff signed in and remember your cookie choice. Optional cookies are used only if you accept them. Details and a list are on the cookie policy page, where you can also change your choice.

7. Data protection and security

Data is sent over HTTPS, passwords are hashed and dashboard access is limited by role. No online service is perfectly secure, but I act quickly on any problem and will notify affected people where the law requires.

8. Children

The site is not aimed at children under 16 and I do not knowingly collect their data.

9. Changes

If this policy changes, the date at the top changes too. Material changes will be announced on this page.

10. Contact

MD Ahasan, Dhaka, Bangladesh. info@dmahasan.com.