bZm Graphics Limited ("bZm," "we," "us," or "our") respects your privacy and is committed to protecting the personal data of everyone who interacts with our business, including website visitors, prospective clients, and active clients.

This Privacy Policy describes how we collect, use, store, and share your personal information when you visit our website at bzmgraphics.com or engage our creative post-production services.

bZm Graphics Limited is incorporated in Bangladesh with offices in Dhaka, Dubai, and Texas. We act as the data controller for personal information processed under this policy. Where we engage third parties to process data on our behalf, we ensure they do so under appropriate data protection agreements.

We collect personal information in the following categories, depending on how you interact with us:

Information you provide directly:

• Name, email address, phone number, and company name submitted via contact or enquiry forms
• Project briefs, creative assets, and files you upload or share with us for editing
• Billing information such as company address and payment details processed through our payment providers
• Communications including emails, messages, and meeting notes exchanged during a project

Information collected automatically:

• IP address, browser type, device type, and operating system
• Pages visited, time spent on site, and referring URLs collected via analytics tools
• Cookie identifiers and similar tracking technologies (see Section 8)

We use your personal data only for the purposes for which it was collected, or for compatible purposes as permitted by applicable law. Specifically:

• Service delivery: To process project briefs, communicate with you about your work, and deliver completed files.
• Billing and payments: To issue invoices, process payments, and maintain financial records as required by law.
• Client support: To respond to enquiries, resolve issues, and provide after-delivery support.
• Marketing: To send newsletters, service updates, or promotional content only where you have given consent or we have a legitimate interest, and always with an option to unsubscribe.
• Website improvement: To analyse site usage patterns and improve the user experience through aggregated, anonymised analytics.
• Legal compliance: To comply with applicable laws, regulations, and court orders.

Where applicable data protection legislation requires us to identify a legal basis for processing your personal data, we rely on the following:

• Contract performance: Processing necessary to deliver the services you have engaged us to provide.
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services, maintaining security, and conducting direct marketing to existing clients, provided these interests are not overridden by your rights.
• Legal obligation: Processing required to comply with tax, accounting, or other legal requirements.
• Consent: Processing based on your explicit consent, such as subscribing to our newsletter. You may withdraw consent at any time without affecting the lawfulness of prior processing.

bZm Graphics Limited does not sell or rent your personal data. We may share your information only in the following circumstances:

• Service providers: Trusted third parties who assist in delivering our services, such as cloud storage providers, payment processors, and project management platforms. These parties are contractually obligated to process data only as instructed.
• Specialist subcontractors: On complex projects, we may engage specialist retouchers or editors. They are bound by confidentiality agreements and may only access the specific assets required for their scope of work.
• Legal requirements: Where we are required to disclose information by law, regulation, court order, or governmental authority.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, personal data may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.

We do not transfer personal data outside of Bangladesh, the UAE, or the USA without ensuring appropriate safeguards are in place, such as standard contractual clauses or equivalent mechanisms recognised under applicable law.

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Our standard retention schedule is:

• Client assets (source files): Deleted within 90 days of project completion, unless a longer retention period is agreed in writing.
• Project correspondence and records: Retained for 5 years from the date of the last transaction, in line with standard commercial record-keeping requirements.
• Financial and billing records: Retained for 7 years as required by tax regulations.
• Marketing data: Retained until you withdraw consent or opt out of communications.
• Website analytics: Retained in anonymised, aggregated form with no fixed end date; identifiable session data is not retained beyond 26 months.

Depending on your location, you may have the following rights with respect to your personal data. We will respond to verified requests within 30 days.

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data where we no longer have a lawful basis to retain it.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Portability: Request a structured, machine-readable copy of data you have provided to us.
• Objection: Object to processing based on our legitimate interests, including direct marketing.
• Withdrawal of consent: Withdraw consent at any time where processing is based on consent, without affecting prior lawful processing.

To exercise any of these rights, please contact us at privacy@bzmgraphics.com. We may need to verify your identity before processing a request.

Our website uses cookies and similar tracking technologies to enhance functionality, understand site usage, and support marketing activities. The types of cookies we use are:

• Essential cookies: Strictly necessary for the website to function (e.g., session management). These cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with our site, such as which pages are most visited. We use anonymised data only and do not sell this information.
• Marketing cookies: Used to show relevant advertising on third-party platforms. These are only placed with your consent.

You can manage your cookie preferences through your browser settings or our cookie consent banner. Blocking certain cookies may affect site functionality. For more detail on the specific cookies we use, please contact us.

bZm Graphics Limited takes data security seriously. We maintain administrative, technical, and physical safeguards designed to protect your personal information from unauthorised access, loss, misuse, or disclosure.

Our measures include ISO 27001-aligned practices, encrypted file storage, restricted staff access on a need-to-know basis, regular security audits, and secure file transfer protocols for all client asset exchanges.

While we implement these safeguards, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach that is likely to result in a high risk to your rights, we will notify you and the relevant supervisory authority without undue delay and within the timeframes required by applicable law.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will notify active clients by email at least 14 days before the revised policy takes effect.

The most current version of this policy is always available at bzmgraphics.com/privacy-policy. The effective date at the top of this page indicates when it was last revised.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please reach out to our privacy team: