This Privacy Policy explains how Toufik Royhan ("we", "us"), run by Toufik Royhan in Khulna, Bangladesh, collects, uses and protects your information when you visit toufikroyhan.com, contact us, or use the client panel.
Information we collect
- Details you give us — your name, email address, WhatsApp/Telegram or phone number, company and billing details, project briefs, files you upload, and messages you send through the contact form, orders or support tickets.
- Payment details — when you add funds we record the amount, the method (for example bKash, Nagad, Rocket or bank transfer), the sender account and the transaction ID you enter, plus any screenshot you upload. We never see or store card numbers or mobile-wallet PINs.
- Account and usage data — sign-in times, IP address, browser type and the pages you open in the panel, used to keep your account secure.
- Cookies — a session cookie that keeps you signed in, a security (CSRF) cookie, and small preference cookies for theme, currency and language. If analytics is enabled we use Google Analytics 4, which sets its own cookies to measure visits in aggregate.
How we use it
- To reply to enquiries, prepare quotes and deliver the services you order.
- To run your account: orders, invoices, wallet balance, support tickets and notifications.
- To keep the site and your account secure, prevent fraud and spam, and meet legal or tax obligations.
- To improve the website using anonymous, aggregated statistics.
We do not sell your personal information, and we do not use it for third-party advertising.
Who we share it with
Only with service providers that help us run the business, and only what they need: web hosting, email delivery, analytics (Google), spam protection (Cloudflare Turnstile) and the payment channel you choose. We may also disclose information if required by Bangladeshi law or to protect our legal rights.
How long we keep it
Account, order and invoice records are kept for as long as your account is active and for up to 6 years afterwards for accounting purposes. Contact-form messages that do not become projects are kept only as long as needed to answer them. You can ask us to delete your account earlier — see "Your rights".
Security
Passwords are stored as one-way hashes, the site is served over HTTPS, uploaded files are kept in private storage, and admin accounts support two-factor authentication. No method is 100% secure, but we work hard to protect your data.
Your rights
You can ask to see, correct, export or delete the personal information we hold about you, and you can change which emails you receive from Profile → Notification preferences in the client panel. Email info@toufikroyhan.com and we will respond within 30 days.
Children
Our services are for businesses and adults. We do not knowingly collect information from children under 13.
Changes
We may update this policy from time to time. The date at the top of the page shows the latest version; important changes will be announced in the client panel.
Contact
Toufik Royhan · Toufik Royhan · Khulna, Bangladesh Email: info@toufikroyhan.com · Phone/WhatsApp: +8801935-600800