Privacy Policy

Your trust is our priority. Learn how we protect, manage, and respect your business data.

256-bit
SSL Encryption
ISO 27001
Certified
24/7
Security Monitoring
GDPR
Compliant

Your Privacy Matters to Us

At Jute Craftify, we are committed to protecting the privacy and security of our B2B clients, partners, and website visitors. This comprehensive Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. As a trusted global supplier of premium jute products, we adhere to strict data protection standards and international privacy regulations including GDPR (General Data Protection Regulation), CCPA (California Consumer Privacy Act), and the Bangladesh Data Protection Act.

GDPR Compliant
CCPA Ready
ISO 27001 Certified
Bangladesh Data Protection Act
DATA COLLECTION

Information We Collect

We collect various types of business information to provide and improve our B2B jute sourcing services

Business Information

  • Company Legal Name
  • Trade License Number
  • VAT/GST Registration
  • Business Type (Importer/Wholesaler/Manufacturer)
  • Years in Operation
  • Annual Purchase Volume

Contact & Account Data

  • Primary Contact Name & Title
  • Alternative Contact Person
  • Email Addresses (Corporate & Personal)
  • Phone Numbers (Office & Mobile)
  • Billing & Shipping Addresses
  • Language Preferences

Transaction & Order Data

  • Purchase History & Frequency
  • Product Categories Interested
  • Custom Specifications & Samples
  • Order Quantities & MOQ Preferences
  • Shipping & Delivery Preferences
  • Payment Terms & Credit History

Technical & Usage Data

  • IP Address & Geographic Location
  • Browser Type & Device Information
  • Pages Visited & Time Spent
  • RFQ Form Submissions History
  • PDF Catalog Downloads
  • Newsletter Engagement Metrics

Sensitive Information Notice

We do not collect sensitive personal data such as government IDs, financial account passwords, health information, or biometric data. All collected information is strictly business-related and necessary for our B2B operations.

TRANSPARENCY

Information Sharing & Third Parties

We share data only when necessary and always under strict confidentiality agreements

Logistics & Shipping Partners

Purpose: Order delivery, tracking, and customs clearance

Partner Companies:

DHLFedExMaerskLocal Freight Forwarders

Data Shared

  • Shipping addresses
  • Contact details
  • Package contents

Payment Processors

Purpose: Secure payment processing and fraud detection

Partner Companies:

StripePayPalBank Transfer ServicesLetter of Credit Banks

Data Shared

  • Billing information
  • Transaction amounts
  • Payment confirmation

Service Providers

Purpose: Business operations, communication, and analytics

Partner Companies:

CRM PlatformEmail Marketing ToolsAnalytics ServicesCloud Hosting

Data Shared

  • Contact information
  • Usage data
  • Communication history

Compliance & Legal

Purpose: Regulatory compliance and legal obligations

Partner Companies:

Customs AuthoritiesTax DepartmentsLegal AdvisorsAuditors

Data Shared

  • Transaction records
  • Business registration
  • Export documentation

Our Commitment

We never sell your personal data to third parties. All data sharing is strictly for business operations, legal compliance, or with your explicit consent. Every third party is bound by strict data processing agreements and confidentiality obligations.

SECURITY INFRASTRUCTURE

How We Protect Your Data

Enterprise-grade security measures to ensure your business information remains safe

Encryption

AES-256 for data at rest, TLS 1.3 for data in transit

Access Control

Role-based access with multi-factor authentication

Regular Audits

Quarterly security assessments and penetration testing

Network Security

Firewalls, IDS/IPS, and DDoS protection

Backup & Recovery

Daily encrypted backups with offsite storage

Monitoring

24/7 real-time threat detection and alerting

ISO 27001:2022 Certified Information Security Management System
DATA SUBJECT RIGHTS

Your Privacy Rights

You have control over your personal data. Here are the rights you can exercise

Right to Access

Request a copy of all personal data we hold about you

Within 30 days💰 Free for first request

Right to Deletion

Request deletion of your personal information

Within 30 days💰 Free

Subject to legal retention

Right to Rectification

Correct inaccurate or incomplete data

Within 15 days💰 Free

Right to Portability

Receive your data in a structured, machine-readable format

Within 30 days💰 Free

Right to Object

Object to processing based on legitimate interests

Within 30 days💰 Free

Right to Restrict

Limit how we use your data

Within 15 days💰 Free

To Exercise Your Rights:

Contact our Data Protection Officer at info@jutecraftify.com or call +880 1871-733305. We will verify your identity before processing any request to protect your data.

DATA LIFECYCLE

Data Retention Schedule

We retain your data only as long as necessary for business and legal purposes

Data TypeRetention PeriodReason
Active Client RecordsDuration of business relationship + 2 yearsService continuity and relationship management
RFQ & Inquiry Data24 months from last interactionSales follow-up and lead nurturing
Transaction & Invoice Records7 yearsTax and accounting legal requirements
Website Analytics Data14 monthsPerformance analysis and improvement
Marketing PreferencesUntil opt-out or 3 years of inactivityCommunication consent management
Chat & Support Tickets12 monthsQuality assurance and training
INTERNATIONAL COMPLIANCE

International Data Transfers

As a global exporter serving clients worldwide, your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place for all international data transfers.

BangladeshEuropean Union
Standard Contractual Clauses (SCCs)
BangladeshUnited States
Data Processing Agreement + SCCs
BangladeshUnited Kingdom
UK Addendum to SCCs
BangladeshUAE, Singapore, India
Adequacy decisions and contractual protections

GDPR & CCPA Compliance

We have appointed a Data Protection Officer (DPO) and comply with GDPR requirements for EU clients, as well as CCPA provisions for California residents.

  • Standard Contractual Clauses (SCCs) in place
  • Data Processing Agreements (DPAs) with all vendors
  • Privacy Shield framework adherence

Children's Privacy

Jute Craftify services are strictly for business-to-business transactions. We do not knowingly collect information from individuals under 18 years of age. Our products and services are intended for commercial entities, business owners, and authorized representatives only.

If we become aware of any data collected from minors, we will take immediate steps to delete such information.

Policy Update History

Track changes to our Privacy Policy over time

2.0

April 15, 2026

Major update: GDPR compliance, enhanced security measures, new data retention policy

1.5

January 10, 2026

Added cookie preference center, updated third-party sharing disclosures

1.0

September 1, 2025

Initial privacy policy published

Have Questions About Our Privacy Practices?

Our Data Protection Team is available Monday-Friday, 9 AM - 6 PM BST to address your privacy concerns.

info@jutecraftify.com

+880 1871-733305

Khulna, Bangladesh

Contact Privacy Team

Ready to Partner With a Trusted Supplier?

Join hundreds of global businesses that trust Jute Craftify for sustainable jute solutions

Chat on WhatsApp