The Digital Security Act, 2018
The Digital Security Act, 2018 controls how your personal information is used by organisations, businesses or the government. The Digital Security Act, 2018 is Bangladesh implementation of the Digital Security in the country.
The information we collect about you?
When you order with us, become a customer/stakeholder of Burger Express, register for or attend any events or subscribe to our newsletters, or register an interest in any job vacancies with us, we collect some or all of the following personal information from you:
» Date of Birth
» Postal address, email address and telephone number
» Any information relevant to the matter upon which we may be instructed.
» If you choose to submit a job or work experience placement application we will collect and hold the information that you provide in that application.
» Occasionally we may receive information about you from other sources which we will add to the information which we already hold about you in order to help us provide the required services or comply with our legal and regulatory obligations, in particular regarding anti-money laundering.
Burger Express may at certain times do require you to register to access any part of our website or application.
» We do not collect sensitive information except where legally required as part of the recruitment process. Sensitive information includes data relating to race or ethnic origin, political opinions, religious or other similar beliefs, trade union membership, physical or mental health, sexual life or criminal records.
The purpose for which we intend to process personal data?
We intend to process personal data for the following purposes:
» To enable us to provide contracted products and services to you as our customer.
» To comply with statutory and/or regulatory obligations under relevant laws in force from time to time.
» To enable us to invoice you for our services and investigate/address any attendant fee disputes that may have arisen.
» To fulfill your food delivery/collection request.
» To contact you about other services we provide which may be of interest to you if you have consented to us doing so.
» To monitor and improve the quality of services that we provide to you.
» To maintain our records for administrative purposes.
If you have consented to receive information, you may opt out at a later date. You have a right at any time to stop us from contacting you about activities, services or campaigns. If you no longer wish to be contacted about activities, services or campaigns, you may contact us in any of the ways given at the end of this notice.
We follow email marketing best practices at all time. A key aspect of these best practices is the operation of permission based emailing. If you receive emails from Burger Express or a partner it will be because you have elected to receive such emails or they are communications related specifically to services requested.
Protection of Personal Data
We have put in place various security measures, both technical and organisational, to protect your personal data from loss, misuse, alternation or destruction. Our security and privacy policies are regularly reviewed. All Burger Express, employees have signed a confidentiality agreement and only authorised persons will have access to your personal data on the need only basis.
You have various rights in respect of the personal information Burger Express holds about you – these are set out in more detail below. If you wish to exercise any of these rights, you can do so by contacting Burger Express. Please note that you will need to provide Burger Express with evidence of your identity.
Request access to your personal information: You can ask Burger Express to give you a copy of the personal information that Burger Express holds about you.
Request correction: You can ask Burger Express to change or complete any inaccurate or incomplete personal information held about you.
Request erasure: You can ask Burger Express to delete your personal information where it is no longer necessary for Burger Express to use it, you have withdrawn consent, or where Burger Express has no lawful basis for keeping it.
Right to object: You can object to Burger Express processing of your personal information where Burger Express is relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where Burger Express is processing your personal information for direct marketing purposes.
Request restriction: You can ask Burger Express to restrict our use of your personal information in the following circumstances: a) if you want us to establish the data’s accuracy; (b) where Burger Express’s use of the data is unlawful but you do not want Burger Express to erase it; (c) where you need Burger Express to hold the data even if Burger Express no longer require it as you need it to establish, exercise or defend legal claims; or (d) if you have objected to our use of your data but Burger Express needs to verify whether Burger Express has overriding legitimate grounds to use it.
Request transfer: You can ask us to provide you or a third party with some of the personal information that Burger Express holds about you in a structured, commonly used, electronic form, so it can be easily transferred.
Withdraw consent: If you have given Burger Express your consent to use personal information (for example, for marketing), you can withdraw your consent at any time. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, Burger Express may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Burger Express tries to respond to all legitimate requests within one month. Occasionally it may take Burger Express longer than a month if your request is particularly complex or you have made a number of requests. In this case, Burger Express will notify you and keep you updated.
If you have requested details of the information we hold about you and you are not happy with our response, or you think we have not complied with the Digital Security Act 2018 in some other way, you can complain to us. Please send any complaints by post, email or in person.
Address: 49 Dhansiri, Sahi Eidgah Point, Sylhet, 3100