Privacy Policy
Bangladesh University of Business and Technology (BUBT) respects the privacy and data protection rights of all individuals who interact with its website, digital platforms, and online services. This Privacy Policy explains how BUBT collects, processes, stores, uses, and protects personal data in accordance with applicable laws, including the Information and Communication Technology (ICT) Act, 2006 of Bangladesh (as amended) and internationally recognized data protection principles consistent with the General Data Protection Regulation (GDPR).
1. Lawful Basis for Processing:
BUBT collects and processes personal data only where there is a lawful basis to do so. Such lawful bases include:
Consent provided by the data subject;
Performance of academic, administrative, or contractual obligations;
Compliance with legal and regulatory requirements;
Legitimate interests pursued by the University, provided such interests do not override the fundamental rights and freedoms of the data subject.
2. Personal Data We Collect:
BUBT may collect and process the following categories of personal data:
Identification and Contact Information: Name, address, email address, phone number;
Academic Information: Admission details, enrollment records, examination data, academic history;
Employment Information: Staff-related records where applicable;
Technical Data: IP address, browser type, device information, login data, and website usage statistics;
Other Information: Any data voluntarily submitted through forms, portals, or official communications.
BUBT limits data collection to what is adequate, relevant, and necessary for the stated purposes.
3. Purpose of Data Processing:
Personal data collected by BUBT is processed for clearly defined and legitimate purposes, including:
Managing admissions, registration, examinations, and academic services;
Providing administrative, student support, and institutional services;
Communicating official notices, updates, and academic information;
Ensuring system security, fraud prevention, and operational integrity;
Conducting research, analysis, and institutional improvement activities (where applicable);
Complying with legal obligations under Bangladeshi law.
Personal data shall not be further processed in a manner incompatible with these purposes.
4. Data Accuracy and Retention
BUBT takes reasonable steps to ensure that personal data is accurate, complete, and kept up to date. Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws, regulations, or institutional policies.
5. Data Security and Confidentiality
BUBT implements appropriate technical and organizational security measures to safeguard personal data against unauthorized access, accidental loss, destruction, alteration, or unlawful disclosure. These measures include access controls, data protection protocols, and internal confidentiality obligations for staff handling personal information.
While BUBT endeavors to protect personal data using industry-standard practices, users acknowledge that no system involving internet transmission or electronic storage is entirely secure.
6. Data Sharing and Disclosure
Personal data may be shared:
Internally among authorized BUBT departments on a need-to-know basis;
With trusted third-party service providers acting on behalf of the University, subject to confidentiality and data protection obligations;
With government authorities, regulators, or law enforcement agencies where required by law or pursuant to lawful requests.
BUBT does not sell or commercially exploit personal data.
7. Rights of Data Subjects
In line with GDPR-style principles, data subjects have the right to:
Access their personal data held by BUBT;
Request correction or update of inaccurate or incomplete data;
Request restriction or objection to certain processing activities, where applicable;
Request deletion of personal data, subject to legal and institutional obligations;
Withdraw consent at any time where processing is based on consent.
Requests to exercise these rights may be submitted to the appropriate University authority and will be handled in accordance with applicable laws.
8. Cookies and Tracking Technologies
The BUBT website may use cookies and similar technologies to enhance functionality, analyze usage patterns, and improve user experience. Users may control cookie preferences through their browser settings. Disabling cookies may affect certain features of the website.
9. Cross-Border Data Transfers
Where personal data is processed or stored using systems or services located outside Bangladesh, BUBT ensures that appropriate safeguards are in place to protect such data in accordance with this Privacy Policy and applicable data protection principles.
10. Policy Updates and Changes
BUBT reserves the right to update this Privacy Policy at any time to reflect changes in legal requirements, institutional practices, or technological developments. Updated versions will be published on the official website and shall become effective upon publication.
11. Contact and Complaints
For any questions, concerns, or complaints regarding this Privacy Policy or the processing of personal data, users may contact the relevant administrative office of Bangladesh University of Business and Technology (BUBT). BUBT will make reasonable efforts to address and resolve all concerns in a timely and lawful manner.