Privacy Policy

RISOSI (“we”, “us”, “our”) respects your privacy. We are an IT services company based in Dhaka, Bangladesh (Aspire to Shine). This Privacy Policy describes our practices for personal data processed through risosi.com, our contact and quote forms, email, and related business communications.

We process personal data as a controller for our own marketing and sales operations. When we process data on your behalf inside a client project (for example, staging credentials or end-user data you instruct us to handle), we typically act as a processor under your instructions and any data processing terms in the SOW or DPA.

We collect information you provide directly and limited technical data generated when you use our site.

We collect data when you submit forms, email hello@risosi.com, call or message us, engage us under an SOW, subscribe to updates (if offered), or interact with our website. We may also receive business contact details from referrals, events, or publicly available professional sources when relevant to a legitimate business outreach.

We do not knowingly purchase sensitive personal data for advertising. We do not intend to collect data from children under 16 through our marketing site.

We use personal data for the following purposes, based on contract necessity, legitimate interests in running our business, consent where required, or legal obligation:

Our site may use essential cookies needed for security and basic functionality, and optional analytics or preference cookies to understand traffic and improve content. Where required by law, we will request consent before non-essential cookies run.

You can control cookies through your browser settings. Blocking some cookies may affect site features. Third-party embeds (for example, maps or video) may set their own cookies under their policies.

We do not sell personal data. We share information only with service providers who help us operate (for example, hosting, email delivery, analytics, accounting, or payment processors), with professional advisors when needed, or when required by law or to protect rights.

Providers are expected to process data only for our instructions and with appropriate safeguards. If a project requires transferring credentials or data to a subcontractor (such as a specialist freelancer under NDA), we will do so consistently with the SOW and confidentiality terms.

International transfers: because we serve clients worldwide and may use cloud tools hosted outside Bangladesh, your data may be processed in other countries. We take reasonable steps to protect such transfers.

We keep personal data only as long as needed for the purposes above. Inquiry messages are typically retained for a limited business period (for example, up to 24 months) unless a longer relationship begins. Contract, invoice, and tax records are retained for periods required by Bangladesh law and ordinary business practice (often several years).

Project artifacts and credentials are retained according to the engagement and then deleted or returned as agreed. Aggregated or anonymized analytics may be kept longer.

We use reasonable technical and organizational measures appropriate to our size and the sensitivity of the data—access controls, careful credential handling, and vendor selection. No method of transmission or storage is perfectly secure; please use strong unique passwords for any systems we share and notify us promptly of suspected unauthorized access.

Depending on where you live and applicable law (including Bangladesh data protection expectations and, where relevant, GDPR-style rights for EU/UK residents), you may have rights to access, correct, delete, restrict, or object to certain processing, and to withdraw consent where processing is consent-based.

To exercise rights, email hello@risosi.com with enough detail for us to verify your request. We may decline requests that are unlawful, unduly repetitive, or would compromise others’ privacy or our legal obligations. Marketing opt-outs can be requested at any time via the same email.

Our website and services are directed to businesses and professionals, not to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided data, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy periodically. The “Last updated” date will change when we publish revisions. Significant changes may also be highlighted on the site or communicated to active clients when appropriate.

For privacy questions or requests, contact RISOSI at hello@risosi.com. Phone: +880 1619-749239. Location: Dhaka, Bangladesh. Hours: Sat–Thu · 9:00–18:00 (UTC+6).

We do not currently designate a separate Data Protection Officer title; privacy inquiries are handled by our operations team via the email above.