Legal

Privacy Policy

Last updated: January 2025

This Privacy Policy describes how DualLayer Creative(“we,” “us,” or “our”) collects, uses, and protects your personal information when you visit our website at https://duallayercreative.com or engage our services.

By using our website or services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our website or services.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalised have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

Company(referred to as either “the Company,” “We,” “Us,” or “Our” in this Policy) refers to DualLayer Creative, Bangladesh.
Cookies are small files placed on Your device by a website, containing details of Your browsing history on that website among its many uses.
Country refers to Bangladesh.
Device means any device that can access the Service such as a computer, mobile phone, or digital tablet.
Personal Data is any information that relates to an identified or identifiable individual.
Service refers to the Website and all services provided by the Company.
Service Provider means any natural or legal person who processes data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate or deliver the Service.
Usage Data refers to data collected automatically, either generated by use of the Service or from the Service infrastructure itself.
Website refers to DualLayer Creative, accessible from https://duallayercreative.com
You means the individual accessing or using the Service, or the company or legal entity on behalf of which such individual is accessing or using the Service.

1. Who We Are

DualLayer Creative is a web design and development agency based in Bangladesh, operating globally on a fully remote basis. We provide website design, development, SaaS product builds, business systems, and related digital services to clients worldwide.

Data Controller: DualLayer Creative
Contact: duallayercreative@gmail.com

2. Information We Collect

2.1 Information You Provide Directly

When you use our contact form, we collect:

Full name
Email address
Company or brand name (optional)
Service interest and budget range
Project description and requirements

When you book a discovery call via Cal.com, Cal.com collects your name, email, and scheduling preferences. Please review Cal.com's Privacy Policy for details.

2.2 Information Collected Automatically

When you visit our website, we may automatically collect:

IP address and approximate geographic location
Browser type and version
Operating system
Pages visited and time spent on each page
Referring website or source
Device type (desktop, mobile, tablet)

This information is collected through Google Analytics and similar tools. It is aggregated and anonymized where possible and is used solely to improve our website and services.

2.3 Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies. Types of cookies we may use include:

Essential cookies: Necessary for the website to function correctly. Cannot be disabled.
Analytics cookies: Help us understand how visitors use our website (Google Analytics).
Preference cookies: Remember your settings and preferences.

You can control cookies through your browser settings. Disabling cookies may affect some functionality of our website.

3. How We Use Your Information

We use the information we collect to:

Respond to your inquiries and project requests
Send you proposals, quotes, and project updates
Deliver and manage our services to you
Process invoices and payments
Improve our website, services, and user experience
Analyse website traffic and usage patterns
Send you relevant communications about our services (only with your consent)
Comply with legal obligations
Protect against fraud, abuse, and security threats

We will never sell your personal information to third parties. We do not use your data for automated decision-making or profiling that produces legal or significant effects.

4. Legal Basis for Processing (GDPR)

For visitors from the European Economic Area (EEA), we process your personal data under the following legal bases:

Contract performance: Processing necessary to provide services you have requested.
Legitimate interests: Analytics and website improvement, fraud prevention.
Consent: Marketing communications (only where you have explicitly opted in).
Legal obligation: Where required by applicable law.

5. Third-Party Services We Use

We use trusted third-party services to operate our website and deliver our services. Each has its own privacy policy:

Resend

Email delivery for contact form submissions and notifications

Cal.com

Discovery call scheduling and booking

Google Analytics

Website traffic analysis and performance monitoring

Vercel

Website hosting and deployment infrastructure

GitHub

Code repository and version control

We only share information with third parties that is necessary for them to provide their services to us. We do not authorise these third parties to use your information for any other purpose.

6. Data Retention

We retain your personal data for the following periods:

Contact form submissions: Up to 2 years from date of submission, unless you request earlier deletion.
Client project data: Up to 5 years after project completion for legal and accounting purposes.
Analytics data: Aggregated data retained indefinitely; individual user data retained per Google Analytics default settings (26 months).
Email communications: Retained for the duration of our business relationship plus 2 years.

After the applicable retention period, personal data is securely deleted or anonymised.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

SSL/TLS encryption for all data in transit
Secure hosting infrastructure through Vercel
Access controls limiting who can access personal data
Regular security reviews and updates
Secure API key management for third-party services

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

8. International Data Transfers

DualLayer Creative is based in Bangladesh. If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, please be aware that your information may be transferred to and processed in countries that may not have the same data protection laws as your jurisdiction.

Where we transfer data internationally, we ensure appropriate safeguards are in place, including relying on third-party processors that have implemented Standard Contractual Clauses or other approved transfer mechanisms.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Right of access: Request a copy of the personal data we hold about you.
Right to rectification: Request correction of inaccurate or incomplete data.
Right to erasure:Request deletion of your personal data (“right to be forgotten”).
Right to restrict processing: Request that we limit how we use your data.
Right to data portability: Request your data in a machine-readable format.
Right to object: Object to our processing of your data for legitimate interests or direct marketing.
Right to withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, please contact us at duallayercreative@gmail.com. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are in the EEA, you also have the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

Our website and services are not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at duallayercreative@gmail.com and we will promptly delete such information.

11. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit. The inclusion of a link does not imply endorsement by DualLayer Creative.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will:

Update the “Last updated” date at the top of this page
Notify active clients by email where required by applicable law

We encourage you to review this Privacy Policy periodically. Your continued use of our website after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

DualLayer Creative

Bangladesh

duallayercreative@gmail.com