Privacy Policy
This Privacy Policy explains how RMGShare collects, uses, stores and shares personal data when you use rmgshare.com and related RMGShare services that link to this policy. RMGShare is responsible for deciding how personal data is handled for these services.
1. Data we collect
Account and identity data
Name, email address, phone number, password authentication record, user ID, profile photo, designation, factory or company, and sign-in provider information. Passwords are handled by the authentication provider; RMGShare does not display your password.
Vendor and marketplace data
Store name, owner name, contact details, business address, category, verification information, product descriptions, prices, stock, photos, certifications, order or enquiry details, complaints and related communications.
Training, job and service data
Training enrolment, answers, results, certificates, payment or subscription status, profile information, uploaded documents or photos, and job-related information you choose to provide through an RMGShare service.
Community and communications data
Posts, comments, reactions, public profile details, messages, reports and support communications. Public content can be seen by other users or visitors. Private messages are intended for the participants but may be accessed where reasonably necessary for security, abuse investigation, legal compliance or user support.
Technical and usage data
IP address, browser or device information, timestamps, authentication/session identifiers, error and security logs, pages or features used, and similar diagnostic data generated when you connect to the Platform or its service providers.
2. How we use data
- create and secure accounts, authenticate users and maintain sessions;
- provide training, certificates, HSE tools, AI features, community, messaging, jobs and marketplace functionality;
- review vendors and products, process registrations, subscriptions, enquiries and support requests;
- display information you choose to make public, such as posts, profiles, stores and product listings;
- communicate service, security, account, order, training or policy information;
- moderate abuse, prevent fraud, investigate incidents and enforce our terms;
- maintain, diagnose, analyse and improve the Platform; and
- comply with legal duties, lawful requests and protect people, rights and property.
3. Reasons for processing
Depending on the feature and applicable law, we process data because it is necessary to provide a requested service or contract, because you consented, because we must comply with law, or because we have a legitimate and proportionate need to secure, administer and improve the Platform. You may withdraw consent where processing depends on consent, but earlier lawful processing remains valid.
4. Public information
Public profiles, posts, comments, vendor information, product listings and certificates shared through public verification features may be accessible to visitors and search engines. Do not publish confidential factory data, personal identity documents, private contact details or another person's data unless you are authorised to do so.
5. How we share data
We do not sell personal data. We may share data only as reasonably needed with:
- service providers supporting authentication, cloud hosting, database, storage, document processing, email, payment, security and technical operations;
- Google services, including Google sign-in and Firebase/Google Cloud, and a registration record service using Google Sheets where applicable;
- buyers, vendors or users where needed for a requested marketplace transaction, public feature or communication;
- professional advisers, regulators, courts or law-enforcement authorities where legally required or reasonably necessary to protect rights and safety; and
- a successor organisation in a merger, restructuring or transfer, subject to appropriate protection.
6. International processing
Cloud and technology providers may process or store data in countries outside Bangladesh. Where this occurs, we use the provider's contractual and security arrangements and take reasonable steps required by applicable law. Service-provider locations may change over time.
7. Data retention
We retain data only for as long as reasonably necessary for the relevant service, account, certificate or transaction; security and dispute handling; legitimate record keeping; and legal compliance. Public content remains until deleted or removed, subject to backups and legal holds. Training, certificate, transaction and safety records may be kept longer where their integrity or verification is necessary.
8. Security
We use reasonable administrative, technical and access-control measures, including authenticated services and database/storage security rules. No internet service is completely secure. You are responsible for using a strong password, protecting your device and signing out on a shared computer.
9. Your choices and rights
Subject to applicable law and reasonable identity verification, you may ask to access, correct, update, export or delete personal data, withdraw consent, object to certain processing, or close your account. Some data may be retained where necessary for law, fraud prevention, safety, disputes, certificate integrity or backups. Send a request to contact@rmgshare.com.
10. Children
The Platform is intended for adults and professional or workplace use. We do not knowingly create accounts for children under 18. If you believe a child provided personal data without appropriate authority, contact us so we can review and take suitable action.
11. Third-party links and services
External sites and embedded services have their own privacy policies. Review those policies before providing data. This Privacy Policy does not control an independent third party's processing.
12. Cookies and browser storage
We use cookies and similar browser technologies mainly for authentication, session continuity, security and user preferences. See our Cookie Policy for details.
13. Legal framework and updates
We aim to handle personal data consistently with applicable Bangladesh requirements, including the Personal Data Protection Ordinance, 2025 and relevant cyber-security law. We may update this policy as services or law change and will revise the date above.
14. Contact
Privacy questions or requests: contact@rmgshare.com.