Privacy Policy

Overview & Introduction

By accessing or using IT Cadre's website and services, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use our services.

Company: IT Cadre (hereinafter "IT Cadre", "the Company", "we", "us", or "our")
Website: itcadre.net and all associated subdomains
Services: Domain Registration, Web Hosting, VPS Hosting, Dedicated Servers, SSL Certificates, Business Email, DNS Management

We are committed to protecting your privacy and handling your personal data responsibly, transparently and in compliance with applicable data protection laws including the General Data Protection Regulation (GDPR), Bangladesh Digital Security Act 2018, and other applicable international regulations.

Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Contract performance — processing necessary to deliver the services you have purchased or requested
• Legitimate interests — processing necessary for our legitimate business interests (fraud prevention, security, service improvement) where not overridden by your rights
• Legal obligation — processing required to comply with applicable laws and regulations
• Consent — where you have given us explicit consent for specific processing activities such as marketing communications

Information We Collect

We collect the following categories of personal information to provide and improve our services:

2.1 Account & Registration Information

• Full name (first name and last name)
• Email address (used as your primary account identifier and for service communications)
• Password (stored in a securely hashed, non-reversible format)
• Phone number (required for account verification and support)
• Company or organisation name (optional, for business accounts)
• Profile photo (optional, uploaded at your discretion)

2.2 Billing & Payment Information

• Billing address (street, city, state/division, postcode, country)
• VAT or Tax Identification Number (where applicable for business accounts)
• Payment method type (card, mobile banking, etc.) — full card numbers are never stored by IT Cadre
• Transaction IDs and payment history for invoicing and accounting

2.3 Domain Registration Contact Data

• Registrant name, organisation, email, phone and address (required by ICANN for domain registration)
• Administrative and technical contact details
• This data is submitted to the applicable domain registry and may appear in public WHOIS databases unless WHOIS Privacy Protection is enabled

2.4 Technical & Usage Information

• IP address and approximate geographic location
• Browser type, version and operating system
• Device type (desktop, tablet, mobile) and screen resolution
• Pages visited, time spent and navigation path on our website
• Referring URLs (where you came from before visiting our website)
• Date, time and duration of your session
• API requests, error logs and support ticket history

2.5 Communications

• Support tickets, live chat transcripts and email correspondence with our team
• Survey responses and feedback you provide voluntarily
• Social media messages where you contact us through official IT Cadre accounts

How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

• Creating and managing your IT Cadre account
• Processing domain registration, renewal, transfer and restoration orders
• Provisioning and managing web hosting, VPS, dedicated server and email services
• Generating, issuing and renewing SSL certificates
• Processing payments and generating invoices
• Submitting mandatory domain contact data to ICANN-accredited registries

3.2 Communication

• Sending service-critical transactional emails: order confirmations, invoices, domain expiry reminders, SSL expiry alerts, server downtime notices
• Responding to your support requests, questions and complaints
• Sending promotional emails and newsletters where you have opted in (unsubscribe available in every email)
• Notifying you of policy updates, security alerts and important account changes

3.3 Security & Fraud Prevention

• Verifying your identity during login, password reset and account recovery
• Detecting, investigating and preventing fraudulent transactions and abuse
• Monitoring for unauthorised access, DDoS attacks and security threats
• Enforcing our Terms of Service and Acceptable Use Policy

3.4 Service Improvement

• Analysing usage patterns to improve our website, control panel and service features
• Conducting performance monitoring and capacity planning for our infrastructure
• A/B testing of new features and interface improvements
• Generating anonymised, aggregated analytics reports

3.5 Legal Compliance

• Meeting ICANN requirements for domain registration and WHOIS data accuracy
• Complying with lawful requests from government authorities and law enforcement
• Maintaining financial records as required by applicable tax and accounting laws

Information Sharing & Disclosure

IT Cadre does not sell, trade or rent your personal information to third parties for marketing purposes. We share your data only in the following circumstances:

4.1 Service Providers (Data Processors)

We share data with carefully selected third-party vendors who process data on our behalf under strict data processing agreements:

• Payment processors — Stripe, PayPal, SSLCommerz (bKash, Nagad, Rocket) to process your payments securely
• Domain registries & registrars — ICANN-accredited registries (Verisign, IANA, BTCL and others) to register and manage domains
• Cloud infrastructure — server colocation and network providers for hosting service delivery
• Email delivery — transactional email providers for sending service notifications
• Customer support — ticketing and live chat platform providers
• Analytics — anonymised web analytics services to understand site performance

4.2 Legal Requirements

We may disclose your information if required to do so by law, or in response to valid requests by public authorities (e.g. court orders, government agencies). We will notify you of such requests where legally permitted.

4.3 Business Transfers

If IT Cadre is involved in a merger, acquisition or asset sale, your personal data may be transferred. We will provide 30 days' notice before your data becomes subject to a different privacy policy, and you will have the right to request deletion of your data.

4.4 WHOIS Data

Domain registration contact data (registrant name, email, address, phone) is submitted to the relevant domain registry as required by ICANN policy and may be publicly accessible in WHOIS databases. We strongly recommend enabling WHOIS Privacy Protection on eligible domains to replace your personal details with anonymised registrar contact information.

Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website, remember your preferences and analyse website traffic.

Types of Cookies We Use

Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete them after each session. Note that disabling essential cookies may affect your ability to log in and use our services.

• Google Chrome: Settings → Privacy and Security → Cookies and other site data
• Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Microsoft Edge: Settings → Cookies and site permissions → Cookies and site data

We do not use cookies for cross-site tracking, selling advertising profiles, or sharing your browsing behaviour with advertising networks.

Data Security

The security of your data is a top priority at IT Cadre. We implement industry-standard technical and organisational measures to protect your information from unauthorised access, disclosure, alteration or destruction.

Technical Security Measures

• All data transmitted between your browser and our servers is encrypted using TLS 1.2 or TLS 1.3 (HTTPS)
• Passwords are stored using bcrypt hashing with salt — they are never stored in plain text
• Two-factor authentication (2FA) is available and recommended for all accounts
• Payment card data is handled exclusively by PCI-DSS Level 1 certified payment processors
• Database access is restricted to authorised personnel via VPN and IP whitelisting
• Regular automated backups with encrypted off-site storage
• DDoS protection and web application firewall (WAF) on all public-facing infrastructure
• Intrusion detection and 24/7 infrastructure monitoring

Organisational Security Measures

• Staff access to personal data is limited to the minimum necessary (principle of least privilege)
• All employees with access to customer data are bound by strict confidentiality agreements
• Regular security training and awareness programmes for all staff
• Security incident response plan with defined escalation procedures

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users by email within 72 hours of becoming aware of the breach, and will report to the relevant supervisory authority as required by law.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

When data is no longer required, it is securely deleted or anonymised using methods that prevent recovery. On account closure, we will delete your personal data within 90 days, except where retention is required by law or legitimate business necessity.

Your Rights

Depending on your location and applicable law, you have the following rights regarding your personal data. We will respond to all verified requests within 30 days.

To exercise any of these rights, submit a request to suppport@itcadre.net or through your account dashboard under Account Settings → Privacy & Data. We may need to verify your identity before processing your request.

Marketing opt-out: Every promotional email we send includes a clear one-click unsubscribe link at the bottom. You can also manage communication preferences under Account Settings → Notifications.

International Data Transfers

IT Cadre operates globally and your data may be processed in countries outside your country of residence, including countries that may have different data protection laws than your own.

Where we transfer personal data outside the European Economic Area (EEA) or other jurisdictions with data transfer restrictions, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Transfers to countries with an EU adequacy decision
• Binding Corporate Rules where applicable
• Your explicit consent where required

Domain registration data is transmitted to ICANN-accredited registries worldwide as required by the domain extension. ICANN policy mandates this transmission regardless of geography.

Children's Privacy

IT Cadre's services are intended for use by individuals aged 18 years or older. We do not knowingly collect personal information from children under 18 years of age.

If you are a parent or guardian and believe that your child under 18 has provided personal information to IT Cadre without your consent, please contact us immediately at suppport@itcadre.net. We will investigate and delete such information from our systems within 72 hours of verification.

Payment Processing

IT Cadre accepts multiple payment methods to serve our global and local customer base. All payment transactions are processed by PCI-DSS certified third-party payment processors. IT Cadre does not store, process or transmit full payment card numbers.

Accepted Payment Methods

• Visa, Mastercard and American Express (via Stripe)
• PayPal
• bKash, Nagad and Rocket (via SSLCommerz, Bangladesh)
• Google Pay and Apple Pay (where available)

What Payment Processors Receive

When you make a payment, our payment processors receive your billing name, billing address, card details (handled entirely by them) and the transaction amount. Each processor's privacy policy governs how they handle your payment data:

• Stripe: stripe.com/privacy
• PayPal: paypal.com/privacy
• SSLCommerz: sslcommerz.com/privacy-policy

What IT Cadre Stores

We store only: transaction ID, payment method type (e.g. "Visa ending 4242"), transaction date, amount, currency and invoice data. This is used for invoicing, reconciliation and audit purposes and is retained for 7 years as required by financial regulations.

WHOIS & Domain Registration Data

As an ICANN-accredited domain registrar, IT Cadre is required to collect and submit accurate registrant contact information for all domain registrations. This is an ICANN policy requirement and cannot be waived.

Data Collected for Domain Registration

• Registrant name (individual or organisation)
• Registrant email address
• Registrant phone number
• Registrant postal address
• Administrative and technical contact information

WHOIS Privacy Protection

IT Cadre offers WHOIS Privacy Protection on eligible TLDs. When enabled, your personal contact details are replaced in the public WHOIS database with our privacy service contact information. This protects you from spam, identity theft and unsolicited contact, while we retain the original registrant data for lawful disclosure if required.

Registry Data Sharing

Your domain registration data is shared with:

• The relevant domain registry (e.g. Verisign for .COM, BTCL for .BD)
• ICANN for compliance and audit purposes
• Law enforcement authorities if legally required

IT Cadre retains domain registration records for 7 years post-expiry as required by ICANN's Registrar Accreditation Agreement.

Third-Party Services

Our website and services may contain links to or integrate with third-party websites and services. This Privacy Policy applies only to IT Cadre's own services.

Third-Party Integrations We Use

• Google Fonts — for typography (loaded from Google servers; subject to Google's privacy policy)
• Font Awesome — for icons (CDN delivery)
• Cloudflare — for CDN, DDoS protection and security (subject to Cloudflare's privacy policy)
• Payment Gateways — Stripe, PayPal, SSLCommerz for payment processing
• Analytics — anonymised usage analytics (no personal identifiers shared)

We are not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party services you use in connection with IT Cadre.

Social Media

Our website may include social media sharing buttons or links to our official social media profiles. If you interact with these features, the social media platform may collect data about you subject to their own privacy policies. IT Cadre does not control or receive this data directly from social media interactions.

Changes to This Privacy Policy

IT Cadre reserves the right to update this Privacy Policy at any time to reflect changes in our practices, services, legal requirements or technology. We will always post the updated policy on this page with a revised "Last Updated" date.

How We Notify You of Changes

• Minor changes: Updated date posted at the top of this page. Continued use of services constitutes acceptance.
• Significant changes: Email notification to all registered account holders at least 30 days before changes take effect.
• Material changes affecting your rights: Prominent banner displayed on our website and mandatory re-acceptance in your account dashboard.

We maintain an archive of all previous versions of this Privacy Policy. You may request a copy of any previous version by emailing suppport@itcadre.net.

If you disagree with any changes to this policy, you have the right to close your account and request deletion of your personal data. Please contact our support team to arrange this.

Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or your personal data, please contact us through any of the following channels. We aim to respond to all privacy-related enquiries within 5 business days.

You also have the right to lodge a complaint with your local data protection supervisory authority. In Bangladesh, this is the Bangladesh Telecommunication Regulatory Commission (BTRC). In the EU/UK, contact your national data protection authority (DPA).