Privacy Policy

Welcome to Citrobaksho Advertising Agency (“Citrobaksho,” “we,” “our,” or “us”). We respect your privacy and are committed to protecting the personal data that we collect, process, and store in connection with our websites, services, and marketing activities.

This Privacy Policy explains what information we collect, how we use it, the rights you have over your data, and how to contact us. Please read it carefully. If you do not agree with this policy, please discontinue use of our services.

1. Who We Are

Company Name: Citrobaksho Advertising Agency
Website: https://citrobaksho.com/
Email (General Contact): contact@citrobakshoadvertising.agency
Registered/Business Address: House Number-1/1E, Block-C ,Road-01, Lalmatia, Dhaka., Bangladesh

We provide creative, digital marketing, and advertising services. We also operate marketing email campaigns using our own systems (including WordPress, FluentCRM, Amazon SES, and related marketing tools).

2. Scope of This Policy

This Privacy Policy applies to:

Visitors to our website citrobaksho.com and any subdomains.
Clients who engage our advertising, design, or marketing services.
Email subscribers to newsletters, promotions, or campaign updates sent from citrobakshoadvertising.agency domains.
Individuals who interact with our forms, chat tools, lead capture systems, or social media integrations.

It does not apply to third-party websites we link to. Those sites have their own privacy policies.

3. Personal Data We Collect

We collect data in several ways. The specific data collected depends on how you interact with us.

3.1 Data You Provide Directly

Contact details: Name, email address, phone number, company, job title.
Project information: Briefs, brand assets, design files, campaign requirements.
Billing information: Invoices, billing contacts, and (if applicable) transaction references. We do not directly store full payment card data; payments are handled by third-party processors.
Support communications: Emails, chat messages, and support tickets.
Form submissions: Newsletter sign-ups, quote requests, lead magnet downloads, webinar registrations.

3.2 Data Collected Automatically

When you visit our website(s), we and our service providers may automatically collect:

IP address
Device type, operating system, browser type
Referring/exit pages
Pages viewed, time on page, clicks, scroll depth
Approximate geolocation (city/region level) inferred from IP
Campaign tracking parameters (UTM codes)

3.3 Marketing & Engagement Data

Email opens (pixel tracking)
Link clicks within email campaigns
Bounce/complaint status from email delivery systems
Subscription preferences (opt-in/opt-out history)

3.4 Data from Third Parties

We may receive personal data from:

Advertising platforms (e.g., Meta Ads, Google Ads) when you engage with our ads
Lead generation partners (only where consent has been collected)
Referral partners or agencies collaborating on projects with your approval

4. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or similar jurisdictions, we process your personal data under one or more of the following legal bases:

Purpose	Legal Basis
Responding to inquiries	Legitimate interest / Pre-contractual steps
Providing contracted services	Contract performance
Email marketing (newsletters, promotions)	Consent (opt-in) or Legitimate interest where appropriate
Analytics & website security	Legitimate interest
Legal compliance (tax, invoicing)	Legal obligation

5. How We Use Your Data

We use personal data to:

Provide and manage our services and client projects
Respond to contact requests, proposals, and support inquiries
Send marketing and promotional communications (where permitted)
Send transactional or service-related emails (e.g., project updates, account notices)
Improve website functionality, UX, and campaign performance
Segment audiences for more relevant messaging
Maintain security, prevent fraud, and comply with legal obligations

6. Email Marketing Practices

We operate email lists using FluentCRM (WordPress-based CRM) and send via Amazon Simple Email Service (SES).

We follow industry best practices:

Double opt-in optional (recommended for some lists)
Unsubscribe link included in every marketing email
Automatic suppression of unsubscribed, bounced, and complained addresses
Bounce and complaint handling via SES feedback loops

From Address: contact@citrobakshoadvertising.agency (or list-specific aliases).

7. Cookies & Tracking Technologies

We and our analytics providers may use cookies, pixels, or similar technologies to:

Remember user preferences
Measure traffic and engagement
Track campaign attribution
Support remarketing/retargeting (if enabled)

You can control cookies in your browser settings. Some features may not work correctly if cookies are disabled.

If required by law (e.g., EU/UK), we present a cookie consent banner where you may accept, reject, or customize cookies.

8. Analytics & Advertising Tools We May Use

Depending on your region and consent settings, we may integrate:

Google Analytics / GA4
Meta (Facebook) Pixel
Google Ads conversion tracking
LinkedIn Insights Tag
Hotjar or similar behavioral analytics

These tools may place cookies or track pseudonymous identifiers. Data is aggregated and used to improve marketing performance.

9. Data Sharing & Disclosure

We do not sell personal data.

We may share limited data with:

Cloud hosting providers (to host our website / CRM)
Email infrastructure: Amazon SES (for email delivery)
CRM & automation tools: FluentCRM, SMTP connectors
Analytics & ad platforms: As described above
Payment processors: When invoicing or accepting payments (details depend on provider)
Professional service providers: Accountants, legal advisors (if data required)
Regulators / law enforcement: Where legally required

All vendors are required to process data in line with contractual and, where applicable, GDPR-compliant terms.

10. International Data Transfers

Our operations and service providers may process data in multiple countries, including the United States and the European Union. When transferring personal data internationally, we use appropriate safeguards such as Standard Contractual Clauses (SCCs), Data Processing Agreements (DPAs), or equivalent mechanisms where required by law.

11. Data Retention

We retain personal data only as long as necessary for:

Providing services
Honoring legal, tax, and regulatory obligations
Resolving disputes
Enforcing agreements

Marketing email data (open/click logs, subscription status) is typically retained while you remain subscribed and for a reasonable period afterward to maintain suppression lists and compliance.

You may request deletion at any time (see Your Rights below), subject to legal limitations.

12. Your Privacy Rights

Depending on your location, you may have the following rights:

12.1 General Rights (Global)

Access your data
Update or correct inaccurate data
Unsubscribe from marketing emails (link in every email)
Request deletion of your data (subject to legal retention)

12.2 GDPR / UK Data Protection Rights

If you are in the EEA/UK, you may also:

Object to processing based on legitimate interests
Restrict processing
Data portability (request a copy in machine-readable format)
Lodge a complaint with your local data protection authority

12.3 California (CCPA/CPRA)

California residents may request disclosure of data categories collected, request deletion, and opt out of certain data sharing. We do not sell personal information.

To exercise rights: Email contact@citrobakshoadvertising.agency (or use our contact form).

Please include sufficient information to verify your identity.

13. Children’s Privacy

Our services are not directed to children under 13 (or the age defined by applicable law in your region). We do not knowingly collect personal information from children. If we learn that we have collected such data, we will delete it promptly. Please contact us if you believe a child has provided personal data to us.

14. Data Security

We take appropriate technical and organizational measures to protect personal data, including:

Encrypted transport (HTTPS/TLS)
Access controls and authentication
Regular software updates and patching
Segmented roles and least-privilege access in internal systems
Vendor reviews for data protection compliance

No system is 100% secure, but we work continuously to reduce risk.

15. Third-Party Links

Our website may contain links to external websites or platforms (e.g., social media, partners, resources). We are not responsible for their privacy practices. Please review their privacy policies before submitting data.

16. Changes to This Privacy Policy

We may update this policy from time to time. When we make material changes, we will:

Update the “Last Updated” date at the top of this page
Notify users via website notice, email, or both (where required)

Continued use of our services after changes means you accept the updated policy.

17. Contact Us

Questions, requests, or concerns?

Citrobaksho Advertising Agency
Website: https://citrobaksho.com/
Email (General): contact@citrobakshoadvertising.agency