Privacy Policy

• “Personal data” means any information relating to an identified or identifiable individual, such as name, contact details, or photographs.
• “Processing” means any operation performed on personal data, including collection, storage, display, and deletion.
• “Member” means a registered and approved user of the portal.

When you register and use the portal, we collect:

• Account details, your name, email address, and password (stored securely via Firebase Authentication; we never see your password).
• Profile information, batch / passing year, department, district, country (if living abroad), profession, company, blood group, date of birth, and profile photo.
• Contact numbers, your private phone number and, only if you choose to share it, a public WhatsApp number.
• Community content, photos you appear in within the gallery / memory wall, job circulars you post, and event participation.

We process your personal data on the basis of your consent, given when you register and accept our Terms of Service and this Policy, and for the legitimate purpose of operating a verified alumni community, including membership verification, community safety, and communication. You may withdraw your consent at any time by requesting account deletion (see Section 8); content you voluntarily made public may remain in community archives.

• To verify that you are a genuine BCBHS alumnus and approve your membership.
• To display your public profile in the member directory, blood donor list, and committee pages.
• To generate your official Alumni ID card with a verification QR code.
• To send membership updates, event invitations, and urgent community notices (e.g. blood requests).
• To keep the portal secure and prevent misuse or fake registrations.

We never sell your personal information to anyone, and we never use it for advertising.

Your phone number is always private, it is stored separately from your public profile and is visible only to you and authorized administrators. Your WhatsApp number appears publicly only if you explicitly choose to share it in your profile settings. Your email address is never shown publicly without your consent.

• Basic directory information (name, batch, profession, district, photo) is visible to fellow members and, in limited preview form, to website visitors.
• Detailed contact options (WhatsApp chat, email) are available to signed-in members only.
• Administrators may view member details solely for verification and community management.

Your data is stored securely with Google Firebase (Firestore database, Asia-South region) and protected by strict access rules, private phone numbers are technically blocked from ever appearing in public profile records. Profile photos are compressed in your browser before upload, and access to member data is limited to authorized administrators on a need-to-know basis.

We retain your data for as long as your membership remains active. If you request deletion, we will erase your personal data within 30 days, except for minimal records we are legally obliged to preserve (for example, under the ICT Act, 2006 or a lawful order of a competent authority). While we take reasonable steps to protect your information, no online system is completely immune to risk.

• Access, view all data we hold about you from your Profile page.
• Correction, edit your profile at any time to keep it accurate and up to date.
• Withdrawal, remove your public WhatsApp number or donor listing whenever you wish.
• Deletion, request a copy of your data or ask us to delete your account and data (see Section 13).

The portal uses Firebase Authentication session cookies/tokens to keep you signed in, and your browser's local storage may hold non-sensitive preferences. We do not use third-party advertising or tracking cookies.

This portal is a community for school alumni and is not directed at children under 13. If you believe a child's data has been provided to us, contact us and we will remove it promptly.

We handle your data in line with the laws of Bangladesh, including the Information and Communication Technology Act, 2006 and the Cyber Security Act, 2023. Where the law requires us to preserve or disclose information, for example, in response to a lawful order from a competent court or authority in Bangladesh, we will comply as required. Misuse of personal data through the portal may be reported to the relevant authorities under these laws.

We may update this policy as the portal grows. Significant changes will be announced on the portal, and the effective date above will always reflect the latest version. Continued use of the portal after changes take effect constitutes acceptance of the updated policy.

For any privacy question, data request, or complaint, contact us at bcbhs.alumni2023@gmail.com or via the Contact page. We aim to respond to all privacy-related requests within 30 days.