Privacy Policy

1. Introduction

Care-Excellence ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our caregiver marketplace platform.

We operate in accordance with Bangladesh laws and international best practices for data protection, including principles inspired by GDPR.

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

• Account Information: Name, email address, phone number, password
• Profile Information: Role (customer/caregiver/admin), preferences
• Contact Submissions: Name, email, phone, service interest, message

2.2 Caregiver Application Data

For caregiver applicants, we collect:

• Full name, address, city, country
• Phone number and email address
• National ID card (front and back)
• Selfie photograph
• Birth certificate (optional)
• Academic and citizenship certificates
• Professional certificates and CV
• Relative contact information and ID documents
• Video introduction
• Service type, experience, and availability

2.3 Automatically Collected Information

• IP address and device information
• Browser type and version
• Pages visited and time spent
• Referral source
• Activity logs and timestamps

3. How We Use Your Information

We use your information for:

• Service Provision: Processing applications, matching caregivers with customers
• Verification: Validating identity and credentials of caregivers
• Communication: Responding to inquiries, sending updates and notifications
• Security: Preventing fraud, detecting abuse, enforcing our terms
• Improvement: Analyzing usage patterns to improve our services
• Legal Compliance: Meeting regulatory requirements in Bangladesh

4. Data Storage and Security

4.1 Security Measures

We implement industry-standard security measures:

• AES-256 encryption for sensitive data (phone numbers, addresses, national IDs)
• SSL/TLS encryption for data in transit
• Secure authentication with password hashing
• Row-level security (RLS) on database access
• Regular security audits and monitoring
• Rate limiting to prevent abuse
• Account lockout after failed login attempts

4.2 Data Storage

Your data is stored on secure servers provided by Supabase (a trusted database provider) with servers located in secure data centers. All data is encrypted both at rest and in transit.

5. Data Retention

We retain your data as follows:

• Active Accounts: Data retained while account is active
• Inactive Accounts: Automatically deleted after 2 years of inactivity
• Rejected Applications: Deleted after 90 days
• Accepted Applications: Retained while caregiver remains active
• Contact Submissions: Retained for 1 year for customer service purposes
• Audit Logs: Retained for 1 year for security purposes

You may request earlier deletion of your data by contacting us (see Section 8).

6. Third-Party Services

We use the following third-party services:

• Supabase: Database and authentication services
• Resend: Email delivery service
• Vercel: Web hosting and deployment
• WhatsApp Business: Customer communication (if you contact us)

These providers have their own privacy policies and are contractually obligated to protect your data.

7. Your Rights

You have the following rights regarding your data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your data (subject to legal obligations)
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing of your data for certain purposes
• Withdraw Consent: Withdraw consent for data processing at any time

To exercise these rights, please contact us using the information in Section 10.

8. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. You can disable cookies in your browser, but this may affect site functionality.

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Contact Us

For privacy-related questions, data requests, or concerns, please contact us:

• Email: support@care-excellence.com
• Phone: +880 1XXX-XXXXXX
• Address: [Your Business Address], Bangladesh

We will respond to all requests within 30 days.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Governing Law

This Privacy Policy is governed by the laws of Bangladesh. Any disputes shall be resolved in the courts of Bangladesh.