Privacy Policy

Global 360 Ventures Group, of House 42, Road 4, Block D, Bashundhara R/A, Dhaka 1229, Bangladesh, is the data controller for the personal data described in this policy. In the language of the Personal Data Protection Act, 2026, we are the data fiduciary: we decide why your data is processed and how.

This policy covers the personal data we handle through this website — the enquiry, application and contact forms, the AI chat assistant, and the technical records our servers keep. It also covers the correspondence that follows when you contact us.

It does not cover the products our portfolio ventures are building. Each of those will publish its own privacy notice before it starts processing user data, because each handles different data for different purposes.

Our primary obligations are under Bangladeshi law:

• Personal Data Protection Act, 2026 (Law 63 of 2026) — passed by Parliament in April 2026, replacing the Personal Data Protection Ordinance, 2025. It sets the lawful grounds for processing, the rights of data subjects, and the duties of data fiduciaries, and is overseen by the National Data Management Authority.
• Information and Communication Technology Act, 2006 and the Cyber Security Ordinance, 2025 — which govern electronic records, unauthorised access and the handling of security incidents.
• Article 43 of the Constitution — which protects the privacy of correspondence and other means of communication.

If you are in the United Kingdom or the European Economic Area, the section on the UK and the EEA sets out the additional rights you have under the UK GDPR and the Data Protection Act 2018.

Information you give us

We collect what you type into a form or send us in a message. The fields differ by form:

Information we collect automatically

• Server and security logs: your IP address, the date and time of the request, the page or resource requested, the referring page, and your browser and operating system identifiers.
• Approximate location derived from your IP address, at country or city level. We do not collect precise device location.
• Aggregate delivery and performance data from our hosting provider — response times, error rates and traffic volumes — which is about the site rather than about you.

The chat assistant

When you use the AI assistant, we process the text of the messages you send and the replies generated for you. The section on the AI assistant and the provider behind it explains how that works and who else is involved.

Cookies

This site is deliberately light on cookies, and currently sets no analytics, advertising or tracking cookies at all. Our Cookie Policy sets out the full position and how to control it.

This website is aimed at businesses, investors, partners and job seekers. It is not directed at children, and we do not knowingly collect personal data from anyone under 18.

Under the Personal Data Protection Act, 2026, processing the personal data of a person under 18 requires verifiable consent from a parent or legal guardian. If we learn that we hold a child’s data without that consent, we delete it. If you believe a child has sent us personal data, tell us and we will act on it.

We process personal data only where the Act gives us a ground to do so. The grounds we rely on are your consent, the necessity of the processing to take steps at your request before entering a contract or to perform one, compliance with a legal obligation, and — where the Act permits it — our legitimate interests in running and securing our business.

We do not sell personal data. We do not use it for automated decision-making that produces a legal or similarly significant effect on you, and we do not profile you for advertising.

Where we rely on your consent, that consent must be — and we treat it as — a clear, specific, informed and freely given indication of agreement. Silence, a pre-ticked box or inaction is not consent.

You can withdraw consent at any time by writing to info@global360ventures.com. Withdrawal is as easy as giving consent was, it takes effect for the future, and it does not make our earlier processing unlawful. If we hold your data on another ground as well — a statutory retention duty, for example — we will tell you which parts we must keep and why.

The assistant on this site is powered by a large language model operated by OpenAI. When you send a message, the text of that message, together with the site’s standing instructions about our company, is transmitted to OpenAI’s servers outside Bangladesh so that a reply can be generated and returned to you.

• OpenAI acts as our processor for this purpose and is bound by its contractual commitments to us.
• We do not send your name, email address or any form submission to the assistant. Only what you type into the chat is sent.
• Because the message text leaves Bangladesh, the section on sending data outside Bangladesh applies to it.
• Please do not enter sensitive personal data, credentials or confidential business information into the chat. The section on what we collect explains what to keep out of it.

If you would rather not use a third-party AI service, do not use the assistant — every piece of information it can give you is also on the site, and our team will answer by email.

We do not sell, rent or trade personal data. We share it only in the following circumstances:

Every processor we use is engaged under a written contract that limits them to our instructions, requires appropriate security, and obliges them to return or delete the data when the engagement ends.

Our hosting, email and AI providers operate outside Bangladesh, so some of the data described above is stored or processed abroad — principally in the United States and the United Kingdom.

The Personal Data Protection Act, 2026 restricts cross-border transfers. It requires safeguards to be in place and disclosed, requires the Authority to be notified of large-scale transfers of sensitive personal data, and places strict limits on transferring national identification numbers, biometric identifiers and criminal records abroad. We work within those limits:

• We do not transfer National ID numbers, passport numbers, biometric data or criminal record data out of Bangladesh, and we ask you not to send them to us in the first place.
• Transfers are limited to what a named processor needs for a stated purpose, under a written contract containing data protection terms.
• We keep a record of the transfers we make, the safeguards relied on, and the country each recipient operates from, so that we can make the disclosure or notification the Act requires.
• Where a transfer would require the Authority’s notification or approval, we obtain it before the transfer is made.

You can ask us for details of the safeguards applying to any particular transfer by writing to info@global360ventures.com.

We keep personal data only as long as the purpose it was collected for requires, or as long as the law obliges us to — whichever is longer. Our working periods are:

When a period ends we delete the data or irreversibly anonymise it. Anonymised data is no longer personal data and may be kept for statistics.

We take technical and organisational measures appropriate to the risk, including:

• encryption of all traffic to and from this site over HTTPS/TLS;
• access to personal data restricted to staff who need it for their role, on individual accounts with multi-factor authentication;
• credentials and API keys held in a managed secret store, never in our source code;
• a hosting platform with infrastructure-level isolation, patching and monitoring;
• contractual security obligations on every processor we engage;
• internal review of what we collect, so that fields nobody uses are removed rather than retained.

No system is perfectly secure, and we cannot guarantee the security of data while it is in transit across the public internet. If a breach occurs that is likely to cause significant damage to affected individuals, we will notify the National Data Management Authority within the time the Act prescribes, and will tell affected individuals without undue delay where the risk to them warrants it.

Under the Personal Data Protection Act, 2026 you may:

• Ask what we hold and get a copy — including in a portable, machine-readable format where the data was provided by you.
• Have it corrected — if it is inaccurate, out of date or incomplete.
• Have it erased — where it is no longer needed for the purpose it was collected for, where you withdraw the consent it rested on, or in the other circumstances the Act allows.
• Withdraw consent — through a procedure no harder than the one by which you gave it.
• Object, and ask us to stop — to processing that relies on our legitimate interests, and at any time to marketing.
• Complain — to us, and to the National Data Management Authority.

How to exercise them

Email info@global360ventures.com with “Data request” in the subject line and tell us what you want. We will acknowledge within 7 working days and respond substantively within 30 days. If a request is genuinely complex we may need longer, and will tell you why before the 30 days are up.

We may need to verify your identity before acting, so that we do not disclose one person’s data to another. We will ask for the least information that allows us to do that. Exercising these rights is free; we will only charge where a request is manifestly excessive or repetitive, and we will tell you before we do.

We keep a representative office at 102 Cobham Road, London E15 1LZ, United Kingdom. Where the UK GDPR and the Data Protection Act 2018 apply to our processing of your data, you additionally have the rights to restrict processing, to object to processing based on legitimate interests, and to data portability in the terms those laws set out.

Where we transfer data from the UK to a country without UK adequacy, we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment.

You may complain to the Information Commissioner’s Office (ico.org.uk). We would ask you to raise it with us first so that we have the chance to put it right.

1. 1Come to us. Email info@global360ventures.com with the detail of your complaint. We will acknowledge within 7 working days and aim to resolve it within 30 days.
2. 2Escalate to the regulator. If you are not satisfied, you may complain to the National Data Management Authority under the Personal Data Protection Act, 2026, as its complaint procedures come into operation.
3. 3Consumer and court routes. Nothing above affects your right to complain to the Directorate of National Consumer Rights Protection where the matter is a consumer one, or to seek a remedy from the courts.

We review this policy at least annually, and whenever we change how we handle personal data or the law changes. The current version is always the one on this page, dated at the top.

Where a change materially affects your rights or introduces a new purpose, we will give notice on the site and, where we hold your contact details and the law requires it, ask for fresh consent rather than relying on the updated date.

Global 360 Ventures Group, House 42, Road 4, Block D, Bashundhara R/A, Dhaka 1229, Bangladesh. Email info@global360ventures.com or call +8801304064242.

As our data protection responsibilities formalise under the Act, we will name a dedicated contact here. Until then, requests sent to the address above reach the person responsible for them.