Privacy Policy

Hinton Bit Corp (“we”, “our”, “us”) is committed to protecting the privacy and security of information shared with us through our website and services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit hbitcorp.com, submit our contact form, use one of our short links, or access our password-protected admin area.

We operate primarily in the B2G (business-to-government) sector, delivering enterprise social media intelligence platforms, ERP systems, security infrastructure, and AI integration services to government agencies. Accordingly, we apply the highest standards of data confidentiality consistent with those our clients themselves uphold.

We may collect the following categories of information:

Information You Provide:

• Contact form submissions (name, email address, organisation, message)
• Email correspondence initiated by you
• Business inquiries and project briefs

Information Collected Automatically:

• A one-way network fingerprint derived from your IP address when you submit the contact form, follow one of our short links, or attempt to sign in to the admin area
• Browser type and version
• Referring URL
• Timestamps associated with form submissions, redirects, and admin authentication activity

Information We Do Not Collect:
We do not collect payment card details, government-issued identification, precise location, or public-site browsing analytics through this website. Client project data is governed by separate data processing agreements.

We use collected information solely for the following purposes:

• Responding to inquiries: Processing contact form submissions and email correspondence to respond to your questions or project interest.
• Service delivery: Communicating about project scopes, proposals, timelines, and deliverables.
• Short-link operations: Recording limited redirect metadata so we can understand short-link usage and detect misuse.
• Legal compliance: Retaining records as required by applicable law or contractual obligations.
• Security: Detecting and preventing spam, abusive use of public endpoints, and unauthorised access to the admin area.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Our website uses a minimal set of technologies:

Public Site Cookies: The public marketing site does not use analytics cookies or advertising cookies.

Admin Session Cookie: After a successful admin login, we set a secure, HTTP-only session cookie so authenticated administrators can access internal tools. This cookie expires automatically and is cleared on logout.

Third-Party Assets: Our web fonts are self-hosted. We do not currently load Google Fonts or third-party analytics scripts on the public site.

You can disable cookies via your browser settings, but doing so may prevent the admin area from functioning correctly once signed in.

We do not share your personal information with third parties except in the following limited circumstances:

• Service providers: Trusted sub-processors who assist in operating our website or business (e.g., email hosting, cloud infrastructure) under strict confidentiality agreements and data processing agreements.
• Legal requirements: When disclosure is required by applicable law, court order, or government authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via a prominent website notice if such a transfer occurs.
• Consent: With your explicit prior consent for any other purpose.

All government client project data is handled under separate, bespoke data processing agreements and is never commingled with general contact data.

We retain personal data only for as long as necessary:

• Contact form submissions: retained for up to 3 years and then automatically deleted unless a separate client engagement requires longer retention.
• Short-link visit logs (referrer, user agent, and network fingerprint): retained for up to 24 months and then automatically deleted.
• Admin login attempt logs: retained for up to 30 days.
• Admin sessions: deleted on logout or expiry and purged no later than 30 days after creation.
• Legal and financial records: retained for the period required by Bangladeshi law and applicable tax regulations.

You may request deletion of your personal data at any time (see Section 9: Your Rights).

We implement appropriate technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• HTTPS/TLS encryption for all data in transit
• Access controls and least-privilege principles for internal systems
• Rate limiting and abuse controls on public forms and admin authentication
• Revocable server-side admin sessions
• Regular security reviews of our infrastructure
• Vendor security assessments before engaging sub-processors

However, no method of transmission over the Internet or method of electronic storage is 100% secure. We strive to use commercially acceptable means to protect your information, but cannot guarantee absolute security.

Hinton Bit Corp is incorporated and operates in Bangladesh. If you access our website from outside Bangladesh, your information may be transferred to and processed in Bangladesh. By using our website, you consent to this transfer.

We take appropriate steps to ensure that international data transfers comply with applicable privacy laws and that your information receives an adequate level of protection.

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data (“right to be forgotten”).
• Right to restriction: Request that we limit processing of your data.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.

To exercise any of these rights, contact us at: privacy@hbitcorp.com

We will respond within 30 days. We may ask for proof of identity before processing your request.

Our website and services are directed exclusively at businesses and government entities. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us immediately and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised “Last Updated” date. We encourage you to review this page periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Hinton Bit Corp
Sector-7, H-06 R-11 S-07
Uttara, Dhaka, Bangladesh

Email: legal@hbitcorp.com
General inquiries: info@hbitcorp.com