Privacy policy
How Nexus Payroll Limited collects, uses and protects personal data submitted through this website.
Effective 1 September 2026 · Last updated 15 September 2026
Who is responsible for your data?
Nexus Payroll Limited, Crystal Palace, 3rd Floor, House SE(D) 22, Road 140, Gulshan South Avenue, Gulshan-1, Dhaka 1212, Bangladesh, is the controller of personal data collected through www.payroll.bd. Questions about this policy can be sent to info@payroll.bd or by post to the address above, marked for the attention of the Data Protection Lead.
What data do we collect and why?
- Contact-form data — name, work email, company, country, headcount, service interest, message and any file you attach. Used to respond to your enquiry, prepare a quote and, if you become a client, to set up the engagement. Legal basis: steps prior to a contract and our legitimate interest in responding to business enquiries.
- Technical data — IP address, browser type and pages requested, recorded in standard web-server logs for security and to detect abuse of the contact form. Retained for 90 days.
- Correspondence — emails, WhatsApp messages and call notes exchanged with you, retained for the duration of our relationship and six years after, in line with Bangladesh record-keeping requirements for business records.
Cookies and analytics
This site sets no cookies of its own. Google reCAPTCHA on the contact page may set cookies and collects device and interaction data to distinguish humans from bots, under Google's privacy policy. If we add web analytics we will update this section and, where required, ask for consent.
Who do we share data with?
Our email hosting provider, Google (reCAPTCHA), and, for client engagements, our payroll software, insurer, banks and professional advisers, each bound by contract to process data only on our instructions. We do not sell personal data or share it with advertisers. Data may be stored in a Singapore-region cloud tenancy with encrypted backups in Dhaka.
How long do we keep it?
Enquiry data is deleted 24 months after the last contact if no engagement follows. Files uploaded through the contact form are deleted from our server immediately after they are forwarded to the account team. Client and employee records are retained for the periods required by the Bangladesh Labour Act 2006 and Income Tax Act 2023.
Your rights
You may ask us to access, correct, delete or stop using your personal data, or to provide a copy in a portable format, by emailing info@payroll.bd. We respond within 30 days. If you are in the EU, UK or another jurisdiction with a data-protection authority, you may also complain to that authority.
Security
Form submissions travel over HTTPS, are verified by reCAPTCHA and rate-limited, and are delivered to a named inbox with multi-factor authentication. Uploaded files are scanned, stored outside the web root, and deleted after forwarding.
Changes
We will post any change to this policy on this page with a new "last updated" date. Material changes affecting existing clients are notified by email.