1. Who We Are
CoreVative provides website design and development, search
optimisation, digital marketing, analytics, and related digital
services to businesses.
For the purposes of this policy, references to ‘CoreVative’, ‘we’,
‘us’, or ‘our’ mean the business operating the CoreVative website
and providing the relevant services.
Our website is available at
https://corevative.com.
General enquiries can be sent to
hello@corevative.com.
Legal business name: CoreVative.
Business address: Dhaka, Bangladesh.
Country of establishment: Bangladesh.
These business details must be completed before publication. We
will identify the relevant data controller or other responsible
entity in accordance with the laws applicable to the relevant
processing.
2. Scope of This Policy
This policy applies to personal information processed in
connection with our website, contact forms, prospective client
enquiries, business communications, proposals, client
relationships, and related administrative activities.
It does not automatically govern the independent privacy practices
of third-party websites, advertising platforms, payment
processors, hosting providers, or other services linked from our
website.
Where CoreVative processes personal data on behalf of a client as
part of a contracted service, the respective roles and
responsibilities must be determined by the service agreement and
applicable data-protection law. A separate data-processing
agreement may be required.
3. Information We May Collect
3.1 Information You Provide
We may collect information you choose to provide when you:
- Submit a project enquiry.
- Request a website review.
- Ask for a proposal or quotation.
- Contact us by email.
- Book a consultation, if a booking facility is available.
- Become a client.
- Provide feedback or communicate with our team.
-
Submit information necessary to deliver an agreed service.
Depending on the interaction, this may include your name, business
name, business email address, telephone number, website URL,
country, business location, service requirements, budget range,
project details, correspondence, billing information, and other
information reasonably necessary to respond to your request or
perform a contract.
Please do not submit passwords, payment card details, sensitive
personal information, or confidential customer records through an
ordinary website enquiry form.
3.2 Technical and Usage Information
Depending on our hosting configuration, security measures,
analytics setup, and your browser settings, we may process
technical information such as:
- IP address.
- Browser and device type.
- Operating system.
- Referring page.
- Pages visited.
- Approximate usage timestamps.
- Error and security logs.
- Cookie or similar technology identifiers, where used.
We will configure the website and any analytics tools to collect
only the information necessary for their stated purposes.
3.3 Information from Other Sources
We may receive limited business-related information from publicly
available business directories, business websites, professional
networks, or other lawful sources when researching potential
business relationships.
Where required by applicable law, we will provide relevant privacy
information about this processing and respect applicable objection
and marketing rules.
We do not claim to collect information from any particular
external source unless that source is actually used.
4. How We Use Information
We may use personal information for the following purposes, where
applicable:
-
To respond to enquiries and communicate with prospective
clients.
- To understand project requirements and prepare proposals.
- To negotiate, enter into, and perform service contracts.
-
To provide website development, maintenance, marketing,
analytics, and other agreed services.
-
To manage billing, payments, invoices, and financial records.
-
To maintain website security, prevent fraud, and investigate
misuse.
-
To troubleshoot technical problems and maintain our website.
-
To evaluate website performance and improve the visitor
experience.
-
To comply with legal, accounting, tax, and regulatory
obligations.
- To establish, exercise, or defend legal claims.
-
To send relevant business communications where permitted by
applicable law.
-
To protect our legitimate business interests without overriding
applicable individual rights.
5. Legal Grounds for Processing
Where applicable data-protection law requires a legal basis for
processing, we will rely on the basis appropriate to the specific
activity.
These may include:
-
Contract or pre-contractual steps: Processing
necessary to respond to a service request, prepare a proposal,
or perform a contract.
-
Legitimate interests: Processing reasonably
necessary for business administration, service improvement,
security, and appropriate business-to-business communications,
where those interests are not overridden by individual rights.
-
Consent: Processing where valid consent is
required or used, such as certain non-essential cookies or
marketing activities.
-
Legal obligations: Processing required to
comply with applicable laws.
-
Other lawful grounds: Where recognised by the
applicable jurisdiction and relevant to the particular activity.
The applicable legal basis depends on the purpose, information
involved, and jurisdiction. We will not treat consent as the legal
basis for every processing activity by default.
6. Email and Marketing Communications
We may communicate with you about an enquiry, proposal, existing
project, payment, service delivery, or other relevant business
matter.
Marketing communications will only be sent where permitted by
applicable law. Where consent is required, we will obtain it
before sending marketing communications.
You may opt out of marketing emails by using the unsubscribe
method provided or contacting
hello@corevative.com.
Opting out of marketing communications will not prevent us from
sending necessary service, contractual, security, or legal
notices.
We will not represent an existing client relationship as
permission to send every type of marketing communication.
7. Cookies and Similar Technologies
Our website may use cookies or similar technologies that support
essential website functionality, security, preference management,
or measurement.
The exact technologies depend on the tools actually installed on
the website.
Strictly necessary technologies may be used where permitted by
law. Non-essential analytics, advertising, or tracking
technologies will be controlled by an appropriate consent
mechanism where required.
Where consent is required, visitors will be given a meaningful
choice before non-essential technologies are activated. Refusing
optional cookies should not prevent access to ordinary website
content unless a specific feature genuinely requires the relevant
technology.
You may also manage cookies through your browser settings. Browser
controls alone may not replace consent requirements that apply to
website operators.
If the website uses analytics, advertising pixels, embedded media,
or similar tools, the final published policy must identify the
actual tools and explain their purposes.
Do not claim that a cookie banner, consent-management platform, or
cookie audit exists unless it has been implemented.
8. Who We Share Information With
We may share personal information with the following categories of
recipients where necessary and lawful:
- Website hosting and infrastructure providers.
- Business email and communication providers.
-
Form processing and customer relationship management providers.
- Payment processors and invoicing services.
- Analytics and website performance providers.
-
Advertising platforms, where advertising services are used.
- Website development, security, and maintenance providers.
-
Professional advisers, including accountants and legal advisers.
-
Government authorities, regulators, courts, or law enforcement
agencies where legally required.
-
Other parties where necessary to establish, exercise, or defend
legal claims.
-
A successor or purchaser in connection with a legitimate
business restructuring or transfer, subject to applicable law.
We aim to limit disclosure to information reasonably necessary for
the relevant purpose.
We do not sell personal information to third parties in exchange
for payment as a business model.
The actual recipients depend on the services and systems we use.
We will update this policy when material changes require
additional information.
9. International Data Transfers
CoreVative serves businesses in multiple countries. Depending on
the service providers and technical systems involved, personal
information may be processed or stored in countries other than the
country in which it was collected.
Where applicable law imposes requirements on international
transfers, we will use an appropriate lawful transfer mechanism or
safeguard, such as an adequacy decision, approved contractual
clauses, or another legally recognised mechanism where applicable.
We will provide additional information about relevant destinations
and safeguards where required by law.
We will not claim that information is stored exclusively in a
particular country unless this has been verified.
10. Data Retention
We retain personal information only for as long as reasonably
necessary for the purposes for which it was collected, subject to
applicable legal, accounting, contractual, security, and
dispute-resolution requirements.
Retention periods depend on the type of information and the reason
for processing.
As a general retention framework:
-
Enquiry records: Retained for the period
reasonably necessary to respond, follow up, and manage the
potential business relationship.
-
Client and project records: Retained for the
duration of the relationship and an appropriate period
afterwards for administration, support, and dispute management.
-
Invoices and financial records: Retained for
the period required by applicable accounting and tax laws.
-
Security logs: Retained for a proportionate
period appropriate to security monitoring and investigation.
-
Marketing preferences and suppression records:
Retained as necessary to respect opt-outs and demonstrate
compliance.
-
Consent records: Retained as necessary to
document valid consent and compliance.
These categories do not establish a fixed retention period for
every record. We will determine and document appropriate periods
based on the applicable legal requirements and operational needs.
When information is no longer required, we will delete it,
anonymise it, or securely restrict it as appropriate, unless
retention is legally required.
11. Information Security
We take reasonable technical and organisational measures designed
to protect personal information against unauthorised access,
disclosure, alteration, loss, or misuse.
Measures may include access controls, secure communications,
software updates, backups, appropriate provider selection, and
restricted access to business records.
No website, transmission method, or storage system can be
guaranteed completely secure. We cannot promise absolute security.
If a personal-data breach occurs, we will assess our legal
obligations and take appropriate steps, including required
notifications where applicable.
12. Your Privacy Rights
Depending on the law applicable to the processing and your
circumstances, you may have rights including:
- Requesting access to personal information.
- Requesting correction of inaccurate information.
-
Requesting deletion of information where legally applicable.
- Requesting restriction of processing.
- Objecting to certain processing.
- Requesting data portability where applicable.
- Withdrawing consent where processing relies on consent.
- Objecting to direct marketing.
-
Lodging a complaint with the relevant supervisory authority.
These rights are not absolute in every situation. We may need to
verify your identity before acting on a request and may retain
information where the law permits or requires it.
To make a privacy request, contact
hello@corevative.com
with the subject line “Privacy Request”.
We aim to respond within the period required by applicable law.
Where a lawful extension or refusal applies, we will explain this
as required.
13. Children's Privacy
Our website and services are directed towards businesses and
professional contacts rather than children.
We do not knowingly seek to collect children's personal
information through ordinary business enquiry forms. If you
believe a child has provided personal information to us
unnecessarily, please contact us so we can assess the appropriate
action.
14. Third-Party Websites and Services
Our website may contain links to external websites, embedded
services, or third-party platforms.
Those services operate under their own terms and privacy policies.
We are not responsible for their independent privacy practices.
Where we embed or activate a third-party service on our website,
we will assess whether additional disclosure or consent is
required.
15. Changes to This Policy
We may update this Privacy Policy to reflect changes in our
business, technology, services, or legal obligations.
The latest version will be published on this page with an updated
date.
Where required by law, we will provide additional notice or seek
consent before making changes that require it.
16. Contact and Complaints
For privacy-related questions or requests, contact:
CoreVative
Email:
hello@corevative.com
Legal business name: CoreVative
Business address: Dhaka, Bangladesh
If you believe that your personal information has been handled
unlawfully, you may also have the right to complain to the
relevant data-protection supervisory authority in your
jurisdiction.
The applicable authority depends on the processing and your
circumstances.
