Privacy Policy

1. Scope of this policy

This Privacy Policy explains how TurningPoint Foundation collects, uses, stores, and protects personal information through this website and related online communications. It applies to website visitors, people who contact us, applicants, prospective partners, donors, consultants, volunteers, and other stakeholders who submit information online.

Separate notices or consent forms may apply to project participants, research, events, safeguarding reports, recruitment, grants, or services that require more detailed processing.

2. Who is responsible for your information

TurningPoint Foundation is responsible for deciding why and how personal information submitted through this website is used. We are a disability-led non-governmental organisation based at 82/A Monipuripara (first floor), Tejgaon, Dhaka-1215, Bangladesh.

3. Information we may collect

Depending on how you use the website, we may collect:

• Contact information: name, email address, mobile or telephone number, organisation, role, and postal address where relevant;
• Message information: subject, enquiry, feedback, partnership request, accessibility request, or other content you send;
• Application or participation information: information included in forms, CVs, expressions of interest, event registration, training applications, or programme enquiries;
• Technical information: internet protocol address, browser type, device type, approximate location, pages visited, referral source, and security logs, where collected by our hosting or analytics services;
• Cookie preferences: whether you accepted the website’s limited cookie notice; and
• Other information: anything you voluntarily provide to us.

Please avoid sending health information, disability details, identity documents, financial information, or other sensitive information unless it is genuinely necessary and requested through an appropriate secure process.

4. How we obtain information

We obtain information directly from you when you complete a form, email or call us, register for an activity, submit an application, or communicate through our official channels. We may also receive information from an organisation that refers or nominates you, from publicly available professional sources, or from service providers that support the operation and security of our website.

5. Why we use personal information

We may use personal information to:

• respond to enquiries, accessibility requests, complaints, or safeguarding concerns;
• consider partnership, funding, employment, consultancy, volunteering, training, and programme requests;
• deliver and improve programmes, events, resources, digital platforms, and stakeholder communication;
• maintain records, evaluate impact, and meet donor, audit, governance, and reporting obligations;
• protect people, prevent fraud, maintain website security, and investigate misuse;
• comply with legal or regulatory requirements; and
• send updates or invitations where you have requested them or where otherwise permitted, with an option to unsubscribe.

6. Our basis for using information

We use personal information only where there is an appropriate and lawful reason. Depending on the situation, this may include your consent, taking steps you requested before entering an agreement, carrying out an agreement, meeting a legal obligation, protecting someone’s vital interests, performing tasks connected to our nonprofit mission, or pursuing a legitimate organisational interest that does not unfairly override your rights.

Where explicit consent is required, you may withdraw it at any time. Withdrawal does not affect processing already carried out lawfully.

7. Sensitive information and safeguarding

Our work may involve disability, health, sexual and reproductive health and rights, safeguarding, and other sensitive issues. We seek to collect only the minimum information necessary and apply additional access controls and confidentiality measures.

If a message indicates an immediate risk of serious harm, abuse, exploitation, or another safeguarding concern, we may share relevant information with designated safeguarding personnel or a competent authority when necessary and lawful. Please use [email protected] for safeguarding and reporting concerns rather than a general contact form.

8. When we share information

We do not sell personal information. We may share limited information with:

• authorised TurningPoint staff, governance members, consultants, or volunteers who need it for their role;
• trusted technology, website-hosting, email, cloud-storage, security, audit, or professional-service providers acting under appropriate instructions;
• programme partners, donors, or event organisers where this is necessary, expected, and appropriately protected;
• government, regulators, law-enforcement bodies, courts, or safeguarding authorities where required or permitted by law; or
• another organisation during a formal organisational transition, subject to appropriate safeguards.

We share only what is reasonably necessary for the relevant purpose.

9. International services and transfers

Some email, cloud, analytics, social-media, and website services may process information on servers outside Bangladesh. Where information is transferred internationally, we seek to use reputable providers and appropriate contractual, organisational, and technical safeguards consistent with applicable requirements.

10. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, safeguarding, audit, donor, contractual, dispute-resolution, or record-management requirements.

Routine website enquiries are generally reviewed for deletion or anonymisation when no longer needed. Application, programme, financial, safeguarding, and contractual records may need to be kept for longer periods under the relevant retention schedule. Information that is no longer required is securely deleted, anonymised, or archived with restricted access.

11. How we protect information

We use reasonable administrative, technical, and organisational safeguards, including role-based access, passwords, secure hosting configurations, software updates, backups, staff confidentiality, and security monitoring where appropriate. No internet transmission or storage system is completely secure, so we cannot promise absolute security.

If you believe information has been sent to the wrong person or that our website or systems may have a security weakness, contact us promptly at [email protected].

12. Your choices and rights

Subject to applicable law and any necessary exceptions, you may ask us to:

• confirm whether we hold personal information about you;
• provide access to or a copy of relevant information;
• correct inaccurate or incomplete information;
• delete information that is no longer needed or lawfully required;
• restrict or object to certain uses;
• withdraw consent;
• stop direct communications; or
• explain a decision or practice involving your information.

To protect privacy, we may need to verify your identity and authority before acting. We will respond within the period required by applicable law or, where no specific period applies, within a reasonable time.

13. Children and young people

The general website is intended for a broad audience and is not designed to knowingly collect unnecessary information from children. A child or young person should involve a parent, guardian, teacher, or other trusted adult when submitting personal information, unless a programme provides a specific child-appropriate process.

For activities involving children, adolescents, or adults at risk, TurningPoint applies safeguarding, consent, assent, accessibility, and data-minimisation measures appropriate to the activity and applicable law.

14. Cookies, local storage, and similar technology

The website uses limited cookies or browser storage to support basic functions and remember whether you accepted the cookie notice. The current consent record is stored in your browser under the key tp_cookie_consent_v1.

Our hosting provider or embedded third-party services may also set essential or security-related technologies. Pages containing external videos, maps, social-media content, or analytics may involve additional third-party processing. You can clear or block cookies and local storage through your browser settings, although some functions may work differently.

15. Third-party links and platforms

Our website links to external websites and platforms. Their privacy practices are controlled by their respective organisations. Review their privacy information before submitting personal information to them.

16. Updates to this policy

We may update this policy when our activities, technology, website features, or legal requirements change. We will publish the updated version here and revise the effective or review date. Material changes may also be communicated through an appropriate website notice or direct message where necessary.

17. Questions and complaints

Contact us first if you have a privacy question, request, or complaint. We will review the matter respectfully and seek to resolve it. You may also have the right to raise a concern with the competent data-protection, regulatory, or judicial authority in Bangladesh.