Privacy Policy

1. Information We Collect

1.1 Personal Information

We collect the following personal information when you register for our Services:

• Account Information: Full name, company name (for business accounts), phone number, email address, billing address
• Vehicle Information: Vehicle registration number, make, model, year, chassis number, engine number
• Identification Information: National ID number, Trade License (for corporate clients), TIN (Tax Identification Number)
• Payment Information: Payment method details (bKash, Nagad, Rocket, bank account information), billing history
• Login Credentials: Username, password (encrypted), security questions

1.2 Vehicle Tracking Data

Our GPS tracking devices automatically collect:

• Real-Time Location Data: GPS coordinates, latitude, longitude, altitude
• Movement Data: Speed, direction, distance traveled, route history
• Vehicle Status: Ignition on/off status, engine status, fuel level (if fuel monitoring device installed)
• Geo-Fence Data: Entry/exit from designated areas
• Alert Data: Over-speed alerts, SOS alerts, unauthorized movement alerts
• Driver Behavior Data: Harsh braking, rapid acceleration, idle time (if applicable)

1.3 Device and Usage Information

• Device Information: Device model, IMEI number, SIM card number, operating system
• App Usage Data: Features used, session duration, click patterns
• Web Portal Usage: IP address, browser type, pages visited, time stamps
• Communication Data: Customer support interactions, phone call recordings (for quality and training purposes)

1.4 Information from Third Parties

• Google Maps Platform: Map data, traffic information, route optimization data
• Mobile Network Operators: GPRS/cellular network data for device connectivity
• Payment Gateways: Transaction verification and payment confirmation

1.5 Sensitive Information

We do NOT collect or process:

• Health or medical information
• Biometric data
• Religious or political beliefs
• Sexual orientation
• Criminal records (unless required by law enforcement)

2. How We Collect Information

2.1 Direct Collection

• During account registration on our website or mobile app
• When you purchase our GPS tracking devices
• Through device installation and activation
• When you contact customer support
• When you submit forms or participate in surveys

2.2 Automatic Collection

• GPS tracking devices installed in your vehicle continuously transmit location and vehicle data
• Cookies and similar technologies on our website and mobile app
• Server logs and analytics tools

2.3 From Third Parties

• Google Maps API for location and mapping services
• Payment processors for transaction verification
• Mobile network operators for GPRS connectivity

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Provision

• Provide real-time GPS vehicle tracking services
• Display vehicle location on maps and mobile applications
• Generate reports (trip reports, distance reports, fuel consumption reports)
• Send alerts and notifications (over-speed, geo-fence breach, SOS, engine status)
• Enable vehicle immobilization features (emergency engine cut-off via SMS/GPRS)
• Facilitate stolen vehicle recovery in coordination with law enforcement

3.2 Account Management

• Create and maintain user accounts
• Process subscription payments and renewals
• Provide customer support and respond to inquiries
• Send service updates, maintenance notifications, and renewal reminders

3.3 Service Improvement

• Analyze usage patterns to improve our Services
• Develop new features and functionality
• Conduct research and analytics on traffic patterns and fleet optimization
• Test and troubleshoot technical issues

3.4 Legal and Safety

• Comply with legal obligations and regulatory requirements (BTRC, ICT Act)
• Respond to law enforcement requests and court orders
• Investigate and prevent fraud, abuse, or security incidents
• Enforce our Terms and Conditions

3.5 Marketing (With Your Consent)

• Send promotional offers, product updates, and newsletters
• Inform you about new services and special discounts
• Conduct market research and customer satisfaction surveys

Note: You can opt out of marketing communications at any time by clicking “unsubscribe” in our emails or contacting us at info@itracker.com.bd.

4. Legal Basis for Processing (For GDPR Compliance)

For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with similar laws:

• Contract Performance: Processing is necessary to provide our Services under our Terms and Conditions
• Consent: You have given explicit consent for specific processing activities (e.g., marketing)
• Legitimate Interests: Processing is necessary for our legitimate business interests (service improvement, fraud prevention)
• Legal Obligation: Processing is required to comply with laws and regulations

5. Information Sharing and Disclosure

5.1 We Share Information With:

Service Providers and Partners:

• Cloud hosting providers for data storage
• Google Maps Platform for mapping services
• Payment processors (Online Payment Gateway, bKash, Nagad, Rocket, banks)
• SMS gateway providers for alerts and notifications
• Customer support tools and analytics platforms

Business Transfers:

• In the event of a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred to the acquiring entity

Law Enforcement and Legal Compliance:

• Police and law enforcement agencies (in cases of vehicle theft with proper crime reference number)
• Courts, regulatory authorities, or government agencies when legally required
• BTRC (Bangladesh Telecommunication Regulatory Commission) for licensing compliance

Corporate Clients (For Fleet Management):

• If you are a driver or employee of a corporate client, your vehicle usage data may be shared with your employer

5.2 We Do NOT:

• Sell your personal information to third parties for marketing purposes
• Share your location data with advertisers
• Disclose sensitive tracking information without authorization

5.3 Data Sharing Safeguards

All third-party service providers are bound by confidentiality agreements and are required to:

• Use your information only for specified purposes
• Implement appropriate security measures
• Comply with applicable data protection laws

6. GPS Location Data and Vehicle Tracking

6.1 Real-Time Tracking

Our GPS devices continuously collect and transmit your vehicle’s location. This data is:

• Transmitted via GPRS/cellular networks to our secure servers
• Displayed on your web portal and mobile app in real-time
• Stored for historical playback and reporting

6.2 Historical Location Data

We retain the last 6 months of location history for:

• Route playback and trip analysis
• Mileage reports and distance calculations
• Compliance and audit purposes

6.3 Location Data Accuracy

GPS location accuracy may be affected by:

• Weather conditions, tall buildings, tunnels, or underpasses
• Poor cellular network coverage in remote areas
• Device malfunction or tampering

We do not guarantee 100% accuracy of location data and are not liable for tracking failures due to technical limitations.

6.4 Authorized Access

Only the following parties can access your vehicle’s location data:

• The registered account owner (subscriber)
• Authorized users designated by the account owner
• iTracker technical support staff (for troubleshooting only)
• Law enforcement (with proper legal authorization)

7. Data Retention

7.1 Active Accounts

• Location and Tracking Data: Last 6 months (older data is automatically deleted)
• Account Information: Retained for the duration of your subscription plus 12 months
• Payment Records: Retained for 7 years for tax and accounting compliance
• Support Communications: Retained for 2 years

7.2 Terminated Accounts

When your subscription ends:

• Real-time tracking immediately stops
• Historical data is retained for 30 days (for reactivation purposes)
• After 30 days, all tracking data is permanently deleted
• Account information is archived for legal and compliance purposes (up to 7 years)

7.3 Backup and Archival

Data stored in backup systems is deleted within 90 days of the primary data deletion.

8. Data Security

8.1 Technical Measures

• Encryption: All data transmitted between devices, servers, and applications is encrypted using SSL/TLS protocols
• Secure Servers: Data is stored on secure cloud servers with firewalls and intrusion detection systems
• Access Controls: Multi-factor authentication for admin access, role-based permissions
• Regular Security Audits: Vulnerability assessments and penetration testing

8.2 Organizational Measures

• Employee training on data protection and confidentiality
• Strict access controls for personnel handling personal data
• Confidentiality agreements with all staff and contractors
• Incident response plan for data breaches

8.3 Limitations

While we implement industry-standard security measures, no system is 100% secure. We cannot guarantee that:

• Unauthorized third parties will never breach our security
• Data transmission over the internet is completely secure
• Hackers or cybercriminals cannot exploit vulnerabilities

You are responsible for:

• Keeping your login credentials confidential
• Using strong passwords and enabling two-factor authentication
• Accessing Services only from secure devices and networks

9. Your Privacy Rights

9.1 Access and Correction

You have the right to:

• Request a copy of your personal information we hold
• Update or correct inaccurate information
• Access your tracking history and reports via the web portal or mobile app

How to Exercise: Log in to your account at www.itracker.com.bd or email info@itracker.com.bd

9.2 Data Deletion

You can request deletion of your account and personal data by:

• Canceling your subscription through our customer support
• Sending a written request to info@itracker.com.bd

Note: Some data may be retained for legal compliance (e.g., payment records for tax purposes).

9.3 Withdraw Consent

If processing is based on consent, you can withdraw it at any time:

• Opt out of marketing emails by clicking “unsubscribe”
• Disable push notifications in your device settings
• Contact us to withdraw consent for specific processing activities

9.4 Data Portability

You can request a machine-readable copy of your tracking data and reports.

9.5 Objection to Processing

You can object to processing based on legitimate interests by contacting us at info@itracker.com.bd.

9.6 Complaint to Regulatory Authority

If you believe your privacy rights have been violated, you can file a complaint with:

• Bangladesh: Information Commission, Ministry of Information and Broadcasting
• EEA/UK: Your local Data Protection Authority

10. Children’s Privacy

Our Services are NOT intended for individuals under 18 years of age. We do not knowingly collect personal information from minors.

• If you are under 18, you must have parental or guardian consent to use our Services
• If we discover we have collected data from a minor without proper consent, we will delete it immediately

Parents/Guardians: If you believe your child has provided us with personal information, please contact us at info@itracker.com.bd.

11. International Data Transfers

11.1 Data Storage

Your data is primarily stored on servers located in Bangladesh. We may also use cloud services that store data in:

• Singapore
• United States
• European Union

11.2 Cross-Border Transfer Safeguards

When data is transferred internationally, we ensure:

• Service providers comply with GDPR or equivalent standards
• Standard Contractual Clauses (SCCs) are in place
• Adequate security measures are implemented

12. Third-Party Services and Links

12.1 Google Maps Platform

We use Google Maps API for location display and route mapping. Google’s privacy practices are governed by their Privacy Policy.

12.2 Payment Gateways

Payments processed through bKash, Nagad, Rocket, and banks are subject to their respective privacy policies. We do not store complete credit card or mobile banking PINs.

12.3 External Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing information.

13. Cookies and Tracking Technologies

13.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality (login, session management)
• Analytics Cookies: Google Analytics for usage statistics and traffic analysis
• Preference Cookies: Remember your settings and preferences

13.2 Managing Cookies

You can control cookies through your browser settings:

• Block all cookies (may affect functionality)
• Delete existing cookies
• Allow cookies from specific sites

Mobile App: We use device identifiers and push notification tokens for app functionality.

14. Do Not Track Signals

Currently, there is no industry-standard technology for recognizing Do Not Track (DNT) signals. Our Services do not respond to DNT browser settings. If a standard is adopted in the future, we will update this policy accordingly.

15. Changes to This Privacy Policy

15.1 Updates

We may update this Privacy Policy to reflect:

• Changes in laws and regulations
• New features or services
• Feedback from users and regulators

15.2 Notification

We will notify you of material changes by:

• Posting the updated policy on our website with a new “Last Updated” date
• Sending an email notification (for significant changes)
• Publishing notice at least 30 days before changes take effect

15.3 Your Continued Use

Continued use of our Services after changes constitute your acceptance of the updated Privacy Policy. If you do not agree, you must stop using our Services and request account deletion.

16. Bangladesh-Specific Provisions

16.1 Compliance with Local Laws

This Privacy Policy complies with:

• ICT Act 2006 (Amended 2013): Cyber law and electronic data protection
• Digital Security Act 2018: Online security and data handling
• BTRC Act 2001: Telecommunications regulation and licensing
• Consumer Rights Protection Act 2009: Consumer data rights

16.2 BTRC Licensing

iTracker operates under BTRC License No. 14.32.0000.007.58.033.16.24 (valid until 07-01-2027) for Vehicle Tracking Services. We comply with all BTRC terms and conditions regarding data collection, usage, and customer privacy.

16.3 Law Enforcement Cooperation

As per Clause 5 of our Terms and Conditions:

• Customers must notify police immediately if their vehicle is stolen
• We assist law enforcement in vehicle recovery with a valid crime reference number
• Police investigations take precedence in theft cases

16.4 Data Localization

Primary customer data and tracking information are stored on servers within Bangladesh or in compliance with local data residency requirements.

17. Contact Us

17.1 Privacy Inquiries

For questions, complaints, or requests regarding this Privacy Policy, contact us:

Email: info@itracker.com.bd
Customer Support Email: support@itracker.com.bd
Phone: 09613566566 (09:30 AM – 6 PM, Saturday – Thursday)
WhatsApp: +880 1833-301333

17.2 Mailing Address

IFAD Information & Technology Limited (iTracker)
Sonartori Tower, 13th Floor
80/14-A Mymensingh Road (12 C/A)
Dhaka 1000, Bangladesh

17.3 Data Protection Officer (DPO)

For GDPR-related inquiries, contact our Data Protection Officer:
Email: info@itracker.com.bd
Phone: 09613566566

17.4 Response Time

We aim to respond to all privacy-related inquiries within 7 business days. For urgent matters (e.g., suspected data breach), contact us immediately via phone or WhatsApp.

Acknowledgment

By using iTracker Services, you acknowledge that:

1. You have read and understood this Privacy Policy
2. You consent to the collection, use, and disclosure of your information as described
3. You are at least 18 years old or have parental/guardian consent
4. You understand the GPS tracking nature of our Services and associated data collection

For corporate clients: You confirm that you have obtained necessary consent from your drivers/employees for vehicle tracking and data sharing with your organization.