Online Tax VAT Bangladesh respects your right to privacy. This Privacy Policy explains what personal and tax information we collect when you use our VAT registration (BIN), VAT return (Mushak 9.1), TIN certificate, Income Tax return, visa tax file and consultancy services, why we collect it, how it is stored, and the choices you have over it. This policy works together with our Terms of Service, the FAQ and the detailed service catalogue. Our practices follow the National Board of Revenue (NBR) record-keeping rules and Bangladesh's data protection conventions.
1. Information we collect
We collect contact details (name, phone, email, business name), tax identifiers (TIN, BIN, NID, trade licence number), uploaded documents required for VAT and Income Tax filing (bank statements, sales registers, salary sheets, treasury challans), and payment references. We never collect more than what is needed to deliver the service you ordered on the Packages page.
2. How we use your data
Your data is used solely to prepare and submit VAT/Tax returns to NBR, communicate filing status, issue invoices and tax receipts, meet statutory record-keeping obligations, and improve the quality of our consultancy. We do not use your tax data for marketing or profiling.
3. Data sharing
We do not sell your data. Documents are shared only with authorised tax consultants assigned to your case and, where legally required, with the National Board of Revenue (NBR), the Office of the Commissioner of Taxes, or a court of competent jurisdiction in Bangladesh.
4. Storage & security
Files are stored on encrypted cloud infrastructure with restricted access and audited backups. All site traffic is served over HTTPS/SSL with modern TLS ciphers, and document downloads use signed, time-limited URLs so that links cannot be reused once they expire.
5. Data retention
Tax returns and supporting documents are retained for the minimum period required by NBR (typically six years for VAT records and five years for income tax records). After that period, files are securely deleted unless you ask us to keep them for ongoing consultancy.
6. Your rights
You may request a copy, correction or deletion of your data at any time by emailing our support team via the Contact page. We respond to verified requests within seven working days. Deletion requests are honoured except where the file is part of a statutory NBR submission that must legally be preserved.
7. Cookies & analytics
We use a small number of first-party cookies to keep you signed in and to measure traffic to popular guides on the Knowledge Hub and the Blog. We do not use cookies for cross-site advertising, and we never share identifiable browsing data with third parties.
8. Contact
For privacy questions, contact us via the Contact page or email our compliance desk. We aim to acknowledge every privacy enquiry within two working days.