Privacy Policy

Celebrations is a printing and event company, not a data business. The only personal information this website handles is what you type into the contact form or the quote request form so that we can reply to you. This page sets out exactly what that is, in plain language.

01Who we are

This website is operated by Celebrations, a proprietorship established in 2016 by Md. Rafiqul Isma Rana, trading from Akhonda Tower, Suite # 110, Plot # 12, Road # 1, Block # Kha, Mirpur # 10, Section # 6, Dhaka-1216, Bangladesh. We are the party responsible for the information described here. Where this policy says “we”, “us” or “our”, it means Celebrations.

We are a Bangladeshi company and this policy is written under the law of Bangladesh. We make no claim to certification under the EU General Data Protection Regulation, ISO 27001 or any comparable scheme — we would rather describe accurately what we actually do than borrow a badge.

02The short version

• We collect what you type into a form on this site, plus your IP address and browser identification, which are recorded to keep spam out.
• We use it to answer your enquiry, prepare a quotation and deliver the work. Nothing else.
• We do not sell, rent or trade your details, and we do not pass them to anyone for their own marketing.
• We do not add you to a mailing list. If you never write again, you will never hear from us again.
• No advertising or analytics cookies are set by this site.
• You can ask us to delete your enquiry at any time by emailing celebrations.printers@gmail.com.

03What you send us

There are two forms on this site — the contact form and the quote request form. They save the same record, with a couple of extra fields on the quote side. Nothing is collected from you anywhere else on the site.

If you email or telephone us instead of using a form, we hold whatever you chose to put in that message on the same basis as everything above.

04What is recorded automatically

When a form is submitted we also store two technical details alongside it, and the date and time of the submission:

• Your IP address — the network address the submission came from.
• Your user agent — the identification string your browser sends, describing the browser and operating system.

These exist for one reason: keeping automated spam and abuse off the form. The forms are rate-limited to a small number of submissions per minute from the same address, and they carry a hidden field that real people never see and never fill in — submissions that complete it are rejected outright and never stored. If we are ever flooded with junk, the IP address is what lets us identify the source. We do not use either detail to profile you, track you across websites, or build an advertising audience.

Separately, the server that hosts this website keeps standard access logs, as every web server does. Those logs are operational, are kept only for a short period, and are not linked to marketing of any kind.

05Why we hold it, and on what basis

We hold your information for the purpose you gave it to us: to reply to an enquiry, to prepare and send a quotation, and — if you go ahead — to produce, deliver and invoice the work. Our lawful basis for each of those is straightforward:

• Your request. You submitted the form asking us to get in touch, and replying is exactly what you asked for.
• Performing the job. Once a quotation becomes an order, we need your contact and delivery details to carry out the contract between us.
• Our legitimate business interest. Keeping the site usable and free of automated abuse, and retaining a record of what we quoted and to whom.
• Legal and tax obligations. Records connected to work we actually invoiced are kept because Bangladeshi tax and accounting rules require it.

We do not use your details for automated decision-making, and we do not profile you.

06Cookies and analytics

This site sets only the cookies it needs in order to work — which is why you were not met with a consent banner on the way in. There are two of them:

• A session cookie, set by the Laravel framework the site runs on. It holds an anonymous session identifier so that a form you started stays valid while you fill it in, and it expires when your session does.
• A CSRF token cookie (XSRF-TOKEN), which lets the server confirm that a form submission genuinely came from a page on this site rather than from somewhere else. It is a security measure and nothing more.

Neither cookie identifies you personally, and neither is used for advertising. No analytics or advertising cookies are set unless a Google Analytics 4 measurement ID has been configured for this site. None is configured at the time of writing, so no third-party analytics script loads at all. If that ever changes, we will say so on this page before it does, and we will describe what the analytics collects.

Where we link out to a map, a social profile or another external service, that service is outside our control and sets its own cookies under its own policy once you follow the link.

07Who else can see it

We do not sell, rent, trade or otherwise share your information with third parties for their own purposes. It is never passed to advertisers, list brokers or other companies looking for leads.

Inside that boundary, your enquiry is seen by:

• Our own team — the small number of Celebrations staff who handle quotations, production and delivery, and only where it is part of their work.
• The company that hosts this website and its database, which stores the data on our behalf and under our instruction.
• The email service that carries the notification from the website to our own inbox when you submit a form.

Beyond that, we would only disclose information if we were legally required to by a competent Bangladeshi authority or court, or if it were necessary to establish or defend a legal claim.

For production work we sometimes engage fabrication, courier and installation partners. Where that happens they receive only what the job requires — typically a delivery address, a site contact name and a phone number — and never your full enquiry history.

08How long we keep it

We keep an enquiry for as long as it is useful to the reason it was sent, and then we delete it:

• Enquiries that did not become an order are deleted 24 months after the last contact. Repeat quotation requests are common in this trade, and being able to look up what we quoted you last year is genuinely useful to both sides — but not indefinitely.
• Records connected to work we carried out and invoiced are kept for as long as Bangladeshi tax and accounting requirements oblige us to keep commercial records, and then deleted.
• The IP address and user agent attached to a submission are of no use once the enquiry is closed, and go with the rest of the record.

If you ask us to delete your information sooner, we will — see Your choices and deletion below.

09How we protect it

The site is served over an encrypted HTTPS connection, so what you type into a form is encrypted in transit. Submissions are stored in a database that is not publicly reachable, on a server kept up to date with security patches, and access is limited to the Celebrations staff who need it to do their job. Forms are protected against cross-site request forgery and are rate-limited against automated abuse.

We will also be honest about the limits: no website can promise perfect security, and we hold no formal security certification. What we can promise is that we collect as little as possible in the first place, which is the most effective protection there is.

10Your choices and deletion

You can ask us at any time to:

• tell you what information we hold about you;
• correct anything that is wrong or out of date;
• delete your enquiry and the record attached to it;
• stop using your details for anything other than a legal obligation we cannot avoid.

Email celebrations.printers@gmail.com with “Data request” in the subject line, from the address you used to contact us, or call 01749 464646 during office hours. We aim to deal with any request within ten working days. There is no charge.

One practical note: if you ask us to delete an enquiry that we are still working on, we will have to stop work on it, because the delivery address and contact details go with it. Where a record relates to an invoice, we may have to keep the accounting entry itself even after deleting the rest.

11Other websites and children

This site links to other websites — client sites, map services and similar. Once you follow a link you are on someone else's site, governed by their privacy policy, not ours. We are not responsible for how they handle your information.

This is a business-to-business website. It is not directed at children, we do not knowingly collect information from anyone under 18, and if we learn that we have, we will delete it.

12Changes to this policy

If we change how this website handles information — new forms, a new service provider, or analytics being switched on — we will update this page and change the date at the top of it. This version was last updated in January 2026. Material changes will be described here rather than made quietly.

13How to reach us

Questions about this policy, or about anything we hold, go to the same place as everything else — a real person in our Mirpur office.