Privacy Policy

This Privacy Policy describes how Rotana ("we," "us," or "our") collects, uses, and protects your personal information when you visit rotana-marketing.com or use our services. Please read this policy carefully before using our website.

By using our website, you agree to the collection and use of information as described in this policy.

Who We Are

Business name: Rotana

Website: rotana-marketing.com

Owner: Riad Hasan

Location: Dhaka, Bangladesh

Contact email: me@riadhasan.com

Rotana is an SEO-led growth marketing agency providing digital marketing services including SEO, content strategy, link building, paid media, email marketing, and marketing consultancy.

Data We Collect

We collect the following categories of personal data:

Data you provide directly

• Name — provided via the contact form
• Email address — provided via the contact form or booking system
• Website URL — optionally provided via the contact form
• Monthly budget — optionally provided via the contact form
• Service interest — selected via the contact form dropdown
• Message content — provided via the contact form free-text field

Data collected automatically

• IP address — collected by our hosting provider and analytics tools
• Browser type and version — collected via Google Analytics
• Pages visited and time spent — collected via Google Analytics
• Referring website — collected via Google Analytics
• Device type — collected via Google Analytics
• Cookie identifiers — collected via CookieYes and Google Analytics

How We Collect Your Data

We collect your data through the following methods:

• Contact form — when you submit an enquiry on our Contact page, powered by WPForms
• Calendly booking — when you book a consultation through our Calendly link, Calendly collects your name and email address directly. Their privacy policy applies to data collected through their platform.
• Google Analytics — automatically collects anonymised browsing data when you visit our website
• Cookies — placed on your device when you visit our website, subject to your consent via our cookie banner

How We Use Your Data

We use the data we collect for the following purposes:

• To respond to your enquiries — we use your name, email, and message to reply to contact form submissions within 24 hours
• To provide our services — when you become a client, we use your contact information to communicate about your project
• To schedule consultations — booking data collected through Calendly is used to confirm and manage your free strategy call
• To analyse website performance — anonymised analytics data helps us understand how visitors use our site and improve our content
• To comply with legal obligations — we may process data where required by law

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:

• Consent — for cookies and analytics tracking, where you have given explicit consent via our cookie banner
• Legitimate interests — for responding to your enquiries and improving our website, where our interests do not override your rights
• Contractual necessity — for communicating with clients about active service engagements
• Legal obligation — where processing is required to comply with applicable law

You may withdraw your consent at any time by contacting us at me@riadhasan.com or adjusting your cookie preferences through our cookie banner.

Data Sharing & Third Parties

We share data with the following third-party services that are necessary to operate our website and business:

Hosting & Infrastructure

• Hostinger — our website hosting provider. Server logs may contain IP addresses. Privacy policy: hostinger.com/privacy-policy

Analytics

• Google Analytics (GA4) — we use Google Analytics to understand how visitors interact with our website. Data is anonymised and aggregated. Google's privacy policy applies. You can opt out via our cookie banner or using Google's opt-out browser add-on.
• Google Search Console — used to monitor search performance. Does not collect personally identifiable information.

Forms & Communication

• WPForms — processes contact form submissions. Form data is stored on our WordPress installation on Hostinger servers.
• Calendly — used for booking strategy calls. When you book a call, Calendly processes your name and email under their own privacy policy: calendly.com/privacy

Cookie Consent

• CookieYes — manages cookie consent on our website. Stores your consent preferences. Privacy policy: cookieyes.com/privacy-policy

Cookies & Tracking Technologies

Our website uses cookies — small text files stored on your device. We use the following categories of cookies:

Strictly necessary cookies

These cookies are required for the website to function and cannot be disabled. They include session cookies for WordPress and security cookies from Wordfence.

Analytics cookies

These cookies collect anonymised information about how visitors use our website. We use Google Analytics (GA4) for this purpose. These cookies are only placed with your consent.

Preference cookies

These cookies remember your consent choices via CookieYes so you are not asked again on return visits.

You can manage your cookie preferences at any time by clicking the cookie settings button on our website or by clearing cookies in your browser settings.

Data Retention

We retain your personal data only for as long as necessary for the purpose it was collected:

• Contact form submissions — retained for 24 months from the date of submission, then deleted
• Client communication records — retained for the duration of the engagement plus 3 years for legal compliance
• Analytics data — retained for 14 months as set in Google Analytics, then automatically deleted
• Cookie consent records — retained for 12 months via CookieYes

You may request deletion of your data at any time by emailing me@riadhasan.com. We will process deletion requests within 30 days.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Under GDPR (EEA & UK residents)

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can request correction of inaccurate data
• Right to erasure — you can request deletion of your data ("right to be forgotten")
• Right to restrict processing — you can request that we limit how we use your data
• Right to data portability — you can request your data in a machine-readable format
• Right to object — you can object to processing based on legitimate interests
• Right to withdraw consent — you can withdraw consent at any time without affecting prior processing

Under CCPA (California residents)

• Right to know what personal information is collected and how it is used
• Right to delete personal information
• Right to opt out of the sale of personal information (we do not sell personal data)
• Right to non-discrimination for exercising your rights

To exercise any of these rights, contact us at me@riadhasan.com. We will respond within 30 days.

International Data Transfers

Rotana is based in Bangladesh. Our website is hosted by Hostinger, which may store data on servers in the European Union or other regions depending on the hosting configuration.

Third-party services we use — including Google Analytics and Calendly — may transfer data to the United States or other countries. These transfers are conducted under appropriate safeguards including Standard Contractual Clauses (SCCs) and compliance with applicable data protection law.

By using our website, you acknowledge that your data may be transferred internationally for the purposes described in this policy.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption on all data transmitted between your browser and our website
• Wordfence Security plugin for firewall protection and malware scanning
• Regular automated backups via UpdraftPlus to secure cloud storage
• Restricted access to form submission data
• Regular WordPress core and plugin updates to address security vulnerabilities

Despite these measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but we take reasonable steps to protect your data.

In the event of a data breach that affects your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

Children's Privacy

Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 16.

If you believe we have inadvertently collected data from a minor, please contact us immediately at me@riadhasan.com and we will delete that information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website after changes are published constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights, or have concerns about how we handle your personal data, please contact us:

• Email: me@riadhasan.com
• Website: rotana-marketing.com/contact
• Response time: Within 30 days for data rights requests, within 24 hours for general enquiries

If you are located in the EEA and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.