Our Zero-Compromise Privacy Commitments
- We never sell or rent your personal or client data to data brokers or advertisers.
- Strict Least-Privilege Access applied to all client ad accounts and analytics portals.
- Full Data Sovereignty: You can request full data export or deletion at any time.
1. Introduction & Overview
Welcome to Benwil Solution (“Benwil Solution”, “we”, “our”, or “us”). We provide full-stack performance marketing, enterprise search engine optimization (SEO), paid media advertising (Google Ads, Meta Ads), bespoke web development, custom software engineering, and AI automation solutions.
This Privacy Policy explains how we gather, utilize, store, share, and protect your personal information when you visit our website (https://benwil.org), schedule a consultation, submit inquiry forms, apply for employment openings, or enter into client agreements with us. By interacting with our platform, you acknowledge the terms set out in this document.
2. Data Controller Identity
For the purposes of the General Data Protection Regulation (GDPR), the UK Data Protection Act, and applicable global privacy statutes, the data controller is:
3. Information We Collect
We collect personal data through three principal channels: direct submission by you, automated logging technologies, and authorized third-party delegations.
A. Information You Provide Directly
- Contact & Business Details: Full name, professional email address, phone number, company name, website domain, and industry vertical.
- Growth Discovery & Inquiry Inputs: Monthly marketing budget ranges, service requirements (e.g., SEO, PPC, Next.js Development, AI Automations), target timelines, and project descriptions.
- Recruitment Data: Résumé/CV details, LinkedIn profiles, portfolio URLs, compensation expectations, work experience, and educational background submitted via our Careers portal.
- Communication Records: Transcripts of emails, WhatsApp messages, consultation notes, and strategy session recordings made with prior consent.
B. Information Collected Automatically
- Device & Network Identifiers: Internet Protocol (IP) address, browser family and version, operating system, screen dimensions, language preferences, and referral headers.
- Usage Telemetry: Pages visited, scroll depth, session durations, exit links, and click interactions to improve website user experience and page load latency.
C. Delegated Client Account Access
- During agency engagements, clients may grant our specialists delegated partner access to Google Ads, Meta Business Manager, Google Analytics 4, Google Search Console, DNS, and hosting environments. This data is handled strictly under mutual non-disclosure and engagement terms.
4. How We Use Your Data
We process your personal data solely for legitimate business, contractual, and technical purposes, including:
- Delivering Contracted Services: Planning, executing, and optimizing marketing campaigns, engineering custom Next.js web applications, configuring AI workflows, and running technical audits.
- Strategy & Consultation Delivery: Preparing personalized 30-minute growth roadmaps, competitor intelligence briefs, and commercial proposals requested by prospective partners.
- Candidate Evaluation: Processing job applications, screening applicant qualifications, conducting interviews, and maintaining talent pipelines.
- Technical Security & Site Integrity: Mitigating malicious traffic, safeguarding against DDoS attacks, validating form submissions against spam (honeypots & rate limiters), and ensuring SSL compliance.
- Financial & Invoicing Administration: Issuing project invoices, tracking milestone deliverables, and complying with statutory tax reporting requirements.
5. Legal Bases for Processing (GDPR)
Under Article 6 of the General Data Protection Regulation (GDPR), we process your personal data on the following lawful bases:
| Legal Basis | Applicable Processing Activity |
|---|---|
| Performance of a Contract | Fulfilling client service agreements, delivering software builds, running ad campaigns, and sending invoices. |
| Legitimate Interests | Improving website performance, securing infrastructure, analyzing inquiry trends, and corporate risk mitigation. |
| Consent | Non-essential analytical cookies, opt-in newsletter communications, and client testimonial spotlights. |
| Legal Obligation | Complying with accounting records, corporate taxation, and regulatory disclosure mandates. |
7. Third-Party Service Providers & Sub-Processors
We do not sell, rent, or monetize your personal information under any circumstances. We engage select, enterprise-grade sub-processors strictly to support application hosting, data storage, and analytics:
- Hosting & Edge Deployment: Vercel Inc. (global edge network, SSL termination, and CDN caching).
- Database Infrastructure: Managed cloud PostgreSQL with automated point-in-time recovery and encryption at rest.
- Media & Asset Storage: Cloudinary Ltd. (secure image transformations and CDN delivery).
- Analytics & Telemetry: Google Analytics (configured with IP anonymization enabled).
All sub-processors are bound by strict Data Processing Agreements (DPAs) requiring adherence to international security standards (ISO 27001, SOC 2 Type II).
8. Client Accounts & Advertising Credentials
In the execution of media buying and technical SEO campaigns, clients frequently authorize access to ad accounts, product feeds, and analytics dashboards. Our protocols dictate that:
- Access must be granted via official partner delegation mechanisms (e.g., Meta Partner Business ID, Google Ads MCC Manager Account, Google Search Console User Delegation). Clients should never transmit raw passwords over unencrypted channels.
- Access is restricted exclusively to senior media buyers and engineers assigned to the client’s specific account.
- All proprietary client financial data, customer lists, and internal trade metrics remain the exclusive intellectual property of the client and are protected under mutual Non-Disclosure Agreements.
9. Data Security & Storage Architecture
Benwil Solution maintains multi-layered technical and organizational safeguards designed to prevent accidental loss, unauthorized access, alteration, or disclosure of personal data:
End-to-End Encryption
All in-transit data is encrypted via TLS 1.3. Database storage utilizes AES-256 encryption at rest.
Access Control & MFA
Mandatory multi-factor authentication (MFA) on all internal systems, admin panels, and client portals.
10. Data Retention Schedules
We retain personal data only for as long as necessary to fulfill the purposes for which it was gathered:
- General Inquiries & Lead Submissions: Retained for 24 months to maintain business context, after which records are deleted or anonymized unless an ongoing client relationship is established.
- Client Contractual & Campaign Records: Retained for the duration of the active contract plus 7 years to satisfy statutory tax, accounting, and legal audit requirements.
- Job Applicant Profiles: Retained for 12 months following application submission, after which applicant files are permanently purged unless the candidate consents to extended retention for future openings.
11. Your Privacy Rights (GDPR & CCPA/CPRA)
Depending on your geographical jurisdiction, you hold specific statutory rights regarding your personal information:
Right of Access & Portability
Request a structured, machine-readable copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete personal records immediately.
Right to Erasure (“Forgotten”)
Request total deletion of your personal data where statutory retention obligations do not apply.
Right to Object & Restrict
Object to processing based on legitimate interests or request temporary restriction of processing.
To exercise any of these statutory rights, submit an email request to [email protected] with the subject line “Privacy Rights Request”. We verify identity and respond within thirty (30) calendar days without charge.
12. International Data Transfers
Because Benwil Solution operates globally while maintaining its technical headquarters in Chattogram, Bangladesh, data collected through our platforms may be stored and processed on servers located in the European Union, United States, or Singapore (via our cloud infrastructure providers).
Where data originating from the European Economic Area (EEA) or the United Kingdom is transferred cross-border, we ensure adequate protections are implemented through Standard Contractual Clauses (SCCs) approved by the European Commission.
13. Children’s Privacy (COPPA Compliance)
Our commercial services, digital solutions, and content are intended exclusively for commercial enterprises and individuals aged eighteen (18) years or older. We do not knowingly solicit or collect personal information from children under eighteen. If we discover that a minor has provided us with personal data, we will immediately delete such records.
14. Amendments & Policy Updates
We may revise this Privacy Policy periodically to reflect technological developments, statutory amendments, or evolutions in our service offerings. The updated policy will be posted on this page with an updated “Last Reviewed” timestamp. For material modifications affecting existing clients, notification will be provided via email or an in-platform announcement.
15. Contact & Data Protection Officer
If you have questions, concerns, or requests regarding this Privacy Policy or our compliance practices, please contact our Data Governance Officer:
Attn: Data Governance Office, Benwil Solution
19 Churiatooly Lane, Chattogram, 4000, Bangladesh
Email: [email protected]
Telephone: +880 1644-272188
This Privacy Policy is governed by the principles of data transparency and lawful processing. If you are an enterprise client requiring a signed bespoke Data Processing Addendum (DPA), please contact our legal desk directly.