Privacy Policy
Last updated: October 14, 2026
At IGRS Learning, we take your privacy seriously. This policy explains what personal data we collect, why we collect it, and how we protect it. We will never sell your data.
Contents
Information We Collect
Account Information
When you register, we collect your name, email address, and a hashed password. If you sign in via Google, we receive your name, email, and profile picture from Google.
Course & Learning Data
We record which courses you enroll in, your lesson progress, quiz scores, and certificate completions. This data is used exclusively to track your learning journey and generate certificates.
Payment Information
Payments are made through bKash. We never ask for or store your bKash PIN or any banking credentials. To confirm a payment we keep the bKash Transaction ID, the bKash number you paid from and the amount, for record-keeping.
Usage Data
We automatically collect anonymised data such as pages visited, time on site, browser type, and device type via Google Analytics. This data cannot identify you personally.
How We Use Your Information
Service Delivery
Your account data is used to authenticate you, grant access to enrolled courses, track progress, and issue certificates of completion.
Communications
We may send you transactional emails (enrollment confirmation, password reset, certificate issuance). We will only send marketing emails if you have opted in, and you can unsubscribe at any time.
Platform Improvement
Aggregated, anonymised usage data helps us understand which content is most valuable and where we can improve the learning experience.
Data Sharing & Third Parties
We Do Not Sell Your Data
IGRS Learning does not sell, rent, or trade your personal information to any third party for commercial purposes.
Service Providers
We share limited data with trusted service providers who operate under strict confidentiality agreements: Cloudflare R2 (file storage), Google (authentication & analytics), and our payment processor. These providers may only use data to fulfil their service to us.
Legal Requirements
We may disclose personal data if required by Bangladeshi law, a court order, or to protect the rights and safety of our users.
Data Security
Technical Safeguards
All data is transmitted over HTTPS/TLS. Passwords are hashed using bcrypt and never stored in plain text. Access to production databases is restricted to authorised personnel only.
Storage
User data is stored on servers located in secure data centres. Media files (course thumbnails, videos) are stored on Cloudflare R2 with access-controlled URLs.
Breach Notification
In the unlikely event of a data breach affecting your personal data, we will notify you within 72 hours of becoming aware, in compliance with applicable regulations.
Your Rights
Access & Portability
You can request a copy of all personal data we hold about you at any time by emailing us.
Correction
You can update your name and profile information directly from your student dashboard at any time.
Deletion
You may request deletion of your account and associated personal data. Note that anonymised learning statistics may be retained for platform analytics. Completed course certificates may be retained as a record of achievement.
Opt-Out
You can opt out of marketing emails via the unsubscribe link in any email, or by contacting us directly.
Questions about your privacy?
If you have any questions, requests, or concerns about this Privacy Policy or your personal data, please reach out.
Contact UsIGRS — Institute of GIS & Remote Sensing · Mirpur-1, Dhaka 1216, Bangladesh · Terms of Service