Privacy & Cookies Policy

PRIVACY AND COOKIES STATEMENT

Effective: July 31, 2025

Otithi, a community-based tourism initiative by BRAC, operates a platform that enables users to explore, book, and participate in immersive travel experiences across Bangladesh. In this Statement, these are collectively referred to as our “Services.”

The information that you share with us allows us to provide a more personalised, responsive, and secure experience. We value the trust you place in Otithi when sharing your personal data, and we are committed to using that information transparently, lawfully, and ethically in line with Bangladesh's applicable laws – including the Consumer Rights Protection Act 2009, the ICT Act 2006.

This Privacy and Cookies Statement (“Statement”) explains how we collect, use, and safeguard your information, and describes your rights and options regarding the personal data we hold. By accessing our website or using our Services via a computer, mobile phone, tablet, or similar device (each referred to as a “Device”), you acknowledge that you have read and understood this Statement.

Notice at Collection of Personal Information

We collect personal information from and about you as described below:

• Biographical Information & Identifiers: This includes your name, phone number, postal and email address, IP address, username, password, and any additional details you voluntarily provide.
  
  

• Payment & Travel Documentation: Including billing information, transaction data, and (where applicable) national ID, passport number, or insurance documents necessary for processing travel.
  
  

• Demographic Details: Such as age group, gender, or voluntarily provided information related to ethnicity, religion, or accessibility needs - used to support inclusive service provision.
  We treat any voluntarily provided sensitive data (e.g. religion, health or accessibility needs) with additional care, in line with ethical data practices.
  
  

• Service and Booking Data: Information related to past and upcoming bookings, preferences, and feedback.
  
  

• Digital Activity Data: This includes your browsing and search behavior on our site, use of our mobile app, and cookie-based identifiers.
  
  

• Device Location (if enabled): For example, if you choose to share your location or upload geo-tagged images.
  
  

• User Content: Such as reviews, ratings, photos, and videos you submit.
  
  

• Inferences: We may derive patterns about your interests and preferences based on the above.
  
  

Why We Collect Your Information

We use your personal information to:

• Register and manage your account

• Process bookings and payments

• Communicate relevant offers, updates, or alerts

• Improve service quality, site performance, and safety

• Customise your user experience

• Comply with applicable legal and regulatory obligations in Bangladesh
  
  

We retain your information as long as your account is active or as needed to:

• Fulfill your service requests

• Resolve disputes

• Enforce our policies

• Meet legal and regulatory record-keeping requirements
  
  

Information Sharing

Otithi may share information with:

• Community hosts and guides who deliver your booked experiences

• BRAC departments or affiliated programs to support service operations

• Technology service providers (e.g., for website hosting, payment processing, or CRM)

• Law enforcement, regulatory bodies, or courts if required by law
  
  

We do not sell your personal data. We do not knowingly share information of individuals under the age of 16 without parental consent.
Where personal data is shared with any third party, we ensure appropriate safeguards, including data protection agreements or non-disclosure agreements (NDAs), are in place.

Your Rights Under Bangladeshi Law

In line with the statutory principles outlined in the Consumer Rights Protection Act and related ICT laws, you have the right to:

• Request access to personal data held by Otithi

• Correct or update inaccurate information

• Request deletion of your data (unless legally required to retain it)

• Object to marketing communications or data processing

• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at: otithi@brac.net

Cookies and Tracking Technologies

Otithi uses cookies and similar tools to:

• Remember your preferences and login state

• Improve website performance

• Measure engagement

• Show relevant offers or content
  
  

You can adjust your cookie preferences through your browser settings or the Cookie Consent banner on our website.
You may also decline optional cookies that are not strictly necessary for site functionality.

Note: Declining certain cookies may limit access to personalised features and booking functionality.

Marketing Communications

We only send promotional communications if you have explicitly opted in. You can unsubscribe from these communications at any time by clicking the “unsubscribe” link in any email or contacting us directly.

Automated Decisions

We may use automated tools to personalise content and suggest relevant travel packages based on your browsing and booking behavior. These tools do not make decisions that significantly affect your rights or access.

Security of Your Data

We use industry-standard security technologies to safeguard your data, including:

• Encryption during transmission

• Access controls for stored data

• Firewalls and secure servers

Although no system is 100% secure, we maintain reasonable administrative, technical, and physical safeguards.

Use by Children

Otithi’s services may be accessed by families or guardians on behalf of children. We collect personal data related to children only for travel facilitation and only with parent/guardian consent.
Parents or guardians may review, update, or request deletion of their child’s data at any time.

Changes to This Statement

We may update this Statement as needed to reflect changes in law or service. The “Effective Date” at the top indicates the latest version. We will notify users of significant changes via email or a prominent notice on our website.