Privacy Policy

1. Introduction

This Privacy Policy describes how Research Ustad ("we", "our", or "us") handles personal information relating to individuals who visit our website, register for courses, apply for research opportunities, participate in mentorship, communicate with our team, or otherwise use our services.

By using our website or submitting information through our forms and services, you acknowledge the processing practices described in this policy, subject to any consent required by applicable law.

2. Information We May Collect

2.1 Personal and Contact Information

Depending on the service or application, we may collect:

• Full name and preferred name.
• Email address and phone number.
• Country, institution, university, or organization.
• Department, academic level and educational background.
• Information voluntarily provided in messages, forms, applications, or inquiries.

2.2 Course and Enrollment Information

For course registration and learning activities, we may process:

• Course name and enrollment details.
• Registration and attendance records.
• Learning progress and submitted assignments.
• Course-related communication and feedback.
• Certificate eligibility and verification information.

2.3 Research and Appointment Information

For research programmes, RA or Junior Researcher applications, Advisor or Mentor appointments and other organizational activities, we may collect:

• CVs, resumes, portfolios and academic profiles.
• Research interests, experience and qualifications.
• Application responses and interview-related information.
• Assignment, contribution, performance and appointment records where relevant.
• Research documents and collaboration-related information that you voluntarily provide or are authorized to access.

2.4 Payment and Transaction Information

When you make a payment, we may collect or receive transaction references, payment status, amount, payment date, course information and verification details.

Card, banking, or mobile financial service credentials are generally processed by the relevant payment service provider. Research Ustad does not intend to collect or store your full payment credentials unless a specific service and lawful arrangement expressly requires it.

3. Device and Network Information

For enrollment support and security, we record basic device information, including device type, browser, operating system and a masked network address.

We do not collect a precise location or unique hardware fingerprint.

This information may be used to help verify enrollment activity, troubleshoot technical issues, protect accounts, investigate suspicious access and maintain the reliability of our services.

A masked network address is not intended to identify your exact home or physical location. We do not use the information described in this section to create a unique hardware fingerprint.

4. How We Use Personal Information

We may use collected information for legitimate and disclosed purposes, including:

• Processing course registrations and applications.
• Verifying enrollment and payment transactions.
• Providing classes, mentorship and research-related services.
• Managing attendance, assignments and learning progress.
• Communicating schedules, notices and programme updates.
• Reviewing RA, Junior Researcher, Advisor and Mentor applications.
• Managing appointments and organizational responsibilities.
• Issuing and verifying eligible certificates or letters.
• Maintaining website, account and payment security.
• Responding to questions, complaints and support requests.
• Complying with applicable legal and regulatory obligations.
• Improving our educational and research services.

5. Consent to Process Submitted Information

When you submit information through a registration form, application, enrollment process, or other relevant form, you may be asked to confirm the following consent:

This consent is intended to cover the purposes stated above. Where a separate activity requires additional information or a different legal basis, Research Ustad may provide an additional notice or request separate consent.

6. Cookies and Similar Technologies

Our website or service providers may use cookies or similar technologies where necessary to support website functionality, maintain sessions, remember preferences, improve security, and understand basic website usage.

You may be able to manage cookies through your browser settings. Disabling certain cookies may affect some website features or functionality.

7. How We Share Information

Research Ustad does not intend to sell personal information to third parties. We may share limited information where reasonably necessary for the purposes described in this policy, including with:

• Authorized Research Ustad administrators and team members who need the information to perform their responsibilities.
• Course instructors, Advisors, Mentors, or research supervisors where relevant to the service or programme.
• Payment gateway providers, banks and financial service providers for transaction processing and verification.
• Website hosting, cloud infrastructure, email, video conferencing and communication service providers.
• Legal, regulatory, or governmental authorities where disclosure is required or permitted by applicable law.

We aim to limit shared information to what is reasonably necessary for the relevant purpose.

8. Third-Party Platforms and Services

Research Ustad may use third-party platforms for online classes, communication, hosting, payment processing, email delivery, or other operational needs.

When you interact with those services, their own privacy policies and terms may also apply. Research Ustad does not control every aspect of an independent provider's data handling practices.

9. Data Security

We use reasonable technical and organizational measures intended to protect personal information against unauthorized access, alteration, disclosure, loss, or misuse.

Depending on the system and information involved, measures may include:

• Access controls and role-based permissions.
• Secure communication and connection practices.
• Restricted access to administrative information.
• Account and transaction verification procedures.
• Reasonable backup, maintenance and security practices.

No website, network, or electronic storage system can be guaranteed to be completely secure. Users should also protect their account credentials and avoid sharing passwords or verification codes.

10. Data Retention

We retain information for as long as reasonably necessary to fulfil the purposes for which it was collected, including enrollment administration, payment verification, programme records, appointment management, security, dispute resolution, and legal compliance.

Retention periods may vary depending on the type of record, the nature of the service, applicable legal requirements, and legitimate operational needs.

When information is no longer required, we will take reasonable steps to delete, anonymize, or securely dispose of it, subject to applicable retention obligations.

11. Your Choices and Requests

Subject to applicable law and legitimate recordkeeping requirements, you may contact Research Ustad to:

• Request information about personal data we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Raise concerns about how your information is being used.
• Request deletion or withdrawal of consent where applicable and legally permissible.
• Update your contact or enrollment information.

Some information may need to be retained for payment records, legal compliance, security, dispute handling, or other legitimate purposes.

12. Privacy of Students and Applicants

Students and applicants should provide only information that is accurate, relevant and necessary for the registration or application process.

If you submit information about another person, you must have the appropriate authority or permission to provide that information.

Parents or legal guardians should contact Research Ustad before submitting personal information on behalf of a minor where applicable consent or authorization is required.

13. International Data Processing

Some hosting, cloud, communication, or payment providers may process information through infrastructure located outside Bangladesh. Where this occurs, information may be subject to the laws and safeguards applicable to the relevant provider and jurisdiction.

We aim to use service providers and safeguards appropriate to the nature of the information and the services being provided.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, information practices, technology, or legal requirements.

The latest version will be published on this page with an updated revision date. Material changes may also be communicated through appropriate official channels.