Privacy Policy

Last updated: 21 October 2026

This policy explains what personal data NextGen Global IT Park (“NextGen”, “we”, “us”) collects through this website, why, and the choices you have. We keep it short because we collect very little: we do not run advertising trackers, we do not sell personal data, and this site sets no cookies of its own.

Who is responsible for your data

NextGen Global IT Park, a remote-first software engineering company based in Bangladesh, is the controller of the personal data described here. For any privacy question or request, email hello@nxtgenitpark.com.

What we collect and why

• Contact form. Your name, work email, optional phone number and the description of what you need. We use it only to reply to your inquiry and, if you choose to work with us, to prepare a proposal. Legal basis (GDPR): steps taken at your request before entering into a contract, and our legitimate interest in answering business inquiries.
• Newsletter sign-up. Your email address, used only to send you occasional engineering articles from us. Legal basis: your consent, which you can withdraw at any time by replying “unsubscribe” or emailing us.
• Emails you send us. Whatever you choose to include, used to respond and to run any resulting engagement.
• Server logs. Like every website, our servers record technical request data (IP address, browser user agent, page requested, time). We use it only to keep the site secure and working, and logs are rotated automatically after a short period.
• Website analytics. We use Umami, a privacy-friendly analytics tool that does not use cookies and does not collect personal identifiers. It gives us aggregated numbers only (pages viewed, referring sites, country, device type, and whether someone sent the contact form or clicked to book a call). Legal basis: our legitimate interest in understanding how the site is used.

We do not use your data for automated decision-making or profiling, and we never sell or rent it.

Booking a call

The “Book a call” buttons open our scheduling page on Cal.com. The details you enter there are collected by Cal.com on our behalf and handled under Cal.com's own privacy policy; we receive your name, email, chosen time and any notes you add, and use them to hold the meeting.

Who we share it with

We share personal data only with the service providers we need to run this site and reply to you:

• our email delivery provider, which forwards contact-form messages to our inbox;
• our hosting and content-delivery providers, which serve the site;
• our internal team-messaging tool (where enabled), where new inquiries are posted so we can reply quickly;
• Cal.com, if you book a call; and Umami, for aggregated analytics.

We may also disclose data if required by law, or to protect our rights in a legal dispute. We will not share it with anyone else without your permission.

International transfers

Our team works from Bangladesh and some of our providers are based in the United States, so your data may be processed outside the European Economic Area and the United Kingdom. Where the law requires it, we rely on the safeguards our providers offer, such as the European Commission's Standard Contractual Clauses, and we limit access to the people who need it to respond to you.

How long we keep it

Inquiries that don't lead to a project are deleted within 24 months. If we work together, project correspondence is kept for as long as the engagement lasts and afterwards for as long as tax, accounting or legal obligations require. Newsletter addresses are kept until you unsubscribe.

Your rights

Depending on where you live, including under the EU and UK GDPR and California's CCPA/CPRA, you can ask us to access, correct, delete or export your personal data, to restrict or object to how we use it, or to withdraw consent. Email hello@nxtgenitpark.com and we will reply within one month. We will not treat you differently for exercising these rights. If you are in the EU or UK and are not satisfied with our answer, you can complain to your local data protection authority.

Security

The site is served only over HTTPS, the contact form is protected against automated abuse, and access to inquiries is limited to our team. No method of transmission is perfectly secure, but we apply the same security practices to our own systems that we build for clients.

Children

This site is for businesses and is not directed at anyone under 16. We do not knowingly collect their data.

Cookies

See our Cookie Policy. In short: this site sets no cookies of its own.

Changes

If we change this policy we will update the date at the top of this page. Material changes will be highlighted here for at least 30 days.