Last updated:
This Privacy Policy explains how ORCAB (Organization for Reduction of Carbon-footprint and Aid to Biodiversity) collects, uses and protects personal data when you visit this website, contact us, or apply to volunteer with us.
1. Who we are
ORCAB is the organisation responsible for (the “controller” of) the personal data described in this policy.
ORCABNASA Heights, Level-7, 47 Gulshan Avenue, Gulshan-1
Dhaka 1212, Bangladesh
Email: info@orcabbd.org
2. Personal data we collect
When you use the contact form
Your name, email address and the content of your message. The message is sent to ORCAB by email; it is not stored in the website database.
When you apply to volunteer
The volunteer enrolment form asks for:
- Identity and contact details: full name, date of birth, gender, email address, phone numbers, residential address, district, division and postal code.
- Emergency contact: name, relationship and phone number of a person you nominate.
- Volunteering profile: areas of interest, skills, previous experience, languages, preferred type of volunteering, availability, time commitment, motivation and any comments.
- Reference: name, contact details and relationship of a referee, if you provide one.
- Health information: whether you have a medical condition we should be aware of, and any details you choose to share.
- Declarations and consents: your agreement to our mission and code of conduct, your choices about updates and media use, your handwritten (drawn) signature and the date.
Health information is a “special category” of personal data. Please share only what is necessary for us to keep you safe during volunteer activities. If you provide details of other people (an emergency contact or a referee), please make sure they are aware that you are sharing their details with us.
When you browse the website
Like most websites, our server receives technical information such as your IP address, browser type and the pages requested. We use essential cookies to keep the site secure and working. See our Cookie Policy for details. We do not use advertising or analytics tracking on this website.
3. How and why we use your data
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Responding to your enquiry | Contact form data | Legitimate interests — answering messages sent to us (Art. 6(1)(f)) |
| Protecting forms from spam and abuse | reCAPTCHA data, IP address | Legitimate interests — keeping the website secure (Art. 6(1)(f)) |
| Assessing and managing your volunteer application and participation | Volunteer form data | Steps taken at your request before entering into a volunteer arrangement (Art. 6(1)(b)) |
| Keeping you safe during activities | Health information, emergency contact | Your explicit consent (Art. 9(2)(a)) — given by choosing to provide it |
| Sending volunteer updates by email/SMS | Contact details | Your consent (Art. 6(1)(a)) — only if you tick the updates box |
| Using photos/videos of volunteers in our communications | Images, name | Your consent (Art. 6(1)(a)) |
| Operating and securing the website | Technical data, essential cookies | Legitimate interests (Art. 6(1)(f)) |
We do not sell personal data, and we do not use it for automated decision-making or profiling.
4. Third-party services and sharing
We use the following third-party services, which may receive limited personal data (such as your IP address) when you use the relevant part of the site:
- Google reCAPTCHA (contact form) — to check that submissions come from a person, not an automated program. Subject to Google’s Privacy Policy.
- Google Maps (contact page) — to display our office location.
- YouTube (home page) — to play an embedded video, using YouTube’s privacy-enhanced mode.
- Google Fonts and the jsDelivr content network — to deliver fonts and website code to your browser.
- Email and hosting providers — to deliver contact form messages and to host this website.
We may also disclose personal data where required by law or to protect the rights, safety and property of ORCAB, our volunteers or others. Links to external websites, including our Facebook page, are covered by those websites’ own privacy policies.
5. International transfers
ORCAB is based in Bangladesh. If you are located in the European Union, the European Economic Area or the United Kingdom, information you send us will be transferred to and processed in Bangladesh, which has not been the subject of an adequacy decision by the European Commission. Some of the third-party services listed above may also process data in other countries, including the United States. More information is available on our GDPR page.
6. How long we keep data
- Contact messages are kept in our email system for as long as needed to deal with your enquiry and any follow-up.
- Volunteer applications and records are kept while you are an active volunteer or your application is being considered, and afterwards only for as long as needed for our legitimate record-keeping purposes or legal obligations.
- Session cookies expire automatically (see the Cookie Policy).
You can ask us to delete your data at any time — see “Your rights” below.
7. Security
We use encrypted connections where available and restrict administrative functions to signed-in users. No method of transmission over the internet is completely secure, so please avoid sending sensitive information through the contact form. If we become aware of a personal data breach that is likely to put your rights at risk, we will inform you and, where required, the relevant authorities.
8. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting processing carried out before withdrawal;
- complain to a data protection authority.
Visitors from the EU/EEA can find more detail on our GDPR & Your Rights page.
9. Children
This website is not directed at children. If you are under 18 and wish to volunteer, please involve a parent or guardian before submitting the volunteer form. If you believe a child has given us personal data without appropriate consent, please contact us.
10. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top shows when it was last changed.
11. Contact us
To ask a question or make a request about your personal data, email info@orcabbd.org or write to us at the address above.