Who we are
Public Pulse Agency (“Public Pulse”, “we”, “us”, “our”) is a digital marketing and political PR agency based in Dhaka, Bangladesh. We are a registered business entity (BIN 009043032-0102, Trade Licence TRAD/DNCC/037136/2025). We are the data controller for the personal information described in this policy.
Contact for any privacy question, request, or complaint: info@publicpulse.com.bd · +880 1717-714676 · Dhaka, Bangladesh.
What this policy covers
This policy applies to https://publicpulse.com.bd and all sub-pages, as well as services we provide to clients. It does not apply to third-party sites we link to.
What we collect
Information you give us directly
- Contact form (
/contact): your name, email, phone, the service you’re interested in, and the message you write. - Newsletter signup: your email address, the language you signed up in, and the page you signed up from.
- WhatsApp opt-in: your phone number, an optional note, and your explicit consent (stored verbatim for audit) to receive a one-time WhatsApp message from us.
- Client engagements: when you become a paying client, the business and project details you share with us as part of the engagement, agreed separately in a Master Services Agreement.
Information collected automatically
- Cookies and analytics: we use Google Tag Manager (
GTM-TNK2J29K), Google Analytics 4 (G-WVF3TSEL3Q) and Meta Pixel (938966755334049) to understand how visitors use our site. This includes pages visited, time on page, approximate location (city / country level), device type, and referring source. - Server logs: when you visit the site, our hosting (AWS CloudFront + Lambda) records your IP address, user agent, and the URLs you request. We retain these for 7 days, then they are automatically deleted.
- Spam-prevention hashes: when you submit the contact form or subscribe, we hash your IP address with a daily-rotating salt (SHA-256, first 40 chars) for rate-limiting. We do not store your raw IP address alongside your submission.
How we use it
- To respond to enquiries you send through the contact form.
- To send the bi-weekly Pulse Digest email (only after you confirm via double opt-in).
- To send a one-time WhatsApp message when you opt in via the WhatsApp capture form — never a marketing list.
- To measure how the site is being used so we can improve it.
- To detect and block spam, abuse, and security threats.
- To meet our legal and regulatory obligations under Bangladesh law.
We do not sell your personal data. We do not share it with third parties for their independent marketing.
How long we keep it
| Data | Retention |
|---|---|
| Contact form submission | 3 years from last interaction, then deleted |
| Newsletter subscriber (active) | For as long as you remain subscribed |
| Newsletter subscriber (unsubscribed) | 30 days after unsubscribe, then deleted |
| WhatsApp opt-in | 90 days from opt-in, then deleted unless you become a client |
| Server access logs | 7 days |
| Analytics (GA4, Meta Pixel) | 14 months (Google’s default), then automatically purged |
| Client engagement records (post-contract) | 7 years (Bangladesh tax + corporate-record requirement) |
Who we share it with
We use a small number of carefully chosen third-party services. They process data on our behalf under their respective data-processing terms:
- Neon (Postgres hosting) — stores newsletter subscribers, contact submissions, WhatsApp opt-ins. Region: Asia-Pacific (Singapore).
- Resend (email delivery) — delivers transactional and newsletter emails to your inbox.
- AWS (CloudFront, Lambda, S3) — serves the website. Region: Asia-Pacific (Singapore).
- Google Analytics 4 + Google Tag Manager — anonymised usage analytics.
- Meta Pixel — measures the performance of any Facebook / Instagram advertising we run for ourselves or our clients (when you visit a page on our own site only).
We will share your personal information with law enforcement or government bodies only when legally required by a valid court order or regulatory request under Bangladesh law, and only the minimum necessary information.
Your rights
You can, at any time, ask us to:
- Access the personal data we hold about you.
- Correct data that is inaccurate or out of date.
- Delete your personal data — see our User Data Deletion page for the full process.
- Export your data in a portable format (CSV / JSON).
- Withdraw consent for any processing that relies on consent (e.g. newsletter, WhatsApp opt-in).
- Object to processing for direct marketing — one-click unsubscribe is in every email we send.
To exercise any of these rights, email us at info@publicpulse.com.bd. We respond within 30 days.
Cookies
We use cookies for analytics (GA4, GTM) and ad-conversion measurement (Meta Pixel). No cookies are used to personally identify you across other websites. You can disable cookies in your browser at any time without losing access to the site.
Security
We protect your data with:
- HTTPS / TLS for every page and API call.
- Encrypted database connections + at-rest encryption (Neon + AWS KMS).
- Honeypot fields and rate-limiting on every form to block bots.
- Strict access controls — only the agency owner has admin access.
- Secrets stored in AWS Systems Manager Parameter Store (encrypted), never in code.
Children
We do not knowingly collect personal data from anyone under 18. If you believe a child has submitted data to us, email info@publicpulse.com.bd and we will delete it.
International transfers
Our infrastructure is hosted in Singapore (AWS ap-southeast-1, Neon ap-southeast-1). When you submit data to us from outside Bangladesh, it is transferred and stored in Singapore.
Third-party login / OAuth
If you sign in to any service we run that uses Facebook Login, Google Login, LinkedIn, or another OAuth provider, we only receive the basic profile information you authorise (typically: name, email, profile picture, public profile URL). We do not request access to your friends list, private messages, contacts, or files. You can revoke our access at any time from the provider’s account settings, or by following our User Data Deletion instructions.
Changes to this policy
We’ll update this page if our practices change. The “Last updated” date at the top of this page always reflects the current version. Material changes will also be announced in the next bi-weekly newsletter and via a notice on the website for at least 14 days.
Complaints
If you believe we have mishandled your personal information, please contact us first at info@publicpulse.com.bd so we can put it right. You also have the right to raise a complaint with the relevant data-protection authority in your country.