Privacy Policy

LABU FLUTES | Comprehensive Global Privacy & Legal Data Policy

Version: 3.1 | Security Protocol: SSL/TLS 1.3 | Revision Date: December 21, 2025

This document serves as the master agreement between LABU FLUTES and the User. Our protocols are designed to exceed the requirements of the Bangladesh Digital Security Act and align with the spirit of the GDPR (EU) and CCPA (USA) for our international clientele.

1. Absolute Data Limitation & “Zero-Retention” of Financials

To protect the company from financial liability, LABU FLUTES operates under a Zero-Retention Policy regarding sensitive payment data.

• Infrastructure: Our website acts only as a secure “tunnel.” All payment processing is outsourced to SSL Commerz (PCI-DSS Tier 1).

• Exclusion of Liability: LABU FLUTES shall not be held liable for any unauthorized access or breach occurring at the payment gateway level or within the user’s banking institution.

2. Cybersecurity Disclaimer & “Safe Harbor” (International Standard)

While we implement Secure Socket Layer (SSL) encryption and daily malware scans, the “perfect security” of the internet does not exist.

• The “No-Warranty” Clause: Users acknowledge that they provide information at their own risk. LABU FLUTES is not liable for data loss resulting from Force Majeure (natural disasters, internet-wide outages) or Advanced Persistent Threats (APTs) beyond commercially reasonable control.

• Breach Notification: In the event of a verified data breach, we commit to notifying affected users and the Cyber Security Unit (Bangladesh) within 72 hours of discovery.

3. Third-Party “Processors” & International Transfers

To fulfill your order, your data must “travel.”

• Logistics Partners: Your name, phone, and address are shared with international couriers (e.g., DHL, FedEx, Aramex). These entities are independent data controllers with their own privacy protocols.

• Cross-Border Consent: By purchasing, you consent to your data being transferred to and processed in Bangladesh and any transit hubs required for international shipping.

4. Intellectual Property & Digital Content

To prevent legal disputes regarding the “content” on our site:

• Copyright Protection: All text, flute designs, audio samples, and images on labuflutes.com are the exclusive property of LABU FLUTES (est. 1996). Any unauthorized scraping or reproduction will be met with immediate legal action.

• User-Generated Content: If you post a review or tag us in a photo, you grant LABU FLUTES a non-exclusive, royalty-free license to use that content for marketing purposes globally.

5. Mandatory Dispute Resolution (Anti-Lawsuit Clause)

To protect the business from frivolous or predatory legal actions, all users agree to the following:

• Mandatory Mediation: Before filing any legal claim, the user must enter into a 30-day “Good Faith Negotiation” period with LABU FLUTES management.

• Arbitration: If mediation fails, all disputes shall be settled by Binding Arbitration in Dhaka, Bangladesh, rather than in a general court of law. This significantly reduces legal costs for the business.

• Class Action Waiver: You agree to resolve disputes on an individual basis and waive any right to participate in a class-action lawsuit against LABU FLUTES.

6. Children’s Privacy (COPPA Compliance)

LABU FLUTES does not knowingly collect data from children under the age of 18 without parental consent. If we discover that a minor has provided us with personal information, we will delete it from our servers immediately to maintain international compliance.

7. Data Retention & “The Right to be Forgotten”

• Retention: We keep transaction data (Invoices) for up to 7 years as required by Bangladesh Tax Law.

• Deletion: Non-essential data (marketing emails/tracking) can be deleted upon request. Contact info@labuflutes.com.bd with the subject line “Formal Data Erasure Request.”