Skip to main content
GEBAA — GEB Alumni Association, SUSTGEBAASUST

Legal

Privacy Policy

Last updated: 20 September 2026

This Privacy Policy explains what personal information GEB Alumni Association, SUST (GEBAA) collects through this website, how we use it, and how it is protected — including during online membership fee payments.

1. Information We Collect

When you register for membership, we collect:

  • Identity details: full name, username, and password (stored as a secure hash, never in plain text).
  • Contact details: email address, phone number, and optionally a WhatsApp number.
  • Address details: your present address and, optionally, your permanent address.
  • Background details you choose to provide: nationality, profession, graduating batch, and education history.
  • Identity verification details: your National ID or Passport number, if you choose to provide it, used solely for member verification.
  • Payment-related details processed by SSLCommerz on your behalf (see Section 3 below) — we do not collect or store your card or mobile banking credentials ourselves.

2. How We Use Your Information

  • To create and manage your GEBAA membership account.
  • To send account confirmation, membership status updates, and event notices to your email address.
  • To display an appropriate public alumni profile (name, batch, education, publications, awards, experience) if your account is approved — sensitive details such as your NID/Passport number, phone number, and full address are never shown on public pages.
  • To verify your identity as a genuine GEB alumnus/alumna or eligible supporter when reviewing membership applications.
  • To maintain records required for GEBAA's own internal administration and financial record-keeping of membership dues.

3. Payment Security

All online membership fee payments on this website are processed by SSLCommerz, a PCI-DSS compliant payment services provider. When you pay your membership fee, you are redirected to SSLCommerz’s own secure hosted checkout page to enter your card, mobile banking, or internet banking details.

GEBAA never sees, collects, or stores your card number, CVV, mobile banking PIN, or any other payment credential. We only receive a transaction status (paid, failed, or cancelled) and a transaction reference ID from SSLCommerz, which we use to activate your membership and keep your order history up to date. This deployment of the website uses SSLCommerz’s sandbox (test) environment, so no real payment data is transmitted or processed while it runs in that mode.

4. Cookies

This website uses a small number of essential cookies to keep you signed in (a session cookie) and to protect the site against abuse (basic rate-limiting of login/registration attempts). We do not use third-party advertising or tracking cookies. The SSLCommerz checkout page you are redirected to during payment is operated by SSLCommerz and may set its own cookies under its own privacy policy, which is separate from this one.

5. Who Can See Your Information

  • Only you can see your NID/Passport number, phone number, WhatsApp number, present and permanent address, and full email address — visible on your own account page and, for administrative purposes, to authorized GEBAA administrators.
  • If your account is approved, your name, batch, profession, education, publications, awards, and experience may appear on your public member profile.
  • We do not sell, rent, or trade your personal information to third parties.
  • We may disclose information if required by law or to protect the rights and safety of GEBAA or its members.

6. Data Retention

We retain your account information for as long as your membership record exists, or as needed for GEBAA’s administrative and financial record-keeping. If you delete your account (see Section 7 below), your profile details, education, publications, awards, experience, blog posts, and forum activity are permanently removed. Your order/payment history is retained — with your personal details disassociated from it — for GEBAA’s financial record-keeping, consistent with standard accounting practice for processed payments.

7. Your Choices & Rights

You can review and update most of your profile information at any time from your account page. Optional fields (permanent address, nationality, WhatsApp, profession, NID/Passport number) can be left blank if you prefer not to share them.

  • Data portability: the “Download My Data” button in the Privacy & Your Data section of your account page gives you a JSON file containing your profile details, education, publications, awards, experience, order history, forum posts, and blog posts — everything GEBAA holds about you, in a portable format you can keep or transfer elsewhere.
  • Erasure: the “Delete My Account” option in the same section (password-confirmation required) permanently removes your profile, education, publications, awards, experience, blog posts, and forum posts/comments. As described in Section 6 above, your order/payment history is kept, disassociated from your personal details, for financial record-keeping.
  • Correction: you can update most fields directly from your account page; for anything you can't self-service, contact us using the details in Section 8.

8. Contact

Questions about this Privacy Policy or your personal data can be sent to info@gebaa-sust.org.