Privacy & Policy
Introduction
Welcome to Orbit Academy. We are an online educational platform based in Bangladesh, providing digital books, course materials, and study resources exclusively for SSC and HSC students.
This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit orbitacademyonline.com, create an account, purchase digital products, or use any of our services.
By accessing or using our platform, you agree to the practices described in this policy. If you do not agree, please discontinue use immediately.
Information We Collect
A. Information You Provide Directly
- Full name, email address, and phone number
- Billing address and delivery address (if applicable)
- Login credentials (username and encrypted password)
- Profile photo (optional) and support communications
B. Information Collected Automatically
- IP address and approximate geographic location
- Browser type, operating system, and device information
- Pages visited, time spent, and click behavior on our platform
- Referral URLs and session login timestamps
C. Payment Transaction Information
- Transaction ID and order reference numbers
- Payment method type (bKash, Nagad, Rocket, Card, etc.)
- Purchase amount, date, and payment status
How We Use Your Information
| Purpose | Details |
|---|---|
| Account Management | Creating and managing your user account |
| Order Processing | Verifying purchases and granting access to digital content |
| Payment Verification | Confirming transactions and issuing digital receipts |
| Customer Support | Responding to queries, complaints, and technical issues |
| Service Improvement | Analyzing usage to improve content and performance |
| Communications | Order confirmations, product updates, newsletters |
| Security | Detecting and preventing fraud and unauthorized access |
| Legal Compliance | Meeting obligations under Bangladesh law |
Payment Processing & SSLCommerz
All payments are processed through SSLCommerz, a leading Payment Gateway authorized by Bangladesh Bank.
SSLCommerz Integration Details
When you initiate a payment, you are redirected to SSLCommerz's secure payment environment:
- Credentials entered directly on SSLCommerz's PCI-DSS compliant servers
- We never see, store, or process card numbers, CVV, PIN, or wallet passwords
- All transactions protected by 256-bit SSL encryption
- Supports bKash, Nagad, Rocket, Upay, DBBL Nexus Pay, Visa, Mastercard and more
- We receive only: Transaction ID, amount, status, and payment method type
Data Storage & Security
- Data stored on secure servers with restricted access controls
- Passwords stored using strong one-way cryptographic hashing (bcrypt)
- Website protected with HTTPS/SSL encryption
- Regular security audits and vulnerability assessments conducted
- Access to customer data limited to authorized personnel only
- Firewalls and intrusion detection systems in place
Data Retention: We retain your personal information for as long as your account is active. Transaction records are retained for a minimum of 5 years as required by Bangladesh financial regulations. In the event of a data breach, we will notify you via your registered email in compliance with applicable law.
Sharing of Your Information
We do not sell, trade, or rent your personal information to third parties. We may share data only in these limited circumstances:
- SSLCommerz: Order details required to process your payment
- Service Providers: Trusted partners (hosting, email) under confidentiality agreements
- Legal Compliance: When required by Bangladesh law or court order
- Business Transfer: In case of merger or acquisition under the same privacy protections
- Protection of Rights: To protect the safety of our platform, users, or the public
Cookies & Tracking Technologies
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Login sessions, cart, and checkout functionality | Session |
| Preference | Language, class level, display settings | 1 Year |
| Analytics | Platform usage (Google Analytics) | 2 Years |
| Security | Detecting fraudulent login attempts | Session |
You can control or disable cookies in your browser settings. Disabling essential cookies may affect platform functionality including checkout.
Digital Products Policy
- Upon successful payment, access or download link delivered to your email or dashboard
- Digital products licensed for personal, non-commercial educational use only
- Sharing, redistributing, reselling, or reproducing content is strictly prohibited
- Unauthorized duplication violates copyright law of Bangladesh
- Download links may be time-limited or usage-restricted for security purposes
- We reserve the right to revoke access if misuse or policy violation is detected
Refund & Cancellation
- Digital Books / PDFs: No refunds once the download link has been accessed
- Online Courses: Requests considered within 24 hours if no content has been accessed
- Failed Transactions: Amounts refunded by SSLCommerz within 5–7 business days
- Duplicate Payments: Contact us within 48 hours with your transaction ID
- Technical Issues: Access provided or full refund issued if the error is on our part
See our full Refund Policy page for complete details.
Children's Privacy (Students Under 18)
- We do not knowingly collect sensitive data from users under 13 without parental consent
- SSC/HSC students under 18 are encouraged to use this platform with parental awareness
- Parents/guardians may contact us to review, modify, or delete their child's data
- No third-party advertisements targeting minors are displayed on our platform
- No user data is sold to advertisers or marketing companies
Your Rights as a User
- Right to Access: Request a copy of your personal information we hold
- Right to Correction: Request correction of inaccurate or incomplete data
- Right to Deletion: Request account and data deletion (subject to legal retention)
- Right to Withdraw Consent: Opt out of marketing emails at any time
- Right to Data Portability: Request data in structured, machine-readable format
- Right to Complain: Lodge a complaint with relevant Bangladesh regulatory authority
We will respond to all valid requests within 30 days.
Changes to This Policy
We reserve the right to update this Privacy Policy at any time. When we make material changes we will:
- Update the "Last Updated" date at the top of this page
- Send a notification to your registered email address
- Display a prominent notice on our platform for at least 14 days
Continued use of our platform after the effective date constitutes acceptance of the revised policy.
Contact Us
Questions, concerns, or data requests? Reach us at: