1. Introduction

Global Green International Energy (BD) Ltd. ("GGIE BD", "the Company", "we", "us", or "our") is committed to protecting the privacy and personal data of every individual who interacts with us — whether as a website visitor, business enquirer, investor, technology partner, project collaborator, employee, contractor, or supplier.

This Privacy Policy ("Policy") explains what personal data we collect, why we collect it, how we use it, with whom we share it, how we protect it, and what rights you have in relation to it.

We process personal data in accordance with the applicable laws of the People's Republic of Bangladesh and, where international engagements require it, we observe the principles established under internationally recognized data protection standards, including the General Data Protection Regulation (GDPR) of the European Union and applicable guidelines of the Organisation for Economic Co-operation and Development (OECD).

By using our website or engaging with GGIE BD in any capacity, you acknowledge this Policy and consent to the processing of your personal data as described herein.

2. Information We Collect

2.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you:

• Submit an enquiry through our website contact forms
• Request project documentation, feasibility reports, or investor materials
• Register for events, webinars, or conferences organized or co-hosted by GGIE BD
• Apply for employment, internships, or consultancy roles
• Enter into correspondence via email or post
• Execute agreements, MOUs, or project-related documentation
• Participate in KYC or due diligence processes

Categories of personal data collected include:

• Identity Data: Full name, job title, professional designation, gender (where required by applicable regulations)
• Contact Data: Email address, telephone number, postal address, country of residence or domicile
• Professional Data: Organization name, role, sector, and relevant professional credentials
• Financial and Corporate Data: Company registration details, ownership structure, funding sources, and financial references (for investors and partners undergoing due diligence)
• Government-Issued Identification: Passport, national ID, or equivalent documents where required for KYC/AML compliance
• Communication Records: Records of correspondence, meeting notes, and project discussions

2.2 Information Collected Automatically

When you visit our website, we may automatically collect certain basic technical data through standard server logs to ensure website functionality and security. This includes:

• IP address and approximate geographic location

• Browser type and version

• Operating system and device type

• Time and date of visits

This data is strictly used to monitor website performance and detect security threats. We do not use cookies or tracking technologies to monitor your behavior.

2.3 Information from Third Parties

We may receive personal data from:

• Publicly available sources (company registries, regulatory filings, professional directories)
• Our business partners, investors, and collaborators who introduce prospective counterparties
• Reference providers in the context of due diligence or employment screening
• Government agencies and regulatory bodies where legally required
• International development finance institutions or bilateral agencies in the context of co-financed projects

3. How We Use Your Information

We use your personal data for the following purposes:

3.1 Business Development and Stakeholder Engagement

• Responding to enquiries and proposals from investors, technology partners, government agencies, and development organizations
• Managing relationships with existing and prospective clients, contractors, and collaborators
• Preparing and distributing project documentation, investment presentations, and feasibility materials
• Facilitating negotiations, due diligence, and execution of agreements

3.2 Regulatory Compliance and KYC/AML

• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) screening as required under applicable Bangladeshi law and international best practice
• Responding to requests from regulatory authorities, government ministries, or law enforcement agencies where legally mandated
• Maintaining records in compliance with applicable retention obligations

3.3 Project Operations

• Managing project stakeholders, including landowners, community representatives, government counterparts, and technical advisors
• Processing data required for environmental and social impact assessments
• Administering procurement processes and contractor management

3.4 Employment and Human Resources

• Processing applications for employment, consultancy, or internship positions
• Managing employment relationships, payroll, performance, and training records
• Complying with labor law obligations in Bangladesh

3.5 Website Operations and Security

• Analyzing website traffic and user behavior to improve performance and content
• Detecting and preventing fraud, unauthorized access, and cybersecurity threats
• Responding to technical support requests

3.6 Marketing and Communications

• Sending project updates, newsletters, and event invitations to individuals who have opted in to such communications
• Publishing case studies, impact reports, and thought leadership materials (using anonymized or consented data only)

4. Legal Basis for Processing

Where internationally recognized data protection frameworks apply to our processing of personal data, we rely on the following legal bases:

Where consent is the applicable legal basis, you have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. International Data Transfers

GGIE BD operates as a Bangladesh-incorporated entity with active engagement across international markets, including Japan, South Korea, Singapore, Europe, and multilateral development institutions. In the course of our operations, personal data may be transferred to and processed in countries outside Bangladesh, including:

• Partner organizations and technology firms in countries with which GGIE BD maintains active project or business relationships
• International development finance institutions including those in OECD member states
• Cloud service providers and digital infrastructure providers whose servers may be located in various jurisdictions

Where personal data is transferred internationally, we implement appropriate safeguards to protect your data, including:

• Contractual data protection clauses with recipients
• Transfers only to organizations committed to equivalent data protection standards
• Application of GDPR Standard Contractual Clauses where transfers involve EU residents or EU-based counterparties

6. Sharing and Disclosure of Your Data

GGIE BD does not sell, rent, or trade personal data to third parties for commercial purposes. We may share your data in the following circumstances:

6.1 Service Providers and Processors

We engage trusted third-party service providers who process data on our behalf, including IT infrastructure providers, legal and financial advisors, due diligence service providers, and translation and interpretation services. All such processors are bound by data processing agreements requiring them to protect your data and use it only for specified purposes.

6.2 Business Partners and Counterparties

In the context of project development, investment negotiations, or technology partnerships, we may share relevant professional information about contact persons with counterparties, subject to appropriate confidentiality obligations.

6.3 Government and Regulatory Authorities

We may disclose personal data to competent authorities — including but not limited to the Bangladesh Financial Intelligence Unit (BFIU), the Bangladesh Securities and Exchange Commission (BSEC), the Ministry of Environment Forest and Climate Change (MoEFCC), and law enforcement agencies — where required by applicable law or court order.

6.4 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of the Company, personal data held by GGIE BD may be transferred to the successor entity, subject to equivalent privacy protections.

6.5 Professional Advisors

We share relevant data with our legal counsel, auditors, tax advisors, and other professional advisors who are subject to professional confidentiality obligations.

7. Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable legal, regulatory, and contractual obligations. Specific retention periods are determined by the nature of the relationship:

Upon expiry of the applicable retention period, data is securely deleted or anonymized.

8. Data Security

GGIE BD implements appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, destruction, and accidental loss. These measures include:

• Encryption of data in transit and at rest where technically feasible
• Access controls restricting data access to authorized personnel on a need-to-know basis
• Regular security assessments of our IT infrastructure
• Staff training on data protection and information security obligations
• Incident response procedures for detection and reporting of data breaches

In the event of a data breach likely to result in a risk to your rights and freedoms, GGIE BD will notify affected individuals and, where applicable, relevant supervisory authorities, in accordance with applicable legal requirements.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device by websites you visit. We use cookies and similar technologies to operate and improve our website, analyze traffic, and deliver relevant content.

9.2 Types of Cookies We Use

9.3 Managing Cookies

You can control and manage cookies through your browser settings. Disabling certain cookies may affect the functionality of this website. Where required by applicable law, we will seek your consent before placing non-essential cookies.

10. Your Data Protection Rights

Depending on your jurisdiction and applicable law, you may have the following rights in relation to your personal data:

10.1 Right of Access

You may request confirmation of whether GGIE BD processes your personal data and, if so, request a copy of that data along with information about how it is processed.

10.2 Right to Rectification

You may request correction of inaccurate or incomplete personal data we hold about you.

10.3 Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful, subject to applicable legal retention obligations.

10.4 Right to Restrict Processing

You may request that we limit the processing of your data in certain circumstances, including where you contest the accuracy of the data or object to its processing.

10.5 Right to Data Portability

Where processing is based on consent or contract performance and is carried out by automated means, you may request that we provide your data in a structured, machine-readable format.

10.6 Right to Object

You may object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests, subject to applicable legal provisions.

10.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

10.8 How to Exercise Your Rights

Submit written requests to:

Email: contact@ggiebd.com

We will respond to all verified requests within 30 days. Where requests are complex or numerous, we may extend this period by a further 60 days with prior notification.

11. Children's Privacy

Our website and services are directed at businesses, investors, government bodies, and adult professionals. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will take prompt steps to delete it.

12. Links to Third-Party Websites

Our website may contain links to third-party platforms including government portals, international development organization websites, and partner organizations. We are not responsible for the privacy practices of those external sites. We encourage you to review the privacy policies of any third-party websites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or business operations. Material changes will be notified through prominent notice on our website. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Continued use of our website following publication of changes constitutes acceptance of the updated Policy.

14. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data:

Global Green International Energy (BD) Ltd. Incorporation Certificate No. C-207315/2025 Registered in the People's Republic of Bangladesh

Email: contact@ggiebd.com

This Privacy Policy was last reviewed and updated on 06 June 2026.

GGIE BD is committed to responsible stewardship of personal data in support of transparent and trustworthy international engagement.