Privacy Policy

Your privacy matters to us, and this policy is designed to be short on surprises. Surokkha Guide is an information website. We do not run accounts, forms, comments or a newsletter, and we do not ask for any identity information. This page explains the small amount of data that is processed when you visit, and what happens if you choose to email us.

Who we are

Surokkha Guide (surokkha.app) is an independent, unofficial English-language information website about vaccine registration, vaccination certificates and health records in Bangladesh. We are not affiliated with, endorsed by, or operated by the Government of Bangladesh, DGHS, a2i or the official Surokkha platform. The official portal, surokkha.gov.bd, has its own privacy practices, which this policy does not cover.

For privacy questions, you can contact us at hello@surokkha.app.

The key point: no personal data through forms

Surokkha Guide has no forms of any kind. We never collect, and have no way to collect, your National ID (NID) number, birth registration number, passport number, phone number, date of birth, one-time password (OTP) or vaccination certificate. You do not need to give us any personal information to read any page on this website.

A warning about scams

Never send us your NID, birth registration number, OTP, password or certificate. We do not need them, we cannot do anything with them, and we will never ask for them, by email, phone, SMS, messaging apps or social media. Anyone who contacts you claiming to be Surokkha Guide and asks for this information, or asks for money, is a scammer. Do not reply to them and do not share any codes you receive.

The same caution applies more widely: never share an OTP with anyone. Registration and certificate actions should only be carried out by you, on the official portal.

What information is processed

Server logs

Like almost every website, our web host automatically keeps standard server logs when pages are requested. These logs typically include your IP address, the type of browser and device (the "user agent"), the page or file requested, the referring page if your browser sends it, and the date and time. We use these logs only to keep the website secure, to detect abuse and to troubleshoot technical problems. Logs are kept for a limited period and then deleted or overwritten. We do not use them to build profiles of visitors.

Emails you choose to send us

If you email us, we receive your email address, your name if you include it, and whatever you write. We use this only to read and reply to your message, and, where relevant, to correct or improve a guide. Please keep your message to the minimum needed and do not include identity documents or health records.

Google Fonts

Our pages use web fonts loaded from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). When your browser loads these fonts, it connects to Google's servers, which means Google receives your IP address and basic browser information as part of delivering the font files. Google's handling of this data is governed by Google's own privacy policy. We do not receive any information from Google about you as a result.

Cookies and analytics

We do not set any cookies of our own, and we do not currently use analytics, advertising or tracking tools. Our cookie policy explains this in more detail.

How we use information

We use the limited information above only to operate and secure the website and to respond to your emails. We do not sell, rent or trade personal information. We do not use it for marketing, and we do not send newsletters.

Sharing

We do not share personal information with anyone, except with our hosting and email service providers to the extent needed to run the website and receive email, or where we are required to do so by law or a valid legal request.

Retention

Server logs are kept for a limited period for security and troubleshooting, then deleted. Emails are kept only as long as needed to deal with your message and any follow-up, such as a correction to a guide, and are then deleted. You can ask us to delete your emails sooner.

Security

The website is served over an encrypted HTTPS connection. Because the site is static and holds no user accounts or submitted data, there is very little personal information for anyone to misuse. We still take reasonable steps to protect the email inbox and hosting accounts we control.

Children

Our content includes guides for parents about childhood immunization, but the website is intended for adults. We do not knowingly collect information from children. If you believe a child has emailed us, please contact us and we will delete the message.

Your rights

You can ask us to tell you whether we hold any emails from you, to give you a copy, to correct them or to delete them. Simply email hello@surokkha.app from the same address. Depending on where you live, you may have additional rights under local data protection laws, and we will respect those rights.

Changes to this policy

If we ever introduce analytics, advertising or any other feature that processes more personal data, we will update this policy before doing so and ask for your consent where the law requires it. The "Last updated" date at the top of this page shows when it was last changed.

Related pages

You may also want to read our terms and conditions, our disclaimer and our advertising disclosure, or learn more about Surokkha Guide.