Privacy Policy

Last updated: September 19, 2026. Applies to visitors and subscribers of the Bangladesh edition of Kredua.

At Kredua we handle your personal data with transparency and only for the purposes described here. This policy applies to the Bangladesh edition of the site (pages under /bd/ and posts whose address begins with “bd-“), to the quizzes reachable from those pages and to the emails we send to subscribers who signed up there.

Bangladesh does not yet have a comprehensive personal data protection statute in force. We therefore apply, as our minimum standard, the principles of the personal data protection framework prepared by the ICT Division of the Government of Bangladesh, the provisions on unlawful access to and disclosure of personal information in the Cyber Security Ordinance, 2025 (which replaced the Cyber Security Act, 2023 and the Digital Security Act, 2018), the guidelines of Bangladesh Bank on the confidentiality of customers’ financial information and, because the operator of the site is established in Brazil, the Brazilian General Data Protection Law (LGPD, Law No. 13.709/2018). Where these rules differ, we apply the one that protects you more.

1. Who is responsible for your data

RR Digital (trading as Kredua), CNPJ , with its address at Rua Balbino Bento da Silva, 02, União dos Palmares/AL, CEP 57800-000, Brazil. Contact: [email protected].

Data protection officer: [email protected]. You can write to this address about anything related to your data or to exercise your rights.

2. What data we collect and where it comes from

  • Data you give us: name, email address and, only in forms that ask for it, mobile number, when you complete a quiz, subscribe to our recommendations or write to us through the contact form. Also the answers you give in the quizzes (for example the amount you are looking for or your income range), which do not include your NID number, your TIN, account numbers or any banking credentials.
  • Browsing data: IP address, approximate country, device and browser type, pages visited, source of the visit (UTM parameters) and identifiers stored in cookies or similar technologies, as described in section 11.
  • Email interaction data: opens, clicks and unsubscriptions, when you receive our communications.

We do not collect sensitive data and we do not consult the Bangladesh Bank Credit Information Bureau (CIB) or your credit history. The data you enter on a bank’s page when applying for a product is processed by that bank, not by Kredua.

3. Why we use your data

  • To run the site and the quizzes: show you content, compute the quiz recommendation and remember your preferences.
  • To send you recommendations by email about credit cards, loans and money, only with your consent, given by ticking the box in the quiz or the form. You can withdraw it at any time from the unsubscribe link in every email.
  • To answer your questions sent through the contact form or by email.
  • To measure and improve the site with aggregated visit and performance statistics, based on your consent to analytics cookies where required.
  • To display advertising and measure its performance, including personalised advertising by third parties, based on your consent to advertising cookies.
  • To prevent fraud, keep the site secure and comply with legal obligations and lawful requests from competent authorities.

Providing your data is voluntary. If you do not provide it, we cannot email you the quiz recommendation or answer your question, but you can keep reading the site.

4. Automated decisions and profiling

The quizzes apply simple rules (for example, the amount you indicate determines which review we show you). We do not take decisions with legal effects or that significantly affect you; the approval of any product is always decided by the bank. With your consent, advertising platforms may build profiles to personalise ads; you can object through your browser settings and your Google account.

5. Who we share data with

We do not sell your data. We share it only with providers that deliver services to us and act on our instructions under contracts that oblige them to use the data only for those services and to apply security measures:

  • Email delivery: MailerSend (sending platform) and our own email automation system, which stores your name, email and the interactions with the messages.
  • Hosting and infrastructure: OVH (servers in Canada and Europe) and Cloudflare (content delivery, security and DNS).
  • Measurement and advertising: Google (Google Ad Manager/AdSense, Google Analytics, Google Tag Manager) and Meta (pixel and Conversions API), only when you accept the corresponding cookies. When we send a conversion event to these platforms from our server, the email address is transmitted as an irreversible hash.
  • Authorities and third parties under a legal obligation, when a law or a court order requires it.

The banks whose pages we link to are independent controllers: when you tap “Go to the official website” you leave Kredua and the bank’s privacy policy applies. We do not send them your data.

6. International transfers

The operator is established in Brazil and our providers process data in Brazil, Canada, the United States and the European Union. Your data therefore leaves Bangladesh. We protect it through contractual clauses with each provider, encryption in transit and at rest, and access restricted to staff who need it. By accepting this policy you expressly consent to the international transfer of your data for the purposes described. You can ask the data protection officer for a copy of the safeguards applied.

7. How long we keep data

  • Email subscription data: while you remain subscribed and up to 24 months after your last interaction; after you unsubscribe, we keep your address in a suppression list only to avoid writing to you again.
  • Quiz answers and the associated contact data: 24 months from the last interaction.
  • Contact form messages: 12 months after the reply.
  • Technical and security logs: up to 12 months.
  • Cookie data: for the periods stated in section 11.
  • After these periods the data is deleted or anonymised, unless it must be kept, blocked, to meet legal obligations.

8. Your rights

You can at any time ask us to confirm whether we process your data, to access it, to correct incomplete or inaccurate data, to delete it, to restrict or object to its processing, to receive a copy in a portable format and to withdraw your consent without affecting the lawfulness of prior processing. Write to [email protected] stating the right you are exercising, your name and the email you registered with; if we have reasonable doubts about your identity, we may ask you to confirm it. We answer within 15 days and the exercise of these rights is free of charge.

If you believe we have not handled your request correctly, you can complain to the competent authority in Bangladesh under the Cyber Security Ordinance, 2025 and, for the operator, to the Brazilian National Data Protection Authority (ANPD).

9. Minors

Kredua’s content and quizzes are intended for people aged 18 or over. We do not knowingly collect data from minors. If we identify a record belonging to a minor we delete it; if you are a parent or guardian and believe a minor has given us data, write to the data protection officer.

10. Security

We apply technical and organisational measures appropriate to the risk: TLS encryption on every connection, role-based access control, encrypted backups, access logging and periodic review of providers. No system is infallible; if an incident affecting your data occurs, we will inform you and the competent authorities within the periods that the applicable law establishes.

11. Cookies and similar technologies

When you first visit we show a cookie notice. We use strictly necessary cookies (to remember your cookie choice, keep the session and protect against abuse through Cloudflare), preference cookies (an anonymous visitor and session identifier and the source of the visit, for up to 30 days), analytics cookies (Google Analytics, up to 2 years) and advertising cookies (Google Ad Manager/AdSense and Meta, up to 13 months). Google, as a third-party vendor, uses cookies to serve ads based on prior visits to this and other websites; you can opt out of personalised advertising at adssettings.google.com. You can also block or delete cookies in your browser settings; refusing non-essential cookies does not prevent you from browsing the site.

12. Commercial emails

We only email people who have agreed to it. Every message identifies the sender, carries a one-click unsubscribe link and a List-Unsubscribe header; the unsubscription takes effect within 24 hours at most. Our emails inform you about reviews and recommendations: they never announce approvals, granted limits or offers in your name, and they never ask for passwords, OTP codes or payments.

13. Changes to this policy

We may update this policy to reflect legal or service changes, including the entry into force of a personal data protection law in Bangladesh. The current version is always published on this page with its date; if a change is relevant to data we already hold, we will tell you by email.

14. Contact

For any question about this policy or your data: data protection officer, [email protected]; or by post to RR Digital, Rua Balbino Bento da Silva, 02, União dos Palmares/AL, CEP 57800-000, Brazil.

Last updated: 19/09/2026