Privacy Notice

The Institute of Policy Dynamics (IPD) is the organisation responsible for the personal data described in this notice. IPD is based at C-9, BAEC Housing, Amtoli, Mohakhali, Dhaka, Bangladesh.

Privacy requests may be sent to info@instituteofpolicydynamics.com or contact@instituteofpolicydynamics.com.

This notice covers the public IPD website, direct correspondence with IPD, and restricted IPD services such as the annotation and administration platforms. A project may publish an additional notice where its data practices differ.

• Website request data: IP address, browser and device information, requested URL, timestamps, and diagnostic or security logs created by hosting infrastructure.
• Correspondence: your name, email address, organisation, message, and any information you choose to send to an IPD address.
• Restricted-account data: name, email address, password hash, access role, account timestamps, session information, and records needed to administer access.
• Research-service activity: assignments, annotations, quality-review records, contribution statistics, and related audit data created while using a restricted research tool.

Please do not send sensitive personal data unless IPD has requested it for a stated purpose and provided an appropriate collection notice.

As of the date above, the Join and Subscribe forms on the public website are demonstrators only. Submitting either form changes what appears in your browser; it does not send the entered information to IPD or store it in an IPD database.

IPD will update this notice and place a clear notice at the point of collection before either form is connected to a live inbox, mailing list, or applicant system.

Depending on the service and context, IPD uses personal data to:

• respond to enquiries and manage professional relationships;
• create accounts, authenticate users, and administer access;
• operate research workflows and attribute contributions;
• protect systems, investigate misuse, and maintain service reliability;
• meet legal, governance, record-keeping, and audit obligations; and
• send communications you have specifically requested.

IPD uses consent where consent is required and otherwise processes data only as needed to provide a service you requested, protect people and systems, maintain a required institutional record, or meet an applicable legal obligation. We do not sell personal data or use it for behavioural advertising.

The public information pages do not currently use advertising or analytics cookies. Restricted services use essential, HTTP-only session cookies after login. Details, including their duration, are in the Cookie Notice.

IPD uses service providers for hosting, databases, security, email, and technical operations. They may process limited personal data on IPD’s instructions and only as needed to provide their services. Current infrastructure includes Vercel for website hosting and Neon for restricted-service database hosting.

A provider may process data outside Bangladesh. Where applicable law requires safeguards, localization, or an approved transfer mechanism, IPD will apply the required arrangement before transferring covered personal data.

IPD may also disclose information where required by law, to protect a person or system from harm, or as part of a properly governed organisational transition. We do not give personal data to funders or commercial partners for their own marketing.

IPD keeps personal data only for as long as it is needed for the stated purpose, system security, research integrity, governance, or a legal obligation. Session cookies expire after the periods stated in the Cookie Notice. Account and contribution records may be retained while access remains active and for a reasonable audit period afterward.

Retention periods may differ where preserving a research record is necessary. In that case, IPD will minimize or de-identify personal data where practical.

IPD uses access controls, password hashing, signed session tokens, encrypted transport, restricted administrative permissions, and operational logging appropriate to the service. No internet service can guarantee absolute security. Please report a suspected incident promptly to info@instituteofpolicydynamics.com.

Subject to the Personal Data Protection Act, 2026 and other applicable law, you may ask IPD to confirm whether it holds your personal data and to provide access, correct inaccurate data, supply portable data where applicable, withdraw consent, object to or restrict certain processing, or delete data that no longer has a lawful reason to be retained.

Send a request from an address IPD can reasonably verify. We may ask for limited information to confirm identity and protect the data from unauthorized disclosure. If we cannot fulfil a request, we will explain why unless the law prevents us from doing so.

The website is not directed to children under 16, and IPD does not knowingly collect their personal data through the public site. A research project involving minors will use a project-specific protocol, consent process, and ethics review appropriate to the work.

IPD may revise this notice when its services or legal obligations change. The date at the top shows the latest revision. Material changes will be identified clearly on this page.

Questions or requests may be sent to info@instituteofpolicydynamics.com. Postal correspondence may be sent to C-9, BAEC Housing, Amtoli, Mohakhali, Dhaka, Bangladesh.