Privacy Notice

What personal information tnp.legal collects, why, who it is shared with, how long it is kept, and the choices you have.

This notice explains what personal information Tuhin & Partners collects through tnp.legal, why we collect it, who we share it with, how long we keep it and what you can ask us to do. It covers this website. Information you give us once we are acting for you is governed by our terms of engagement and by our professional duty of confidentiality, which is stricter than anything set out here.

Who is responsible

Tuhin & Partners, of Flat G2 (6th Floor), House # 94, Road # 10, Block # D, Niketan, Gulshan-1, Dhaka 1212, Bangladesh, decides how and why personal information submitted through this website is used. For anything in this notice, write to hello@tnp.legal.

What we collect, and when

We only collect what a particular action needs. We do not require an account to use any part of this site.

When you send an enquiry — your name, email address, and whatever you choose to write in the message, together with any organisation and telephone number you give.
When you request a quote — the same, plus the service area, industry, organisation type, timeline and description of the matter you provide.
When you book a consultation — your name and email address, which are required for every booking; the channel you choose and, where you choose a telephone or WhatsApp consultation, the number to call; and the adviser, date and time.
When you ask us to email you a publication — your name and email address, so we can send the file to you.
When you register for an event — your name and email address, which are required, together with the organisation and telephone number you may choose to add.
When you subscribe to the newsletter — your email address, and a record of your confirmation.
Automatically, on every visit — our server records the request: the page, the time, the browser's user-agent and the IP address it came from. These logs exist to keep the site running and secure.

We do not ask for, and you should not send us, identity documents, financial details or the confidential particulars of a dispute through this website. Please see our legal notice for why that matters.

Why we use it

We use the information for the purpose you gave it to us for, and we keep those purposes separate. Agreeing to one never signs you up to another.

Replying to an enquiry — answering you, and carrying out the conflict and client acceptance checks we have to do before we can act.
Consultation and booking messages — confirming a booking, sending the joining details, and sending reminders before it.
Sending a requested publication — emailing you the file you asked for, once.
Event emails — confirming your place, sending the joining details, reminding you the day before and shortly before the event begins, and sending a link to the recording afterwards if there is one. Every one of those emails carries a link that withdraws you from the event and stops the rest.
Newsletter — only if you have separately confirmed you want it.
Keeping the site working — security, preventing abuse of the forms, and diagnosing faults.
Meeting our own legal and regulatory obligations, including records we are required to keep.

Marketing consent is never assumed. Every marketing option on this site is a separate, unticked box, and leaving it unticked has no effect on anything else you have asked for.

Newsletter, and how to stop it

The newsletter is double opt-in: after you subscribe we email you a confirmation link, and you receive nothing further unless you click it. Every newsletter carries an unsubscribe link that works immediately and without logging in. You can also write to hello@tnp.legal and we will remove you.

A record of what you agreed to

When you give or withdraw consent we record what you consented to, the exact wording you were shown, and when. The record is kept so that we can show what you actually agreed to rather than what we assume you did. It is added to and never rewritten — withdrawing consent adds a withdrawal to the record rather than erasing the original.

Cookies

This site sets two cookies, both its own, and neither of them tracks you:

tnplegal-session — keeps your session while you move between pages.
XSRF-TOKEN — a security token that stops a form on this site being submitted from another site in your name.

Both are necessary for the site to work, and both expire on the ordinary schedule for cookies of that kind.

We do not use third-party analytics, advertising or social media tracking on this site. There is no Google Analytics, no advertising pixel and no embedded tracker. Nothing here builds a profile of you or follows you to other sites. That is also why you are not asked to dismiss a cookie banner — there is nothing to consent to.

If you apply for a job with us

An application is more than an enquiry, so it is worth being exact about it.

What we hold. Your name, your email address, a telephone number and a LinkedIn address if you give them, what you wrote about why you want the role, and your CV.

Where your CV is kept. Not on the public part of this website. It is stored on the server outside the area the web serves, it has no address anybody can visit, and it is opened by a colleague signed in to our admin with recruitment permission. It is not attached to the email that tells us you have applied, so it does not end up sitting in an inbox that may be read on a train or forwarded by accident.

Who sees it. The people deciding on the role. Nobody else here, and nobody outside the firm.

How long we keep it. Twelve months from the decision, so that we can come back to you if something more suitable opens. After that the record and the CV are both deleted automatically — not marked as deleted, removed. If you would rather we did not keep it that long, say so and we will delete it when the role is filled.

What you can ask for. A copy of everything we hold about your application, a correction to any of it, or its deletion, at any point. Write to hello@tnp.legal and it will be done.

Notes a colleague writes on your application are part of what we hold about you, and you may ask to see those too.

Counting, and what it is not

We do keep a count. Two of them:

How many times each page was read on each day. A number attached to a page and a date, and nothing else.
How many people arrived from each website on each day. The name of the website only — google.com, linkedin.com, perplexity.ai — never the address of the page you came from, because that address can carry information about you and the site's name cannot.

Neither count is capable of identifying you, and that is deliberate rather than incidental. There is no visitor identifier, no session, no IP address and no record of your browser in either of them. Two visits by you and one visit each by two people are the same thing to it. We keep them because they tell us which of our articles are useful and whether people are finding us, and we can do that with counts rather than with anything about you.

Videos

Some pages — usually a seminar or an event — carry a recording. Where that recording is hosted by YouTube or Vimeo, nothing is requested from them until you press play. Until then the page shows a still image and a button, and those companies do not know you are reading the page.

If you do press play, the video is loaded from that company and it receives your request in the same way it would if you were watching on their own site, including your IP address and information about your browser. We use YouTube's no-cookie address, which does not set tracking cookies until playback starts, but we do not control what they do after that and their terms apply to it rather than ours. The link beside every video lets you watch it on their site directly instead, if you would rather.

Recordings we host ourselves involve no other company at all.

Who we share it with

We do not sell personal information, and we do not share it for anyone else's marketing.

We share it only with those who need it to do what you asked:

Our hosting provider, which stores the site and its data on our instructions.
Our email delivery provider, which sends confirmations, booking messages, publication links and the newsletter.
Advisers within the firm who are dealing with your enquiry or consultation.
Where the law requires it, or to establish, exercise or defend legal claims.

These providers act on our instructions and are not permitted to use the information for their own purposes.

Information leaving Bangladesh

Our hosting and email providers may store or process information on servers outside Bangladesh. Where that happens we use providers who are contractually bound to keep the information confidential and to use it only as we instruct.

How long we keep it

Enquiries, quote requests and bookings — kept for 24 months from the last contact, then deleted, unless the matter became an engagement or we are required to keep it longer.
Newsletter subscriptions — kept until you unsubscribe, together with the record of your consent.
Publication download requests — the download link itself expires three days after it is issued; the request record is kept on the retention period above.
Event registrations — kept on the same 24-month period, so we can show who attended and answer questions about it afterwards. Withdrawing from an event deletes the registration immediately; the consent record of it remains, as below.
Consent records — kept for as long as we need to be able to show what was agreed, which may be longer than the underlying record.
Server logs — kept for a short period for security and diagnosis, then discarded.
Page counts — kept for two years so we can compare one period with another. They contain nothing about any person, so there is nothing in them to delete on request.

Where we are acting for you, the file is kept under our terms of engagement and our professional record-keeping obligations, which run longer than the periods above.

Keeping it safe

The site is served over an encrypted connection. Access to submitted information is restricted to people in the firm who need it, administrative access requires two-factor authentication, and changes to records are logged. No system is perfectly secure, but we take these measures seriously and review them.

What you can ask us to do

You can ask us to:

tell you what information we hold about you, and give you a copy;
correct anything inaccurate;
delete what we hold, where we are not required to keep it;
stop sending you marketing, at any time and without giving a reason.

Write to hello@tnp.legal. We may need to check who you are before we act, so that we do not disclose your information to someone else. We will respond as promptly as we can. If we cannot do what you ask — usually because we are required to keep a record — we will tell you why.

Children

This site is for businesses and their advisers and is not directed at children. We do not knowingly collect information from anyone under 18. If you believe we have, write to us and we will delete it.

Changes to this notice

We update this notice when what the site does changes. The date below is when it was last revised, and material changes will be described here rather than made silently.

Last revised: 3 August 2026. Earlier revisions expanded this notice to cover consultation booking, quote requests and publication downloads, and set out the position on cookies and analytics in full, then added the section on videos because pages can now carry a recording. This revision covers event registration, because events on this site now take registrations directly and send joining details, reminders and recordings by email, and sets out the two counts the site keeps and why neither can identify you.

Contact

Questions about this notice, or about anything the site does with your information: hello@tnp.legal, or write to us at Flat G2 (6th Floor), House # 94, Road # 10, Block # D, Niketan, Gulshan-1, Dhaka 1212, Bangladesh.