This notice explains what personal information Tuhin & Partners collects through tnp.legal, why we collect it, who we share it with, how long we keep it and what you can ask us to do. It covers this website. Information you give us once we are acting for you is governed by our terms of engagement and by our professional duty of confidentiality, which is stricter than anything set out here.
Who is responsible
Tuhin & Partners, of Flat G2 (6th Floor), House # 94, Road # 10, Block # D, Niketan, Gulshan-1, Dhaka 1212, Bangladesh, decides how and why personal information submitted through this website is used. For anything in this notice, write to hello@tnp.legal.
What we collect, and when
We only collect what a particular action needs. We do not require an account to use any part of this site.
- When you send an enquiry — your name, email address, and whatever you choose to write in the message, together with any organisation and telephone number you give.
- When you request a quote — the same, plus the service area, industry, organisation type, timeline and description of the matter you provide.
- When you book a consultation — your name and email address, which are required for every booking; the channel you choose and, where you choose a telephone or WhatsApp consultation, the number to call; and the adviser, date and time.
- When you ask us to email you a publication — your name and email address, so we can send the file to you.
- When you register for an event — your name and email address, which are required, together with the organisation and telephone number you may choose to add.
- When you subscribe to the newsletter — your email address, and a record of your confirmation.
- Automatically, on every visit — our server records the request: the page, the time, the browser's user-agent and the IP address it came from. These logs exist to keep the site running and secure.
We do not ask for, and you should not send us, identity documents, financial details or the confidential particulars of a dispute through this website. Please see our legal notice for why that matters.
Why we use it
We use the information for the purpose you gave it to us for, and we keep those purposes separate. Agreeing to one never signs you up to another.
- Replying to an enquiry — answering you, and carrying out the conflict and client acceptance checks we have to do before we can act.
- Consultation and booking messages — confirming a booking, sending the joining details, and sending reminders before it.
- Sending a requested publication — emailing you the file you asked for, once.
- Event emails — confirming your place, sending the joining details, reminding you the day before and shortly before the event begins, and sending a link to the recording afterwards if there is one. Every one of those emails carries a link that withdraws you from the event and stops the rest.
- Newsletter — only if you have separately confirmed you want it.
- Keeping the site working — security, preventing abuse of the forms, and diagnosing faults.
- Meeting our own legal and regulatory obligations, including records we are required to keep.
Marketing consent is never assumed. Every marketing option on this site is a separate, unticked box, and leaving it unticked has no effect on anything else you have asked for.
Newsletter, and how to stop it
The newsletter is double opt-in: after you subscribe we email you a confirmation link, and you receive nothing further unless you click it. Every newsletter carries an unsubscribe link that works immediately and without logging in. You can also write to hello@tnp.legal and we will remove you.
A record of what you agreed to
When you give or withdraw consent we record what you consented to, the exact wording you were shown, and when. The record is kept so that we can show what you actually agreed to rather than what we assume you did. It is added to and never rewritten — withdrawing consent adds a withdrawal to the record rather than erasing the original.
Cookies and privacy choices
Before any optional integration is allowed, this site may set two necessary cookies, both its own, and neither of them tracks you:
- tnplegal-session — keeps your session while you move between pages.
- XSRF-TOKEN — a security token that stops a form on this site being submitted from another site in your name.
Both are necessary for the site to work, and both expire on the ordinary schedule for cookies of that kind. Necessary cookies cannot be switched off through the site.
The privacy-choice panel stores your selection in your own browser, not in our database. It lets you decide separately whether third-party event videos may load after you press play and whether Meta Pixel may measure visits for advertising. If you choose necessary cookies only, no YouTube or Vimeo player is created and nothing is requested from Meta.
Meta Pixel is optional and remains off until you allow analytics and advertising cookies. If allowed, Meta receives the page address, referring page, time of the visit, IP address and information about the browser and device. Meta may set the first-party cookies _fbp and _fbc to measure advertising, attribute visits and help Tuhin & Partners improve campaigns on Facebook and Instagram. Meta may combine this information with information it already holds under its own terms. You can withdraw permission at any time through “Cookie preferences” in the footer; the site then tells Meta to revoke consent and removes those cookies from this domain.
Meta’s explanation of its use of business-tool data is available in the Meta Business Tools Terms, and advertising choices are available through Meta Ad Preferences. We do not use Google Analytics.
Website assistant
The Ask TNP panel searches the same approved, published information that appears on this website. Your typed question is sent to this server only long enough to return matching TNP pages; the application does not save the question or a conversation history.
The assistant does not send questions to OpenAI or another paid AI service. If your browser offers voice input, the browser converts your speech to text before sending the question to this site. TNP receives the resulting text, not the audio, and does not store either. Your browser provider may process voice input under its own privacy terms, so typing remains available throughout.
If you apply for a job with us
An application is more than an enquiry, so it is worth being exact about it.
What we hold. Your name, your email address, a telephone number and a LinkedIn address if you give them, what you wrote about why you want the role, and your CV.
Where your CV is kept. Not on the public part of this website. It is stored on the server outside the area the web serves, it has no address anybody can visit, and it is opened by a colleague signed in to our admin with recruitment permission. It is not attached to the email that tells us you have applied, so it does not end up sitting in an inbox that may be read on a train or forwarded by accident.
Who sees it. The people deciding on the role. Nobody else here, and nobody outside the firm.
How long we keep it. Twelve months from the decision, so that we can come back to you if something more suitable opens. After that the record and the CV are both deleted automatically — not marked as deleted, removed. If you would rather we did not keep it that long, say so and we will delete it when the role is filled.
What you can ask for. A copy of everything we hold about your application, a correction to any of it, or its deletion, at any point. Write to hello@tnp.legal and it will be done.
Notes a colleague writes on your application are part of what we hold about you, and you may ask to see those too.
Counting, and what it is not
The anonymous first-party counts below remain separate from Meta Pixel. Meta Pixel is third-party advertising measurement and operates only after the visitor enables analytics and advertising cookies in the privacy-choice panel, as described above.
We do keep a count. Two of them:
- How many times each page was read on each day. A number attached to a page and a date, and nothing else.
- How many people arrived from each website on each day. The name of the website only — google.com, linkedin.com, perplexity.ai — never the address of the page you came from, because that address can carry information about you and the site's name cannot.
Neither count is capable of identifying you, and that is deliberate rather than incidental. There is no visitor identifier, no session, no IP address and no record of your browser in either of them. Two visits by you and one visit each by two people are the same thing to it. We keep them because they tell us which of our articles are useful and whether people are finding us, and we can do that with counts rather than with anything about you.
Videos
Some pages — usually a seminar or an event — carry a recording. Where that recording is hosted by YouTube or Vimeo, nothing is requested from them until you press play. Until then the page shows a still image and a button, and those companies do not know you are reading the page.
If external media is not already allowed, pressing play opens the privacy choices instead and nothing loads unless you enable it and save. Once allowed, pressing play loads the video from that company and it receives your request in the same way it would if you were watching on its own site, including your IP address and information about your browser. We use YouTube's no-cookie address, which does not set tracking cookies until playback starts, but we do not control what the provider does after that and its terms apply rather than ours. The link beside every video lets you watch it on the provider's site directly instead, if you would rather.
Recordings we host ourselves involve no other company at all.
Who we share it with
We do not sell personal information, and we do not share it for anyone else's marketing.
We share it only with those who need it to do what you asked:
- Our hosting provider, which stores the site and its data on our instructions.
- Our email delivery provider, which sends confirmations, booking messages, publication links and the newsletter.
- Meta, only when you enable analytics and advertising cookies, to measure visits and advertising performance as described above.
- Advisers within the firm who are dealing with your enquiry or consultation.
- Where the law requires it, or to establish, exercise or defend legal claims.
These providers act on our instructions and are not permitted to use the information for their own purposes.
Information leaving Bangladesh
Our hosting, email and optional advertising-measurement providers may store or process information on servers outside Bangladesh. Where that happens, their contractual terms and privacy safeguards govern that processing; Meta’s terms are linked in the cookie section above.
How long we keep it
- Enquiries, quote requests and bookings — kept for 24 months from the last contact, then deleted, unless the matter became an engagement or we are required to keep it longer.
- Newsletter subscriptions — kept until you unsubscribe, together with the record of your consent.
- Publication download requests — the download link itself expires three days after it is issued; the request record is kept on the retention period above.
- Event registrations — kept on the same 24-month period, so we can show who attended and answer questions about it afterwards. Withdrawing from an event deletes the registration immediately; the consent record of it remains, as below.
- Consent records — kept for as long as we need to be able to show what was agreed, which may be longer than the underlying record.
- Server logs — kept for a short period for security and diagnosis, then discarded.
- Page counts — kept for two years so we can compare one period with another. They contain nothing about any person, so there is nothing in them to delete on request.
Where we are acting for you, the file is kept under our terms of engagement and our professional record-keeping obligations, which run longer than the periods above.
Keeping it safe
The site is served over an encrypted connection. Access to submitted information is restricted to people in the firm who need it, administrative access requires two-factor authentication, and changes to records are logged. No system is perfectly secure, but we take these measures seriously and review them.
What you can ask us to do
You can ask us to:
- tell you what information we hold about you, and give you a copy;
- correct anything inaccurate;
- delete what we hold, where we are not required to keep it;
- stop sending you marketing, at any time and without giving a reason.
Write to hello@tnp.legal. We may need to check who you are before we act, so that we do not disclose your information to someone else. We will respond as promptly as we can. If we cannot do what you ask — usually because we are required to keep a record — we will tell you why.
Children
This site is for businesses and their advisers and is not directed at children. We do not knowingly collect information from anyone under 18. If you believe we have, write to us and we will delete it.
Changes to this notice
We update this notice when what the site does changes. The date below is when it was last revised, and material changes will be described here rather than made silently.
Last revised: 21 August 2026. This revision adds the consent-gated Tuhin & Partners Meta Pixel and explains what Meta receives, why it is used and how permission can be withdrawn.
Contact
Questions about this notice, or about anything the site does with your information: hello@tnp.legal, or write to us at Flat G2 (6th Floor), House # 94, Road # 10, Block # D, Niketan, Gulshan-1, Dhaka 1212, Bangladesh.