Your privacy matters.

1 Who Controls Your Personal Data

Drawhouse Limited operates LinoLife and is the data controller for personal data collected to operate the Platform, administer accounts, process bookings, facilitate payments, provide support and improve our services.

A Provider may separately control personal data needed to deliver a booked service, maintain professional records or comply with its own legal obligations. The Provider should explain any additional use of your data. Drawhouse Limited is not responsible for a Provider's independent processing, but we require Providers to handle customer information lawfully and securely.

2 Personal Data We Collect

Account and Identity Data

• name, date of birth or age where relevant
• email address, mobile number and address
• account credentials and verification information
• profile photograph and communication preferences

Booking and Transaction Data

• selected service, Provider, date, time, location and booking history
• price, discounts, payment status, transaction reference and refund history
• attendance, rescheduling, cancellation and no-show records
• support requests, complaints, reviews and communications

Health and Service Data

Where reasonably necessary for a service, you may provide information about injuries, allergies, pregnancy, medication, skin sensitivity, medical conditions, accessibility needs or other participation requirements. This information may be sensitive personal data and will be handled with additional care.

Technical and Usage Data

• IP address, device type, browser, operating system and approximate location
• login time, pages viewed, searches, clicks and Platform interactions
• cookie identifiers, security logs and fraud-prevention signals
• referring links and marketing attribution information where permitted

Provider Data

For Providers, we may collect business identity, professional qualifications, licences, tax information, bank or payout details, service listings, availability, performance data, customer communications and verification documents.

3 How We Collect Personal Data

We collect data directly from you when you register, create a Provider profile, book or deliver a service, make a payment, contact support, submit a review or complete a form. We also receive data automatically through the Platform and from Providers, payment partners, verification services and other parties involved in a transaction.

4 How We Use Personal Data

We use personal data only for defined business and legal purposes, including to:

• create and secure customer and Provider accounts
• display listings and match customers with suitable Providers
• confirm, manage, reschedule and cancel bookings
• process payments, payouts, refunds and transaction records
• share booking information needed for a Provider to deliver a service
• provide customer support and resolve complaints
• verify Providers and reduce fraud, abuse and security incidents
• operate, measure, troubleshoot and improve the Platform
• send transactional messages and, with appropriate permission, marketing
• comply with tax, accounting, consumer protection and other legal duties
• establish, exercise or defend legal claims

5 Lawful Grounds for Processing

Depending on the context and applicable law, we process personal data because it is necessary to perform a contract, take steps requested before a contract, comply with a legal obligation, protect vital interests, pursue a legitimate business interest that does not override individual rights, or because you have given valid consent.

Where processing relies on consent, you may withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal and may prevent us or the Provider from delivering a service that genuinely requires the relevant information.

6 Sensitive Personal Data

We collect health or wellbeing information only where it is reasonably necessary for safety, accessibility or service delivery. We will request explicit consent where required and restrict access to people who need the information for the stated purpose.

Customers should avoid placing medical details in public reviews, general chat fields or other areas that are not designed for sensitive information. Providers must not use health information for advertising or unrelated profiling.

7 Payments

Pay as You Go payments are processed through authorized banks, mobile financial services, card networks or payment gateways. We generally do not store complete card or account credentials when a payment partner processes the transaction. We may retain payment status, transaction identifiers and limited billing information for accounting, refunds, fraud prevention and dispute handling.

8 When We Share Personal Data

We may share personal data only where reasonably necessary with:

• the Provider selected for a booking
• payment, payout and fraud-prevention partners
• hosting, cloud, analytics, communication and customer-support providers
• identity, credential or business-verification services
• professional advisers, insurers and auditors
• government bodies, regulators, courts or law-enforcement authorities where legally required
• a buyer, investor or successor involved in a genuine corporate transaction, subject to appropriate safeguards

We do not sell personal data for another party's independent advertising. Service providers acting on our behalf may use data only for agreed purposes and must apply appropriate confidentiality and security controls.

9 Cookies and Similar Technologies

LinoLife may use essential cookies to keep the Platform secure, maintain sessions and remember core settings. With consent where required, we may also use analytics or advertising technologies to understand Platform use and measure campaigns.

You can control non-essential cookies through the cookie settings shown on the Platform and through your browser. Blocking essential cookies may prevent account, booking or payment features from working correctly.

10 Marketing Preferences

We may send news, offers or Provider recommendations where you have consented or where another lawful basis permits it. You can unsubscribe through the message or change your account settings. We may continue to send booking confirmations, security alerts and other necessary service messages.

11 Data Retention

We keep personal data only for as long as needed for the purpose for which it was collected and for any applicable legal, tax, accounting, fraud-prevention or dispute period. Retention depends on the data type, the status of an account or booking, legal requirements and the risk of harm from unauthorized use.

When data is no longer required, we delete it, anonymize it or securely restrict its use. Backup copies may remain for a limited period before routine deletion.

12 Data Security

We use reasonable administrative, technical and organizational controls designed to protect personal data against unauthorized access, alteration, disclosure, loss or destruction. Controls may include access restrictions, encryption where appropriate, logging, backups, staff confidentiality and security monitoring.

No online service can guarantee absolute security. You should use a strong password, keep login codes confidential and contact us immediately if you suspect unauthorized access.

13 International Data Transfers

Some technology providers may process data outside Bangladesh. Where data is transferred internationally, we will use lawful transfer arrangements and reasonable safeguards appropriate to the nature of the data and the destination.

14 Your Rights and Choices

Subject to applicable law and lawful exceptions, you may request to:

• access personal data we hold about you
• correct inaccurate or incomplete data
• delete data that no longer has a lawful purpose
• withdraw consent or object to certain processing
• restrict processing in appropriate circumstances
• receive information about significant automated decisions, if used
• make a complaint about how we handle your data

We may verify your identity before acting on a request. Some information cannot be deleted immediately where it is needed for a confirmed booking, payment record, fraud investigation, legal claim or statutory retention duty.

15 Children

LinoLife accounts are intended for adults. A parent or legal guardian must make and manage a booking for a minor unless the Platform expressly provides an age-appropriate service and lawful registration method. Providers must not request more information about a minor than is necessary for safety and service delivery.

16 Personal Data Incidents

If a personal data incident occurs, we will investigate, contain and document it. We will notify affected individuals and the appropriate authority where notification is required by applicable law.

17 Third Party Links

The Platform may link to websites or services that Drawhouse Limited does not control. Their privacy practices are governed by their own notices. Review those notices before submitting personal data.

18 Changes to This Privacy Policy

We may update this Privacy Policy when our practices, technology or legal obligations change. The current version will appear on the Platform with its effective date. We will provide additional notice where a change materially affects how personal data is used.

19 Privacy Contact

For privacy questions, requests or complaints, contact Drawhouse Limited

Privacy contact: Drawhouse Limited

Email: privacy@linolife.co

Address: Ka 1/3, Kalachandpur, Gulshan, Dhaka-1212

Phone: +8801844600936