Last updated: 29 August 2026
Salad Flexi ("we", "us", "our") operates www.saladflexi.com and provides a 26-day monthly meal subscription service in Dhaka, Bangladesh. This policy explains what personal information we collect, why we collect it, who we share it with, and what control you have over it.
We have written this policy to describe what we actually do — not what is convenient to say. If anything here is unclear, please contact us using the details in Section 12.
1. Who we are
- Business name: Salad Flexi (established 2023)
- Address: Level 5, House 19, Road 3, Block C, Mirpur 12, Dhaka-1216, Bangladesh
- Phone / WhatsApp: 01973252258
- Email: saladflexi@gmail.com
- Responsible for data enquiries: The Founder, Salad Flexi — reachable at the email and phone number above
2. What information we collect
2.1 When you fill in a form on Facebook or Instagram
If you respond to one of our advertisements through a Facebook or Instagram lead form, we receive:
- Your name
- Your phone number (WhatsApp)
- Your delivery area
- Which meal programme you are interested in
- Which meal plan you are interested in
- When you intend to start
2.2 When you talk to us on WhatsApp
To recommend a suitable meal programme, we ask for:
- Your age, height and weight
- Any health conditions you choose to tell us about (for example diabetes, high blood pressure, thyroid conditions)
- Your delivery address and preferred meal times
- Your email address, if you give it to us
2.3 When you become a subscriber
- Delivery address and delivery notes
- Payment confirmation details (bKash or bank transfer reference). We do not collect or store your bKash PIN, card numbers or banking passwords.
- Your subscription history, meal preferences, skipped meals and any dietary exclusions
2.4 When you visit our website
Standard technical information such as IP address, browser type, pages visited and time spent. If we have installed the Meta Pixel, it may record which pages you viewed on our site. See Section 6.
3. Health information — please read this section
Information about your health is sensitive personal data under the Personal Data Protection Act, 2026 of Bangladesh, and we treat it differently from other information.
- You are never required to tell us about a health condition. You can subscribe without sharing it.
- If you do share it, we use it for one purpose only: to recommend a suitable meal programme and to avoid ingredients that may not suit you.
- We do not upload health information to Facebook, Meta, or any advertising platform. It is never used for advertising, targeting or audience building.
- We do not sell or share health information with any third party.
- Our staff are not doctors and nothing we tell you is medical advice. Please consult a qualified physician before starting any diet programme, particularly if you have a medical condition.
- You can ask us to delete your health information at any time while continuing your subscription.
4. Why we use your information
| Purpose | Information used |
|---|---|
| To reply to your enquiry and recommend a programme | Name, phone, area, programme interest, and health information if you shared it |
| To prepare and deliver your meals | Name, phone, delivery address, meal preferences |
| To confirm payment and keep order records | Name, phone, payment reference, amount |
| To let you know about menu changes, delivery timing and renewals | Phone, email |
| To measure and improve our advertising | Name, phone, email, purchase amount — see Section 6 |
5. Who we share your information with
- Our delivery riders — your name, phone number and delivery address, so that your meal reaches you.
- Meta Platforms, Inc. (Facebook, Instagram, WhatsApp) — see Section 6 for exactly what and why.
- foodpanda — only if you place an order through the foodpanda platform, in which case their own privacy policy also applies.
- Payment channels — bKash or your bank processes the payment itself; we only see the confirmation.
- Where the law requires it — for example a lawful order from a competent authority.
We do not sell your personal information to anyone.
6. Facebook and Instagram advertising
We advertise on Facebook and Instagram, and we want to be specific about what that involves.
6.1 Lead forms
When you submit a lead form on Facebook or Instagram, Meta passes your responses to us. Meta's own handling of that information is governed by the Meta Privacy Policy.
6.2 Customer lists uploaded to Meta
We upload the phone numbers, names and email addresses of our existing customers to Meta for two reasons:
- So that we do not show acquisition advertisements to people who are already our customers
- So that we can measure which advertisements actually led to a subscription, and find new audiences with similar characteristics
Before this information leaves our systems it is converted into an irreversible code (a SHA-256 hash). Meta receives the code, not your readable phone number or email, and uses it only to check for a match against its own records. Health information is never included.
6.3 Purchase records
When you subscribe, we may upload a record of that purchase — hashed phone number or email, the date, and the amount — to Meta so we can understand which advertisements are working. We do not upload what you ordered, your address, or any health information.
6.4 Website pixel
Our website may use the Meta Pixel to record which pages you visited, so that we can show relevant advertisements to people who have shown interest. You can control this through your Facebook ad preferences, your browser's cookie settings, or by opting out as described in Section 9.
6.5 Cross-border transfer
Meta processes this information on servers outside Bangladesh, including in the United States. By using our services and submitting your information, you understand that this transfer takes place. We share the minimum necessary and always in hashed form where the platform supports it.
7. How long we keep your information
| Information | Kept for |
|---|---|
| Enquiries that did not become subscriptions | 12 months, then deleted |
| Subscriber records and order history | While you are a customer, and for 5 years afterwards for accounting and legal record-keeping |
| Health information | While you are an active subscriber, or until you ask us to delete it — whichever is earlier |
| Advertising audience lists held by Meta | Refreshed regularly; entries expire within 180 days unless renewed |
8. Your rights
Under the Personal Data Protection Act, 2026 of Bangladesh, you have the right to:
- Know what personal information we hold about you, and receive it in a clear and understandable form
- Correct anything that is inaccurate or incomplete. We will act within 30 days and inform anyone we have shared it with.
- Delete your information where we no longer need it, where you withdraw consent, or where we have handled it unlawfully
- Withdraw your consent at any time, without having to explain why
- Object to your information being used for advertising
To exercise any of these rights, message us on WhatsApp at 01973252258 or email saladflexi@gmail.com. We will respond within 30 days. There is no charge.
9. How to stop us using your information for advertising
You can do any of the following, and all of them work independently:
- Message us on WhatsApp and ask to be removed from our advertising lists. We will remove you from our uploaded audiences.
- Adjust your Facebook Ad Preferences, where you can also see which businesses have uploaded a list containing you and opt out.
- Block cookies in your browser, which prevents the website pixel from working.
10. How we protect your information
We restrict access to customer information to the small number of staff who need it to do their work. Files containing customer details are kept in access-controlled accounts. Information sent to advertising platforms is hashed before it leaves our systems. If a breach occurs that is likely to cause you significant harm, we will notify you and the relevant authority as required by law.
No system is perfectly secure, and we do not claim otherwise.
11. Children
Our service is intended for adults. We do not knowingly collect information from anyone under 18, and we do not direct our advertising to people under 18. If you believe a child has given us information, contact us and we will delete it.
12. Changes and contact
If we change this policy we will update the date at the top of this page. Material changes will be communicated to active subscribers.
For any question about this policy, or to exercise your rights:
- WhatsApp / Phone: 01973252258
- Email: saladflexi@gmail.com
- Address: Level 5, House 19, Road 3, Block C, Mirpur 12, Dhaka-1216
If you are not satisfied with our response, you may complain to the Data Protection Authority established under the Personal Data Protection Act, 2026.