← হোমPrivacy Policy

Privacy Policy

This page is maintained by the store owner to answer common security and privacy questions about this storefront. It describes the controls that are currently enabled in the app. It is not an independent certification or audit.

Accounts & access

  • Shoppers do not need to create an account to place an order.
  • Only the store owner can sign in to the admin panel. Admin access is protected by email + password authentication and a server-side role check.
  • All admin actions (products, orders, discounts, settings) are restricted at the database level to authenticated admins.

What data we collect

  • When you place an order: your name, phone number, delivery address, city, product and quantity, and chosen payment method.
  • Basic analytics events may be collected via the store's tag manager (e.g. page views) to understand traffic.
  • We do not ask for your government ID, date of birth, or any account password.

How we use it

  • To process and deliver your order.
  • To contact you about your order over phone or WhatsApp if needed.
  • To improve the store experience.
  • We do not sell your personal information to third parties.

Payments

  • Cash on Delivery: payment is collected by the courier at the time of delivery — no card details are entered on this site.
  • Online payment is handled by an external payment gateway. Card and mobile-wallet credentials are entered on the gateway's own page, not on this storefront. We never see or store full card numbers, CVV codes, or wallet PINs.
  • Payment gateway API keys are stored server-side only and are never sent to the browser.

Delivery & courier partners

To fulfill your order, we share your name, phone number, and delivery address with our courier partners (such as Steadfast and Pathao) solely for the purpose of delivering your package. These partners are responsible for handling your information securely and using it only to complete delivery.

Database & data protection

  • Order, product, and customer data is stored in a secure, managed cloud database with row-level security enabled on every table.
  • Public storefront access is limited to read-only product and brand information through narrowly scoped database functions. Customer orders and admin settings are not publicly readable.
  • Connections to the storefront and admin panel use HTTPS.

Cookies & analytics

We use essential cookies needed for the site to function, and, where configured, analytics tools (such as Google Analytics) that may track page views, scroll depth, and time spent on pages. These tools may also work alongside advertising pixels (such as the Meta/ Facebook Pixel) to help measure ad performance. This data helps us understand traffic and improve the store. You can control or disable cookies at any time through your browser settings.

Data retention & deletion

Order records are retained for as long as needed to fulfill the order and meet record-keeping obligations. If you'd like a copy of the personal data we hold about you, or want it deleted, please contact us using the details below.

Reporting a security issue

If you believe you have found a security or privacy issue, please contact the store owner directly so it can be investigated. Please do not publicly disclose the issue before we have had a chance to respond.

Shared responsibility

This site runs on standard, industry-grade hosting infrastructure with platform-level security protections. The store owner is responsible for the content of this page, the data collected from shoppers, order fulfillment, and how that data is handled day-to-day. This page is editable app content and is not a third-party-issued certification.