Privacy Policy

What we collect

• Account information — name, email address, and a securely hashed password if you register an account. We never store your password in plain text.
• Order information — shipping name, phone number, delivery address, and the items you order. If you check out as a guest, we only ask for an email address if you choose to provide one.
• Payment information — for Cash on Delivery, no payment details are collected online. If you pay with bKash, the transaction is handled directly by bKash; we store the transaction ID and status they return to us, never your bKash PIN or account credentials.
• Technical information — your IP address (used only for basic fraud and abuse prevention, e.g. limiting repeated failed login attempts) and essential cookies needed to keep your cart and session working.

How we use it

• To process and deliver your orders, and to contact you about them (by phone, SMS, or email).
• To maintain your account and order history if you're a registered customer.
• To prevent fraud, abuse, and unauthorized access to accounts.
• To send you marketing emails, but only if you've signed up for our newsletter — you can unsubscribe at any time.

Who we share it with

We don't sell your data. A small number of service providers process data on our behalf, strictly to run the store:

• Our hosting provider and database, to run the site and store orders.
• Cloudflare R2, to store product images (this does not include your personal data).
• Resend, to deliver transactional emails such as password resets.
• bKash, to process payments if you choose that payment method.

Cookies & advertising

We use a small number of essential cookies — to keep you signed in, and to remember your cart if you're shopping as a guest.

We also use the Meta Pixel to measure how our ads perform. It records actions like viewing a product, adding to cart, and completing an order, and sets cookies that let Meta recognise a browser across visits. Where we share order data with Meta to confirm a purchase, contact details such as your email address and phone number are hashed before they leave our servers — Meta receives an irreversible fingerprint used only to match an existing account, never your details in readable form. You can limit this in your Meta ad preferences or by blocking these cookies in your browser.

Your rights

You can request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete your account and associated data (subject to what we're required to keep for order/tax records). Contact us using the details on our Contact page to make a request.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date above.