Privacy Policy

1. Information We Collect

Account Data

Name, email address, phone number, and password (hashed) when you register.

Order Data

Shipping addresses, order history, and payment method types (we never store card numbers).

Vendor Data

Shop name, business address, bank/mobile payment details for payouts.

Usage Data

Pages visited, search queries, browser type, and device information via server logs and analytics.

Cookies

Session cookies for cart and authentication. Preference cookies for theme and language settings.

2. How We Use Your Information

Order Processing

To process purchases, send order confirmations, and coordinate with vendors for delivery.

Account Management

To manage your account, send password reset links, and respond to support queries.

Personalization

To recommend products based on browsing and purchase history.

Vendor Payouts

To calculate commissions and process payments to vendor accounts.

Platform Improvement

To analyze usage patterns and improve our services, fix bugs, and develop new features.

3. Information Sharing

We do not sell your personal data. We share information only as follows: • With vendors: shipping name, address, and phone number to fulfill your orders. • With payment providers: transaction details to process payments (bKash, Nagad, card processors). • With service providers: email, analytics, and hosting providers who are contractually bound to protect your data. • With authorities: when required by law or to protect the safety of users. All third-party providers are required to maintain the confidentiality of your information.

4. Data Security

We implement industry-standard security measures including: • All passwords are hashed using bcrypt — we never store plain text passwords. • HTTPS encryption for all data in transit. • JWT tokens with short expiry for session management. • Regular security audits and vulnerability assessments. No system is 100% secure. Please use a strong, unique password and enable two-factor authentication when available.

5. Your Rights

You have the right to: • Access the personal data we hold about you. • Correct inaccurate information via your Account Settings. • Request deletion of your account and associated data (subject to legal retention requirements). • Opt out of marketing communications at any time. • Data portability — request a copy of your data in machine-readable format. To exercise these rights, email privacy@bdshoe.com with subject "Data Request".

6. Cookies & Tracking

We use: • Essential cookies: required for cart, login sessions, and checkout. • Preference cookies: remembers your theme (dark/light) and language. • Analytics cookies: aggregated, anonymous usage data (Google Analytics / self-hosted Plausible). You can disable non-essential cookies via your browser settings. Essential cookies cannot be disabled as the site will not function without them.

7. Data Retention

• Account data: retained until you delete your account. • Order history: retained for 7 years for tax and legal compliance. • Server logs: retained for 90 days. • Marketing preferences: retained until you opt out. After account deletion, we anonymize remaining data used for analytics within 30 days.

8. Children's Privacy

BDShoe is not intended for users under 18. We do not knowingly collect personal information from minors. If you believe a minor has registered, please contact us at privacy@bdshoe.com and we will promptly delete the account.

9. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via email to registered users 14 days before taking effect. Continued use after the effective date constitutes acceptance.

10. Contact Us

For privacy-related queries: Email: privacy@bdshoe.com Phone: +880 1636-333333 (9am–6pm, Sun–Thu) Address: BDShoe Ltd., Dhaka, Bangladesh