Last updated: May 24, 2026 |English

This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit our website, create an account, place orders, or otherwise interact with our ecommerce services. We are committed to transparency, security, and lawful processing of personal data for customers in Bangladesh and internationally.

1. Introduction

We operate an online retail platform that enables you to browse products, manage an account, complete purchases, receive deliveries, and contact customer support. This policy applies to information collected through our website, mobile experiences, customer service channels, and related ecommerce operations.

By using our services, you acknowledge that you have read this Privacy Policy. If you do not agree with our practices, please discontinue use of our platform and contact us with any questions before submitting personal information.

2. Information We Collect

We collect information necessary to operate a secure, reliable ecommerce experience. The categories below describe what we may collect depending on how you interact with us.

2.1 Personal Information

Personal information may include:

• Full name, billing name, and delivery name
• Email address and telephone number (including Bangladesh mobile numbers)
• Shipping and billing addresses (including city, postal code, district, and country)
• Account credentials and profile preferences
• Customer support communications and order-related correspondence
• Identity or verification details where required for fraud prevention or legal compliance

2.2 Payment Information

When you pay for an order, payment details are processed by authorized payment gateway providers. We do not store full card numbers or CVV codes on our servers. We may receive limited payment-related data such as transaction identifiers, payment status, partial card metadata (e.g., last four digits), payment method type, and amounts for reconciliation, refunds, and customer support.

2.3 Device & Usage Data

We may automatically collect technical and usage information, including:

• IP address, browser type, device type, and operating system
• Pages viewed, referring URLs, session duration, and interaction events
• Approximate location derived from IP address (not precise GPS unless you explicitly grant permission)
• Log files, error reports, and security signals used to protect the platform

3. Cookies & Tracking Technologies

We use cookies, local storage, pixels, and similar technologies to keep you signed in, remember preferences, maintain shopping carts, measure performance, and improve marketing relevance where permitted by law.

• Essential cookies: required for authentication, checkout, and security.
• Functional cookies: remember language, currency, and UI preferences.
• Analytics cookies: help us understand traffic and product performance.
• Marketing cookies: used only where you have provided appropriate consent.

You can manage cookies through your browser settings. Disabling essential cookies may limit checkout and account features.

4. How We Use Information

We use personal information for legitimate ecommerce purposes, including:

4.1 Order Fulfillment

Processing orders, confirming payments, arranging delivery, sending order updates, and handling returns or refunds.

4.2 Customer Support

Responding to inquiries, resolving disputes, providing product assistance, and improving service quality.

4.3 Marketing Communications

Sending promotional offers, newsletters, or personalized recommendations where permitted. You may opt out of marketing emails at any time using unsubscribe links or account settings.

4.4 Fraud Prevention

Detecting suspicious transactions, preventing account abuse, and protecting customers and our business from unlawful activity.

4.5 Legal Compliance

Complying with applicable laws, tax obligations, record-keeping requirements, regulatory requests, and lawful orders from authorities in Bangladesh or other jurisdictions where we operate or process data.

5. Legal Basis for Processing

Depending on your location and the nature of our relationship, we process personal information on one or more of the following bases:

• Contractual necessity: to create and manage your account, process orders, deliver products, and provide customer support.
• Legitimate interests: to secure our platform, prevent fraud, improve services, and understand how our store is used—balanced against your rights and expectations.
• Legal obligations: to meet tax, accounting, anti-fraud, consumer protection, and regulatory requirements.
• Consent: for optional activities such as certain marketing communications or non-essential cookies, where required by law. You may withdraw consent at any time without affecting lawfully processed data before withdrawal.

6. Data Sharing & Third Parties

We do not sell your personal information. We share data only as necessary to operate our store, deliver orders, process payments, and meet legal obligations.

6.1 Payment Gateway Providers

Payment partners receive information required to authorize and settle transactions. Their use of data is governed by their own privacy policies and applicable financial regulations.

6.2 Logistics & Delivery Partners

Couriers and fulfillment partners receive delivery details (name, phone, address, and order contents) to complete shipments within Bangladesh and, where applicable, international destinations.

6.3 Analytics Providers

We may use analytics services to understand website performance and customer behavior in aggregated or pseudonymized form where possible.

7. International Data Transfers

If you access our services from outside Bangladesh, your information may be processed in Bangladesh or in other countries where our service providers operate. We implement appropriate safeguards for cross-border transfers, including contractual protections and security measures consistent with international ecommerce standards.

8. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy, including order history, accounting, tax compliance, dispute resolution, and legal obligations. Retention periods may vary based on data type and regulatory requirements.

9. Account Deletion & Retention Exceptions

You may request deletion of your account or associated personal information by contacting privacy@priyos.shop or through account settings where available. We will verify your identity before fulfilling deletion requests.

Even after deletion, we may retain certain records when required or permitted by law, including:

• Completed transaction and invoice records for tax and accounting purposes
• Payment dispute, chargeback, and fraud investigation records
• Communications required for regulatory compliance or legal claims
• Backup copies for a limited period before secure erasure according to our retention schedule

Anonymized or aggregated data that cannot reasonably identify you may be retained for analytics and business reporting.

10. Your Rights

Depending on your location, you may have rights regarding your personal information, including:

• Access to personal data we hold about you
• Correction of inaccurate or incomplete information
• Deletion of data where legally permitted
• Restriction or objection to certain processing activities
• Data portability where technically feasible
• Withdrawal of consent for marketing or optional processing

10.1 Rights for International Users (GDPR-Style)

If you are located in the European Economic Area, United Kingdom, or similar jurisdictions, you may have additional rights under applicable data protection laws. We will respond to verified requests within timeframes required by law.

10.2 Rights for Users in Bangladesh

We respect reasonable privacy expectations of Bangladeshi consumers engaging in digital commerce. You may contact us to request access, correction, or deletion of personal information subject to applicable law, contractual obligations, and legitimate business needs (such as completed order records). We aim to handle requests promptly and transparently.

11. Account Security

You are responsible for maintaining the confidentiality of your account credentials. We implement administrative, technical, and organizational measures to protect accounts, including access controls, encryption in transit, monitoring, and staff training. Notify us immediately if you suspect unauthorized access.

12. Children's Privacy

Our services are not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided data to us, contact us and we will take appropriate steps to delete it.

13. Product Reviews & User Content

If you submit reviews, ratings, photos, or other content, that information may be displayed publicly or used for moderation, fraud prevention, and quality improvement. Do not include sensitive personal data in public submissions.

14. Promotional Communications

With your consent or as permitted by law, we may send offers and updates via email, SMS, or messaging apps. You can opt out at any time. Service-related messages (such as order confirmations) may still be sent as necessary to fulfill transactions.

15. Data Protection Measures

We maintain safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. Measures include secure hosting, access limitations, payment industry practices, and incident response procedures. No method of transmission over the internet is 100% secure; we continuously work to improve our protections.

16. Data Breach & Incident Response

If we become aware of a personal data breach that poses a risk to your rights, we will investigate promptly, take steps to contain and mitigate harm, and notify affected individuals or regulators where required by applicable law.

• Investigation: assess scope, affected systems, and categories of data involved.
• Mitigation: contain the incident, remediate vulnerabilities, and preserve evidence for compliance.
• Notification: inform you without undue delay when notification is legally required or appropriate to protect your interests.

17. Business Transfers

If we are involved in a merger, acquisition, restructuring, financing due diligence, or sale of assets, your information may be transferred as part of that transaction subject to confidentiality obligations. The receiving party will be required to honor this Privacy Policy or provide notice and choices consistent with applicable law.

18. Browser “Do Not Track” Signals

Some browsers offer a “Do Not Track” (DNT) setting. There is no universally accepted standard for how websites must respond to DNT signals. Accordingly, our platform may not recognize or respond to all DNT signals consistently. You can still control cookies and tracking through browser settings and our cookie preferences where offered.

19. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their policies before providing personal information.

20. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. The “Last updated” date at the top indicates the latest revision. Material changes will be communicated through the website or other appropriate channels.

21. Contact Information

For privacy-related questions, data subject requests, or complaints, contact us using the details below. When submitting a request, include sufficient information to verify your identity and describe your concern.