Privacy Policy

Dekhekini is an online store operating in Bangladesh. When this policy says “Dekhekini”, “we”, “us” or “our”, it means the business that runs this website and is responsible (the “data controller”) for the personal data described here.

We handle personal data in line with the laws of Bangladesh, including the Personal Data Protection Ordinance, 2025, the Information and Communication Technology Act, 2006, the Cyber Security Ordinance, 2025, the Consumer Rights Protection Act, 2009 and the Ministry of Commerce's Digital Commerce Operation Guidelines, 2021.

Information you give us

• Account details — your name, mobile number, email address and password (stored only as a one-way hash).
• Delivery details — recipient name, phone number, full address (house, road, area, thana/upazila, district, division), landmarks and delivery notes.
• Order details — the products you buy, quantities, prices, coupons used and order history.
• Communication — messages, calls and emails with our support team, product reviews and ratings you post.

Information from sign-in and payment partners

• Social sign-in — if you continue with Google, Facebook or LinkedIn, we receive your name, email address, profile picture and an account ID from that provider. We never receive your password for those services.
• Mobile OTP — your phone number and the delivery status of the one-time password (OTP) SMS. OTPs expire after 5 minutes.
• Payments — for bKash and SSLCommerz (card, mobile banking, net banking) we receive the transaction ID, amount, payment method and status. We never see or store your card number, CVV, bKash PIN or banking OTP; these are entered directly on the payment provider's page.

Information collected automatically

• IP address, browser, device type, operating system and approximate location (city level).
• Pages you visit, products you view, search terms and the site you came from.
• Your cart, wishlist, compare list and recently viewed products — kept in your browser's local storage so the site works without an account.

• To create and manage your account and sign you in (including OTP and social sign-in).
• To process, confirm and deliver your orders — including calling or messaging you to confirm a cash on delivery (COD) order or a delivery time.
• To collect payment, issue invoices, process returns, replacements and refunds.
• To send order, payment and delivery updates by SMS, email or phone.
• To answer your questions and resolve complaints.
• To prevent fraud, fake orders and repeated COD refusals, and to keep our website and customers safe.
• To improve our products, website, search and delivery service using aggregated statistics.
• To send offers and promotions — only if you agreed. You can opt out at any time.
• To meet our legal duties — VAT and tax records, consumer-protection rules and lawful requests from Bangladeshi authorities.

We process your data because it is necessary to fulfil our contract with you (your order), because the law requires it, because of our legitimate interest in running a safe and efficient store, or because you gave your consent. Where we rely on consent, you can withdraw it at any time.

We do not sell or rent your personal data. We share only what each partner needs to do their job:

All service providers are bound to use your data only on our instructions and to keep it secure. If our business is sold or merged, your data may transfer to the new owner, who must continue to honour this policy.

We use a small number of cookies and browser storage items:

• Essential — keep you signed in, keep your cart and protect forms against misuse. The site does not work without them.
• Preferences — remember your wishlist, compare list and recently viewed products on this device.
• Analytics — if enabled, help us understand which pages and products are popular, using aggregated data.

You can block or delete cookies and site data in your browser settings. Blocking essential cookies will stop sign-in and checkout from working.

We keep personal data only as long as we need it for the purposes above or as the law requires:

• All traffic to our website is encrypted with HTTPS (TLS).
• Passwords are stored as one-way hashes; OTPs expire after 5 minutes and cannot be reused.
• Card and mobile-wallet payments are completed on the payment provider's secure page.
• Staff access to customer data is limited by role and logged.
• If a breach puts your data at risk, we will inform you and the relevant authority as required by law.

Under the Personal Data Protection Ordinance, 2025 you have the right to:

• Access — ask what personal data we hold about you and get a copy.
• Correction — fix inaccurate or incomplete data. You can edit your profile and addresses yourself from My account.
• Deletion — ask us to erase your account and personal data. See our Data Deletion page.
• Withdraw consent — stop marketing messages or other processing based on consent, fully or partly, at any time.
• Portability — receive your data in a structured, commonly used format.
• Object or complain — object to processing or complain to us, and if you are not satisfied, to the data protection authority under the Ordinance.

Email support@dekhekini.com from your registered email address, or call us from your registered mobile number. We may ask you to verify your identity with an OTP before acting on a request, and we will respond within 30 days.

We send promotional SMS or email only with your consent. Every promotional email has an unsubscribe link, and you can stop promotional SMS by contacting support. Order, payment and delivery messages are part of the service and will still be sent while you have an active order.

Our store is meant for adults aged 18 or older. Anyone under 18 may use it only with the involvement and consent of a parent or guardian. We do not knowingly collect data from children without that consent, and we do not profile or send targeted advertising to minors. If you believe a child has given us personal data, contact us and we will delete it.

Some of our service providers (for example cloud hosting, email delivery and social sign-in) may store or process data on servers outside Bangladesh. When that happens we use reputable providers with appropriate safeguards and transfer data only as permitted by Bangladeshi law.

Our website links to other services such as bKash, SSLCommerz, courier tracking pages and social networks. Their privacy practices are governed by their own policies, which we encourage you to read.

We may update this policy when our services or the law change. The “Last updated” date at the top shows the latest version. For significant changes we will notify you by email, SMS or a notice on the website before they take effect.