Privacy Policy

1.1. Who We Are

Creation Bangladesh ("we", "us", "our") operates this online store selling men's grooming, fragrance, and tech products in Bangladesh. This Privacy Policy explains what personal data we collect, why we collect it, how it is used and shared, and the rights you have over it, in line with the Bangladesh Data Protection Act 2023 and other applicable laws.

2.2. Information We Collect

We collect the following categories of information, depending on how you use our services:

• Identity & contact: Your name, email address, phone number, and delivery address you provide at account creation or checkout.
• Order data: Products ordered, order numbers, payment method, and delivery notes. Payment card numbers and mobile wallet PINs are never sent to or stored by us.
• Account & auth: Your sign-in method (Google or phone number), profile information, and saved address books.
• Device & usage: Basic technical data such as browser type, device type, IP address, and pages visited, collected for security and site reliability.
• Communications: Records of support conversations, SMS/WhatsApp delivery updates, and marketing messages you choose to receive.

We do not intentionally collect sensitive categories of data such as health, biometric, or financial card details. Payment card numbers and PINs are handled exclusively by our payment partners.

3.3. How We Use Your Information

We use your data only for the purposes below, and never for anything incompatible with them:

• To process orders: Confirming, fulfilling, delivering, and tracking your orders, including SMS and WhatsApp updates.
• To handle payments: Routing your payment to SSLCommerz, bKash, or Nagad and reconciling refunds.
• To provide support: Answering questions, processing returns and refunds, and resolving disputes.
• To secure the service: Preventing fraud, misuse, and unauthorized access to accounts.
• To improve the store: Understanding how customers use the site and improving products and experience.
• To send marketing (with consent): Offers and updates you have opted into. You can withdraw consent at any time.

We do not sell or rent your personal information to third parties, and we do not use third-party advertising trackers on this site.

4.4. Legal Basis for Processing

Where the Bangladesh Data Protection Act 2023 requires a basis, we rely on:

• Contract: processing needed to fulfil your orders and deliver our services.
• Legal obligation: records required by tax, consumer protection, or regulatory authorities.
• Consent: marketing communications, which you may withdraw at any time.
• Legitimate interests: fraud prevention, security, and service improvement.

5.5. Data Sharing

We share personal data only with the parties needed to operate the store, and only the minimum required:

• Couriers & logistics: Pathao, Steadfast, or other delivery partners receive your name, phone number, and delivery address solely to deliver your order.
• Payment providers: SSLCommerz, bKash, and Nagad process payments under their own privacy policies. We never see or store your full card or PIN details.
• Cloud & infrastructure: Supabase hosts your data securely with row-level security; SMS/WhatsApp and email providers transmit transactional messages.
• No third-party advertisers: We do not sell, rent, or share your personal data for advertising or profiling purposes.

6.6. Data Security

We protect your data using industry-standard safeguards: HTTPS encryption in transit, encrypted connections to our database, row-level security on stored data, least-privilege access controls, and regular monitoring for unauthorized access. Because card numbers and PINs are never stored by us, they cannot be exposed in the event of a breach of our systems. No method of transmission or storage is 100% secure, but we work continuously to protect your information.

7.7. Data Retention

We keep personal data only as long as necessary for the purposes in this policy. Order records are retained to fulfil warranties, returns, and tax obligations (typically a minimum of 3 years under Bangladeshi commercial practice). Account data is kept while your account is active. Marketing consents and related preferences are retained until you withdraw consent. When data is no longer needed, it is securely deleted or anonymized.

8.8. Your Rights

You have the following rights over your personal data:

• Access: Receive a copy of the personal data we hold about you.
• Correction: Update inaccurate or incomplete information.
• Deletion: Ask us to delete your personal data, subject to legal retention requirements (e.g., tax records).
• Withdraw consent: Opt out of marketing or revoke a previously given consent at any time.
• Object / restrict: Object to or limit certain processing, where applicable.
• Portability: Request a machine-readable copy of data you provided to us, where technically feasible.

To exercise any right, email hello@creation.bd or WhatsApp us at 01821-884455. We respond to verified requests within 7 business days. If you believe your data has been mishandled, you may also lodge a complaint with the relevant authority.

9.9. Cookies & Local Storage

We use a small number of essential cookies and browser storage for authentication, cart contents, and preferences such as recently viewed products. We do not use third-party tracking or advertising cookies. See our Cookie Policy for details and how to control them.

10.10. Children

Our services are intended for adults aged 18 and over and for responsible use of grooming, fragrance, and tech products. We do not knowingly collect data from children under 13. If you believe a child has provided us personal data, contact us and we will delete it.

11.11. Changes to This Policy

We may update this policy from time to time to reflect legal, technical, or business changes. The current version is always posted on this page with an updated date. Where changes are material, we will notify you by email, SMS, or a prominent notice on the site. Continued use of our services after changes take effect constitutes acceptance of the revised policy.