Privacy Policy

1. Information We Collect

• Account information — Name, email address, phone number, and password (hashed — never stored as plain text).
• Order & delivery information — Delivery addresses, order history, payment method (we do not store full card numbers).
• Device & usage data — IP address, browser type, pages visited, and session duration — used to improve our service.

2. How We Use Your Information

• Order fulfilment — Processing and delivering your orders, sending order confirmations and delivery updates.
• Customer support — Responding to your queries, complaints, and return requests.
• Service improvement — Analysing usage patterns to improve our website, product range, and delivery experience.
• Marketing (with consent) — Sending promotional emails or SMS — only if you have opted in. You can unsubscribe at any time.

3. Information Sharing

We do not sell or rent your personal data to third parties. We only share data with: (a) delivery partners to fulfil your orders; (b) payment processors (bKash, Nagad, card gateways) to process transactions; (c) government authorities when required by law.

4. Data Security

We use industry-standard security measures including HTTPS encryption, hashed passwords, HTTP-only cookies, and rate limiting. Despite best efforts, no internet transmission is 100% secure. We will notify you promptly of any data breach that affects your account.

5. Cookies

We use essential cookies for authentication (keeping you logged in) and session management. We do not use third-party advertising cookies. You can disable cookies in your browser settings, but this will affect login functionality.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your data is scheduled for permanent deletion after 30 days. Order records may be retained for up to 7 years for tax and legal compliance purposes.

7. Your Rights

You have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; withdraw consent for marketing communications at any time. To exercise these rights, contact us at hello@ujaan.me.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. Continued use of UJAAN after updates means you accept the revised policy.