Privacy Policy

Information we collect

When you place an order request, we collect the information needed to process it: name, email address, phone number, WhatsApp number, district, city or town, delivery address, optional postal code, courier instructions and nearby landmarks. We also receive your chosen product, SKU, quantity and the details needed to calculate the configured price.

The website may process technical information needed for security and operation, such as session identifiers, request timestamps, basic server logs and anti-spam signals. Do not send payment-card details or unrelated sensitive information through the form.

Why we use it

We use this information to register and review order requests, verify that the details are genuine, contact you about the order, coordinate delivery and Cash on Delivery, answer support questions, investigate disputes, prevent abuse, maintain business records and meet legal obligations where applicable.

Sharing with service providers

We may share information only where reasonably necessary to fulfil an order or operate the service, such as with a courier or delivery partner, an email/hosting provider, or professional advisers where appropriate. The business should confirm the identity, contracts and access arrangements of its actual providers before launch. We do not state that every provider is used unless configured.

Order records and retention

Order details are stored as individual HTML order records in a server-side directory configured to deny direct public web access. The website sends an order notification through the configured SMTP server. The business must limit staff access, secure the hosting account, keep backups protected and delete or anonymise information when it is no longer needed, subject to any applicable retention obligation or genuine dispute.

The final retention period has not been specified in the business configuration and must be approved by the business. Do not retain customer records indefinitely by default.

Security and its limits

The website includes measures such as server-side validation, output escaping, CSRF tokens, one-use arithmetic CAPTCHA challenges, a honeypot, basic session rate limiting, restricted order storage and SMTP credential separation. These are safeguards, not a guarantee that data can never be lost, accessed improperly or compromised. Keep PHP, hosting and mail credentials secure, apply updates, and restrict access to order files.

Cookies and preferences

Necessary session cookies support request security and order flow. The website remembers the selection for optional cookies using browser storage. No analytics or advertising scripts are enabled by default. If optional technologies are added later, configure them to load only after any required consent has been obtained. Details are in the Cookie Policy.

Your choices and requests

You may contact us to ask what information is held about an order, request correction of inaccurate details, or raise a concern about how information is used. We will assess the request and respond subject to identity verification, applicable law, other people’s rights, legitimate record-keeping needs and any legal retention requirement.

Contact, jurisdiction and review

Privacy enquiries: mail@andshaders.com. Official business address: P3, Block NW, Gulshan North Avenue, Dhaka 1212, Bangladesh. The business operates in Bangladesh and should handle personal information in accordance with applicable Bangladeshi law, including the Personal Data Protection Act, 2026, subject to relevant commencement/transitional provisions and implementing requirements, and any other law that applies to the specific activity. This draft is not a legal guarantee; the business must confirm its actual data flows, retention schedule, consent/legal basis, data-subject request process, security obligations, cross-border processing, access controls and legal obligations with a qualified local adviser before launch.