Privacy Policy

Last updated: November 5, 2026. This policy is designed to comply with the EU General Data Protection Regulation (GDPR) and applicable data protection laws of Bangladesh.

Affhaat ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have over it. By using our website and services (the "Service"), you consent to the practices described in this policy.

1. Data We Collect

We collect the following categories of personal data when you use the Service:

• Account data: your name, email address, phone number, and password (stored only as a secure one-way hash).
• Order & delivery data: order history, shipping and billing addresses, delivery instructions, and the products you purchase.
• Payment data: the payment method you choose and a transaction reference. We do not store full card numbers, CVV codes, or mobile-wallet PINs — these are handled entirely by our licensed payment partners.
• Technical data: IP address (stored only as a salted hash for analytics), browser type and version, device type, operating system, referring URL, and pages viewed.
• Communication data: messages you send us through the contact form, live chat, email, or phone.

2. Legal Basis for Processing

We process your personal data only where we have a lawful basis to do so:

• Performance of a contract — to process, fulfil, and deliver your orders and to provide customer support.
• Your consent — for marketing emails, non-essential cookies, and optional features. You may withdraw consent at any time.
• Legitimate interests — to prevent fraud, secure our systems, and improve the Service, balanced against your rights.
• Legal obligation — to keep tax, accounting, and other records required by law.

3. How We Use Your Data

• To create and manage your account and keep you logged in securely.
• To process payments and deliver your orders to the correct address.
• To send order confirmations, shipping updates, and delivery notifications.
• To respond to your questions, complaints, and support requests.
• To detect and prevent fraudulent transactions and abuse of the Service.
• To analyse how the Service is used so we can improve products, search, and navigation.
• To send you promotional offers and newsletters — only where you have opted in.

4. Cookies & Tracking

We use cookies and similar technologies to keep your cart and session working, remember your preferences (such as currency), and measure site usage. Essential cookies are required for the Service to function; non-essential cookies are only set with your consent. For full details, see our Cookie Policy.

5. Data Sharing & Disclosure

We do not sell, rent, or trade your personal data. We share it only with trusted third parties who help us operate the Service, and only to the extent necessary:

• Payment processors (e.g. SSLCommerz, bKash, Nagad, Rocket) to complete your transaction.
• Delivery & courier partners to ship your order to your address.
• Hosting & infrastructure providers who store our servers and data securely.
• Analytics providers who help us understand aggregate site usage.
• Law enforcement or regulators where we are legally required to disclose information.

All service providers are bound by data-processing agreements and may use your data only for the purposes we specify.

6. Your Rights (GDPR)

Subject to applicable law, you have the right to:

• Access the personal data we hold about you and receive a copy.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten") where there is no overriding legal reason for us to keep it.
• Restrict or object to certain processing, including direct marketing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.
• Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email us at support@affhaat.com. We will respond within 30 days.

7. Data Retention

We retain your personal data only for as long as necessary to provide the Service and to comply with our legal obligations. Order and accounting records are kept for the period required by tax law; account data is deleted or anonymised when you close your account, unless we are legally required to retain it.

8. Data Security

We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, secure session handling, access controls, and regular backups. No method of transmission or storage is 100% secure, but we work continuously to protect your information.

9. Children's Privacy

The Service is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us and we will delete it.

10. International Transfers

Your data may be processed in countries outside your own. Where we transfer data internationally, we ensure appropriate safeguards are in place so that your data continues to receive an adequate level of protection.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new "Last updated" date. We encourage you to review it periodically.

12. Contact

For any privacy question or request, contact our Data Protection Officer at support@affhaat.com or write to us at Bogura, Bangladesh.