Privacy Policy

What we collect

When you create an account: your name, email, and phone. When you place an order: shipping address, order history, and payment confirmation (we do not store card details — those live with SSLCommerz).

When you browse: standard analytics (which pages, which products viewed) via PostHog. No third-party advertising tracking.

Why we collect it

• To fulfill orders and ship products to your door.
• To notify you about order status (shipped, delivered).
• To process referral vouchers when friends sign up through your link.
• To improve the catalog based on what people search for.
• To send you marketing only if you opt in (off by default after first month).

What we share

With SSLCommerz for payment processing. With our shipping partners for delivery. With Cloudinary for image hosting and Supabase for the database itself. We never sell your data to third parties.

Your rights

You can request a full export of your data, change your email or phone, opt out of marketing emails, or delete your account entirely from account settings. Deletion takes effect immediately for your view; full purge from our records happens after 30 days (legal/tax record retention).

Cookies

We use first-party cookies for the cart (so items persist as you browse), session authentication, and PostHog analytics. No third-party advertising cookies.

Security

All traffic is HTTPS-only. Passwords are hashed (we never see them in plaintext). Payment data never touches our servers. Admin access is protected with 2FA.

Contact

Questions about this policy? Reach out to hello@niyejao.org.