Privacy Policy

We collect information that you provide directly and information generated automatically when you use our platform. The types of personal data we collect include:

We use the information we collect for the following purposes:

• Order Fulfillment: Processing and delivering your orders, sending order confirmations, tracking updates, and delivery notifications.
• Account Management: Creating and managing your account, verifying your identity, and providing customer support.
• Communication: Sending transactional emails, SMS notifications, and responding to your inquiries and support requests.
• Platform Improvement: Analyzing usage patterns to improve our website performance, product offerings, and user experience.
• Marketing: With your consent, sending promotional offers, product recommendations, and newsletters. You may opt out at any time.
• Legal Compliance: Meeting our legal and regulatory obligations under applicable laws in Bangladesh.

We take the security of your payment information extremely seriously. TechBox does not directly store, process, or transmit credit card or debit card data on its servers.

Payment Processors: All online payments are processed through SSLCommerz, a PCI DSS Level 1 certified payment gateway. Mobile financial services including bKash and Nagad are handled through their respective secure APIs. We never have access to your complete card details.

• We only retain transaction reference IDs, payment status, and the last four digits of your card number (if applicable) for order tracking and refund processing.
• All payment pages are served over HTTPS with 256-bit SSL encryption.
• Cash on Delivery transactions do not involve any digital payment data storage.

Our platform uses cookies and similar tracking technologies to enhance your browsing experience and gather analytical data. The types of cookies we use include:

• Essential Cookies: Required for basic platform functionality, including user authentication, shopping cart management, and security features. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our platform, which pages are most popular, and where users experience issues. We use Google Analytics for this purpose.
• Preference Cookies: Remember your settings and preferences, such as language, currency display, and previously viewed products.
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness. These are only activated with your explicit consent.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform.

We do not sell your personal data to third parties. We may share your information only in the following limited circumstances:

• Delivery Partners: Your name, phone number, and delivery address are shared with our courier partners solely for the purpose of delivering your order.
• Payment Processors: Transaction data is shared with SSLCommerz, bKash, and Nagad to process your payments securely.
• Analytics Providers: Anonymized usage data may be shared with analytics services such as Google Analytics to help us improve the Platform.
• Legal Requirements: We may disclose your information if required by law, court order, or a government authority in Bangladesh.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the business transaction, subject to the same privacy protections.

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal obligations:

• Account Data: Retained for as long as your account is active. Upon account deletion, personal data is removed within 30 days, except where retention is required by law.
• Order Data: Transaction records are retained for a minimum of 6 years to comply with Bangladesh tax and commercial laws.
• Marketing Data: Retained until you withdraw consent or unsubscribe from marketing communications.
• Analytics Data: Aggregated and anonymized analytics data may be retained indefinitely as it cannot be linked to individual users.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• All data transmissions are encrypted using SSL/TLS protocols.
• Sensitive data at rest is encrypted using industry-standard encryption algorithms.
• Access to personal data is restricted to authorized personnel on a need-to-know basis.
• Regular security audits and vulnerability assessments are conducted on our systems.
• Employee access to customer data is logged and monitored.

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but are committed to maintaining the highest reasonable standards.

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data. You can also update most information directly through your account settings.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Opt-Out: Withdraw consent for marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting our support team.
• Data Portability: Request your data in a structured, machine-readable format.
• Objection: Object to the processing of your personal data for specific purposes, including profiling and direct marketing.

To exercise any of these rights, please contact us using the information provided at the end of this policy. We will respond to your request within 30 business days.

TechBox Ltd. operates in compliance with the applicable data protection and privacy laws of Bangladesh, including:

• Digital Security Act, 2018: We comply with the provisions of the Bangladesh Digital Security Act regarding the collection, storage, and processing of personal data in digital form.
• ICT Act, 2006: Our data handling practices adhere to the Information and Communication Technology Act and its subsequent amendments.
• Consumer Rights Protection Act, 2009: We respect consumer rights in all our data processing activities and commercial practices.

We are committed to adopting and complying with any future data protection legislation enacted in Bangladesh. If you believe your data has been mishandled, you have the right to file a complaint with the relevant regulatory authority.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by sending you a notification via email or through the Platform.

We encourage you to review this policy periodically to stay informed about how we protect your information.

For any privacy-related questions, data access requests, or concerns about how your information is handled, please contact our data protection team:

We aim to respond to all data-related requests within 30 business days. For urgent matters, please call us directly during business hours (Sunday to Thursday, 9:00 AM to 6:00 PM BST).