Privacy Policy
Table of Contents
- Introduction & Scope
- Definitions
- Information We Collect
- Automatically Collected Data
- Seller Information
- How We Use Information
- Order & Delivery Data
- Payment Information
- Third-Party Providers
- Information Sharing
- Cookies & Local Storage
- Data Security
- Data Retention
- Your Privacy Rights
- Account & Data Deletion
- Marketing Communications
- Children's Privacy
- Third-Party Links
- Policy Changes
- Contact & Privacy Requests
1 Introduction & Scope
This Privacy Policy explains how MR Shop ("we", "our", or "us"), operated by MR IT Company, collects, uses, stores, and protects your personal information when you visit mrshopbangladesh.com (the "Website") or use any of our services.
This Policy applies to all visitors, registered customers, and sellers who use the Website. By accessing or using MR Shop, you acknowledge that you have read and understood this Privacy Policy.
MR Shop is an online marketplace connecting buyers with sellers of authentic Bangladeshi products. We act as an intermediary platform and do not directly sell products ourselves.
2 Definitions
- "User", "you", "your" — Any person who visits, browses, or uses the Website, whether registered or not.
- "Customer" — A registered user who purchases products through the Website.
- "Seller" — A registered business or individual who lists and sells products through the Website.
- "Personal Information" — Any data that identifies or can be used to identify a specific individual, such as name, email, phone number, or address.
- "Services" — All features, tools, and functionalities available on the Website, including browsing, purchasing, selling, wishlisting, order tracking, and customer support.
3 Information We Collect
We collect different categories of information depending on how you interact with MR Shop.
3.1 Information You Provide Directly
When you create a customer account, we collect:
- Full name
- Email address
- Password (stored in encrypted form on our servers — we never see your plain-text password)
- Phone number (optional at registration)
When you complete your profile or place an order, we may also collect:
- Division, District, Upazila/Thana, and Area (for delivery address)
- Street address and postal code
- Latitude and longitude coordinates (if you choose to share your location)
- Profile photo (if uploaded)
When you use Google Sign-In or Facebook Login, we receive:
- Name and email address from your Google or Facebook account
- Profile photo (if publicly available on your social account)
When you submit a product review or rating, we collect:
- Your review text and star rating
- Your display name (as shown on your profile)
When you contact customer support via the chat feature, we process:
- The messages you send in the chat
When you apply through the "Work With Us" careers page, we collect:
- Full name, email address, phone number
- Work experience details
- Skills and qualifications
4 Automatically Collected Data
When you visit the Website, certain information is collected automatically through your browser and our analytics tools:
| Data Type | Examples | Purpose |
|---|---|---|
| Device & Browser | Browser type and version, operating system, screen resolution, device type | To optimize the Website for your device and ensure compatibility |
| Usage Data | Pages visited, time spent on pages, click patterns, scroll depth, navigation paths | To understand how users interact with the Website and improve its design |
| Session Data | Session duration, referring website, exit pages | To analyze traffic sources and improve user experience |
| IP Address | Your IP address (automatically logged by our web server) | To serve the correct content, prevent abuse, and ensure security |
Analytics Service
We use Microsoft Clarity to understand how visitors interact with the Website. Clarity may record anonymized session data such as mouse movements, clicks, and scroll patterns. This data is used solely to improve the Website's usability and is not used to identify individual users. For more information, see Microsoft Clarity's Privacy Policy.
5 Seller Information
Sellers who register on MR Shop provide additional business and identity information. This is collected to verify seller identity, enable payment processing, and operate the marketplace.
When you register as a Seller, we collect:
- Full name, phone number, and email address
- Business / shop name
- Payment receiving method (bKash, Nagad, Rocket, or bank transfer)
- Payment account number or wallet number
- Bank name (if bank transfer is selected)
- Merchant bKash number and/or Merchant Nagad number (optional — for accepting customer QR payments)
- Shop location: address, latitude, and longitude coordinates
- Product categories you intend to sell
- Profile photo (optional)
- Identity document: National ID (NID) number or Birth Certificate number
Once your seller account is active, additional data may be collected:
- Shop tagline and brand colors (customization settings)
- Store configuration (shipping, payment, and inventory preferences)
- Product listings, descriptions, images, and pricing
- Order and sales history related to your products
6 How We Use Information
We use the information we collect for the following specific purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation & authentication | Name, email, password, phone | Contract performance |
| Order processing & delivery | Name, phone, address, location coordinates | Contract performance |
| Payment processing | Transaction IDs, payment method selection | Contract performance |
| Seller verification & payouts | Full name, phone, NID/Birth Certificate, bank details, location | Contract performance, legal obligation |
| Customer support | Chat messages (if contacting human support) | Legitimate interest |
| Website improvement | Usage data, session data, device info | Legitimate interest |
| Fraud prevention & security | IP address, device info, usage patterns | Legitimate interest, legal obligation |
| Marketing (with consent) | Email address, name | Consent |
7 Order & Delivery Data
When you place an order on MR Shop, we collect and process the following information to fulfill your purchase:
- Shipping details: Recipient name, phone number, delivery address (division, district, upazila, street, postal code)
- Order details: Products ordered, quantities, prices, and selected delivery zone
- Payment method: Whether you selected Cash on Delivery (COD) or Online Payment (bKash/Nagad)
- Payment proof: If you pay online, you may submit a transaction ID and payment screenshot for verification
Delivery Partners
To deliver your order, we share the minimum necessary information with our delivery partners:
- Pathao Courier: Recipient name, phone number, and delivery address
- Sundarban Express: Recipient name, phone number, and delivery address
This information is shared solely to enable delivery and is not used by these partners for marketing purposes.
8 Payment Information
MR Shop supports the following payment methods:
- Cash on Delivery (COD): You pay the courier at the time of delivery. We do not collect any payment card details for COD orders.
- bKash: You scan a QR code and pay directly through the bKash app. We do not see or store your bKash PIN or account credentials.
- Nagad: You scan a QR code and pay directly through the Nagad app. We do not see or store your Nagad PIN or account credentials.
- Rocket: Supported as a seller payment receiving method.
Seller payments (payouts) are processed to the bank account or mobile wallet number that the seller provides during registration. This information is stored securely and used exclusively for disbursing seller earnings.
9 Third-Party Service Providers
We use the following third-party services to operate the Website and provide our services. Each service provider has its own privacy policy governing how they handle data.
| Service | Purpose | Data Shared |
|---|---|---|
| Microsoft Clarity | Website analytics and session recording | Anonymized usage data (clicks, scrolls, session recordings) |
| Google Sign-In | Social login authentication | None shared with Google; Google shares your name and email with us upon your consent |
| Facebook Login | Social login authentication | None shared with Facebook; Facebook shares your name, email, and profile photo with us upon your consent |
| Pathao Courier | Order delivery | Recipient name, phone number, delivery address |
| Sundarban Express | Order delivery | Recipient name, phone number, delivery address |
| bKash / Nagad / Rocket | Payment processing | Transaction ID and payment amount (no account credentials) |
| OpenStreetMap (Nominatim) | Location search (seller shop location picker) | Search query text (no personal data) |
| GitHub | Source code hosting & deployment | No user data; code repository only |
| Render | Backend hosting | Server-side data processed in the course of running the application |
10 Information Sharing & Disclosure
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
We may share your information only in the following circumstances:
- With delivery partners: To fulfill your order (name, phone, address).
- With payment providers: To process your payment (transaction ID, amount). We do not share card or PIN details.
- With sellers: When you place an order, the relevant seller receives your name, delivery address, and phone number to process and ship your order.
- With service providers: As described in Section 9, limited data is shared with service providers who help us operate the Website.
- For legal compliance: We may disclose information if required by law, court order, or governmental authority, or to protect the rights, property, or safety of MR Shop, our users, or the public.
- Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. We will notify you of any such change.
11 Cookies & Local Storage
MR Shop uses browser localStorage (and may use cookies) to store certain data on your device. This data stays on your device and is not sent to our servers unless you are logged in and performing an action that requires server communication.
Data Stored Locally in Your Browser
| Storage Key | Contents | Purpose |
|---|---|---|
mr_shop_user |
User profile data (name, email, role, login state) | Keep you logged in and display your profile |
mr_shop_token |
Authentication token | Authenticate your API requests |
mr_shop_cart |
Cart items (product IDs, quantities) | Remember items in your shopping cart |
mr_shop_wishlist |
Wishlisted product IDs | Remember your wishlist |
mr_shop_seller |
Seller profile data | Keep sellers logged in to their dashboard |
mr_shop_seller_token |
Seller authentication token | Authenticate seller API requests |
mrshop-theme |
Dark/light mode preference | Remember your display preference |
mrshop-settings |
Seller store configuration | Remember store settings |
mr_checkout_address |
Selected checkout address | Pre-fill checkout form |
mr_shop_notifications |
In-app notification data | Display notifications |
Third-Party Cookies
Microsoft Clarity may set cookies on your device to distinguish between unique browsers and track user sessions. These cookies do not personally identify you. You can manage or block cookies through your browser settings.
12 Data Security
We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:
- Passwords are hashed (not stored in plain text) on our servers
- API communications use HTTPS encryption in transit
- Authentication tokens are used to verify identity on each request
- Access to user data is limited to authorized personnel who need it to perform their duties
However, no method of electronic storage or transmission over the internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
13 Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this Policy.
| Data Type | Retention Period |
|---|---|
| Customer account data (name, email, phone) | Retained as long as your account is active. Deleted upon account deletion request. |
| Order & transaction records | Retained for as long as necessary for legal, accounting, and business purposes, including dispute resolution. |
| Seller identity documents (NID, Birth Certificate) | Retained for the duration of the seller's active account. Deleted upon account deletion. |
| Delivery address history | Retained while your account is active. Removed upon account deletion. |
| Analytics data (Microsoft Clarity) | Retained per Microsoft's data retention policies (typically up to 1 year for aggregated data). |
| localStorage data | Stored on your device until you clear it or until you log out. Not retained on our servers. |
14 Your Privacy Rights
You have the following rights regarding your personal information:
- Access: You may request a copy of the personal data we hold about you.
- Correction: You may request that we correct inaccurate or incomplete data. You can update most information directly from your profile settings.
- Deletion: You may request deletion of your personal data. See Section 15 for details.
- Opt-out of marketing: You may opt out of receiving marketing emails at any time by contacting us. Transactional messages (order confirmations, delivery updates) will still be sent as they are necessary for service delivery.
- Data portability: You may request your data in a commonly used, machine-readable format.
- Withdraw consent: Where processing is based on your consent, you may withdraw it at any time.
To exercise any of these rights, contact us at privacy@mrshopbangladesh.com. We will respond to your request within a reasonable timeframe.
15 Account & Data Deletion
You may request deletion of your MR Shop account and associated personal data at any time.
How to Request Deletion
- Online: Visit our Data Deletion page and follow the instructions to submit a deletion request.
- Email: Send a request to privacy@mrshopbangladesh.com from the email address associated with your account.
- In-app: Contact our support team through the Help Center.
What Happens When You Delete Your Account
- Your account profile, order history, and saved addresses will be removed from our active systems.
- Your reviews may be retained in anonymized form (without your name or email).
- Transaction records may be retained for legal and accounting obligations.
- Data stored in your browser's localStorage (cart, wishlist, theme preference) will remain on your device until you clear it.
Sellers requesting account deletion should contact us directly, as we may need to settle pending orders and payments first.
16 Marketing Communications
If you have opted in to receive marketing communications, we may send you emails about:
- New products and promotions
- Seasonal offers and discounts
- MR Shop updates and announcements
You can opt out of marketing emails at any time by clicking the "unsubscribe" link in the email or by contacting us at privacy@mrshopbangladesh.com. Opting out of marketing does not affect transactional messages (order confirmations, delivery updates, account notifications).
17 Children's Privacy
MR Shop is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@mrshopbangladesh.com and we will take steps to delete such information.
Our Work for Children initiative is a charity program and does not collect personal data from children through the Website.
18 Third-Party Links
The Website may contain links to third-party websites, including:
- Social media platforms (Facebook, Instagram, YouTube, TikTok)
- Seller stores and external websites
- Payment provider websites (bKash, Nagad, Rocket)
These third-party sites have their own privacy policies, and we are not responsible for their practices. We encourage you to review the privacy policy of every site you visit.
19 Policy Changes
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page.
We encourage you to review this Policy periodically. Your continued use of the Website after any changes constitutes acceptance of the updated Policy.
20 Contact & Privacy Requests
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:
- Email: privacy@mrshopbangladesh.com
- Facebook: MR Shop Official
- Help Center: Chat with us
- Data Deletion: Request data deletion
We aim to respond to all privacy-related inquiries within a reasonable timeframe.