Privacy Policy for Arafah - Online Shopping Mart

Effective Date: October 7, 2025

Arafah Shop Ltd. ("we," "us," or "our") operates the Arafah - Online Shopping Mart mobile application (the "App") and the website www.arafah.shop (the "Website"). We are committed to protecting your privacy and ensuring that your personal information is handled in a safe, transparent, and responsible manner. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App, Website, or services (collectively, the "Services"). By using our Services, you consent to the practices described in this Privacy Policy.

This Privacy Policy complies with applicable laws, including but not limited to the General Data Protection Regulation (GDPR) for users in the European Economic Area, the California Consumer Privacy Act (CCPA) for California residents, and other relevant data protection regulations. It also aligns with the privacy requirements of the Google Play Store and Apple App Store, including transparency in data collection, user rights, and secure data handling.

If you do not agree with this Privacy Policy, please do not use our Services.

1. Information We Collect

We collect information to provide, improve, and personalize our Services, process orders, and comply with legal obligations. We only collect information that is necessary for these purposes.

1.1 Information You Provide

When you use our Services, you may provide the following personal information:

• Account Information: Name, email address, phone number, password, and date of birth (if applicable for age verification).
• Order and Payment Information: Shipping and billing address, payment details (e.g., credit card number, expiration date, CVV), and purchase history.
• Contact Information: Email or phone for customer support, newsletters, or promotions.
• User-Generated Content: Reviews, ratings, photos of products, or messages in chat support.
• Profile Information: Preferences, wishlist items, or saved addresses.

1.2 Information Collected Automatically

We may automatically collect certain information through cookies, device identifiers, or analytics tools:

• Device and Usage Data: IP address, device type, operating system, browser type, app version, unique device identifiers (e.g., IDFA on iOS or Android ID), and usage patterns (e.g., pages viewed, time spent, search queries).
• Payment Processing Data: Transaction details processed securely by third-party providers (we do not store full card details).

1.3 Information from Third Parties

We may receive information about you from:

• Payment processors or shipping partners for order fulfillment.
• Advertising partners for personalized ads (with your consent where required).

For users under 13 years old (or the applicable age in your jurisdiction), we do not knowingly collect personal information without verifiable parental consent, in compliance with the Children's Online Privacy Protection Act (COPPA).

2. How We Use Your Information

We use your information for legitimate business purposes, including:

• Providing Services: Processing orders, managing accounts, delivering products, and providing customer support.
• Personalization: Recommending products based on your browsing history or preferences.
• Communication: Sending order confirmations, shipping updates, promotional emails, or responding to inquiries.
• Analytics and Improvement: Analyzing usage trends to enhance the App and Website.
• Marketing: Sending targeted ads or newsletters (you can opt out at any time).
• Security and Fraud Prevention: Detecting and preventing fraudulent activity.
• Legal Compliance: Responding to legal requests or protecting our rights.

We do not use your information for purposes incompatible with those described here without your consent.

3. How We Share Your Information

We do not sell your personal information. We may share it only in the following limited circumstances:

• Service Providers: With trusted third parties who assist us, such as payment processors (e.g., Bkash, Nagad, SSLCOMMERZ), shipping carriers (e.g., local couriers in Bangladesh), cloud hosting services (e.g., AWS), and analytics tools (e.g., Google Analytics). These providers are contractually obligated to protect your data and use it only for the services they provide.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
• Legal Requirements: To comply with laws, regulations, or legal processes (e.g., court orders).
• With Your Consent: For marketing partners or social media sharing if you explicitly agree.

We ensure that any third parties with access to your data provide equivalent protection, as required by Google Play and Apple App Store guidelines.

4. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information, including encryption for payment data (e.g., SSL/TLS), secure servers, and access controls. However, no system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law (e.g., tax records for 7 years). Account data is retained while your account is active; inactive accounts may be deleted after 2 years. You can request deletion at any time (see Section 7).

6. Your Rights and Choices

You have control over your personal information. Depending on your location, you may have the following rights:

• Access: Request a copy of your data.
• Correction: Update inaccurate information.
• Deletion: Request removal of your data (subject to legal obligations).
• Objection/Restriction: Object to or restrict processing (e.g., for marketing).
• Portability: Receive your data in a structured format.
• Withdraw Consent: For processing based on consent.

To exercise these rights, contact us at contact@arafah.shop. We will respond within 30 days (or as required by law). For CCPA purposes, California residents can also request information on sales (none occur) or opt out of sales (not applicable).

You can also:

• Opt out of marketing emails via the unsubscribe link.
• Disable cookies in your browser settings (though this may affect functionality).
• On iOS: Limit ad tracking via Settings > Privacy > Advertising > Limit Ad Tracking.
• On Android: Opt out of personalized ads via Google Settings > Ads > Opt out of Ads Personalization.

For EU users, our Data Protection Officer can be reached at the contact email above.

7. Data Deletion

You can delete your account and associated data through the App settings or by emailing us. We will permanently delete your data within 30 days, except where retention is required by law (e.g., transaction records). This complies with Google Play's data deletion requirements and Apple's user control guidelines.

8. International Data Transfers

Arafah Shop Ltd. is based in Bangladesh. If you are outside Bangladesh, your information may be transferred to and processed in Bangladesh or other countries where our service providers operate. We ensure appropriate safeguards, such as Standard Contractual Clauses for EU data transfers, to protect your information.

9. Children's Privacy

Our Services are not intended for children under 13 (or the applicable age). We do not knowingly collect data from children. If we learn we have, we will delete it promptly. Parents can contact us to review or delete a child's data.

10. Third-Party Links and Services

Our Services may contain links to third-party sites (e.g., payment gateways). We are not responsible for their privacy practices. Review their policies before providing information.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you via email or in-App notice for material changes. Continued use of our Services after changes constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy, please contact:

Arafah Shop Ltd.
Plot No. 23 and 25, Sonargaon Janapath, Sector-13, Uttara, Dhaka 1230, Bangladesh
Email: contact@arafah.shop
Phone: +8801869963922
Website: www.arafah.shop

For privacy complaints, you may also contact your local data protection authority (e.g., Data Protection Commissioner in Bangladesh).

This Privacy Policy was last updated on October 7, 2025.