Last updated: August 22, 2025
Boikutoo (“we”, “us”, or “our”) operates an online bookstore at https://boikutoo.com (the “Site”). We are committed to protecting your privacy and personal data. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and your rights regarding it, specifically within the Bangladesh context.
If you have questions about this policy, contact us at:
Email: support@boikutoo.com
Address: 160 Lake Circus (6th Floor), Kalabagan, Dhaka-1205, Bangladesh
1) What information we collect
1.1 Information you provide
- Account information: name, email address, password, and other profile details you provide when creating an account.
- Order information: shipping address (in Bangladesh or abroad as applicable), billing address, phone number, payment method (last four digits, tokenized data), and order history.
- Communications: any messages you send to customer support, reviews, product ratings, or feedback.
- Content: product reviews, wishlists, and notes you save on the site.
1.2 Information we automatically collect
- Device and usage data: IP address, browser type, operating system, referral source, pages viewed, time spent on pages, and clickstream data.
- Location data: approximate location derived from IP address (and with your consent, precise location for delivery purposes).
- Cookies and similar technologies: session tokens, preferences, analytics data, and advertising identifiers.
1.3 Information from third parties
- Payment providers: tokenized payment details.
- Shipping partners: tracking information and delivery status.
- Marketing partners: if you opt in, data to tailor offers and ads.
2) How we use your information
- To process and fulfill orders: verify identity, process payments, ship products, and communicate order status.
- To manage your account: maintain and secure your account, support requests, and personalized experiences.
- To improve the Site and services: analyze usage, fix bugs, improve search and recommendations, and optimize marketing.
- To communicate with you: send order confirmations, updates, newsletters (if subscribed), and promotional offers (with opt-in/opt-out controls).
- For fraud prevention and security: monitor for suspicious activity, protect against unauthorized access, and enforce our policies.
- For legal and compliance purposes: resolve disputes, comply with applicable laws, and enforce our terms.
3) Legal bases for processing (Bangladesh context)
Bangladesh does not have a comprehensive GDPR-style data protection regime as of the date of this policy. We rely on:
- Contractual necessity: to fulfill orders and provide services.
- Legitimate interests: security, fraud prevention, and improvement of our services.
- Consent: where required for marketing communications and cookies.
- Compliance with applicable laws: to the extent required under local regulations (e.g., consumer protection, taxation, financial regulations).
We will process personal data in a manner that respects user rights and adheres to applicable Bangladesh laws.
4) How we share your information
- Service providers: payment processors, shipping companies, hosting providers, analytics and marketing platforms.
- Business transfers: in the event of a merger, acquisition, or sale of all or part of Boikutoo, your information may be transferred.
- Legal requests: if required by law, regulation, search warrant, or governmental request.
- Aggregated/anonymized data: used for analytics and improvements; not linked to personal identifiers.
We do not sell your personal data to third parties.
5) International data transfers
Your information may be transferred to and processed in countries outside Bangladesh, including countries that may not have the same data protection laws as your jurisdiction. We implement safeguards where required by applicable laws and best practices, such as contractual clauses and privacy notices. If you are located in Bangladesh, we will endeavor to ensure adequate protection for cross-border transfers consistent with local legal requirements.
6) Retention of information
- Account data: retained as long as your account exists or as needed to provide services.
- Order data: retained for as long as required by applicable law or for a reasonable period to handle returns, warranties, and disputes.
- Usage data: retained for as long as necessary for analytics and security purposes.
If you request deletion, we will comply as permitted by law and subject to any legal obligations to retain certain information.
7) Your rights
If you are in Bangladesh
- Right to access and request a copy of your personal data held by us.
- Right to correct inaccuracies in your personal data.
- Right to request deletion of personal data, subject to legal and operational obligations.
- Right to object to processing in certain circumstances (e.g., direct marketing).
- Right to data portability where applicable (e.g., where processing is based on consent or contract).
- Right to withdraw consent at any time for processing based on consent.
- Right to lodge a complaint with a relevant authority (e.g., Bangladesh Information Commission or other applicable regulatory bodies).
To exercise these rights, contact us at the details above. We may request information to verify your identity.
8) Cookies and tracking technologies
- We use cookies and similar technologies to personalize content, analyze site usage, remember preferences, and support security and fraud prevention.
- You can manage cookies via your browser settings and opt out of interest-based advertising where supported. Note that removing or blocking cookies may affect site functionality.
9) Security measures
- We implement industry-standard security measures, including encryption in transit (TLS), secure storage, access controls, and regular security assessments.
- We limit access to personal data to employees, contractors, and partners who need it for business purposes and who are bound by confidentiality obligations.
10) Children’s privacy
Boikutoo is not intended for children under 16 (or the applicable minimum age). We do not knowingly collect personal data from children. If you become aware that a child has provided personal data to us, please contact us so we can remove it.
11) Your marketing choices
- You can opt in or out of marketing emails in your account settings or via the unsubscribe link in our emails.
- We may send transactional messages (e.g., order confirmations) regardless of marketing preferences.
12) Do Not Track (DNT) and similar signals
Some browsers provide DNT signals. Our Site does not currently respond to DNT signals, but you may adjust your privacy preferences via cookies and account settings.
13) Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make changes, we will update the “Last updated” date and, in some cases, provide notice on the Site or via email.
14) How to contact us
If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at:
- Email: support@boikutoo.com
- Address: 160 Lake Circus (6th Floor), Kalabagan, Dhaka-1205, Bangladesh
- Phone: +880 1882215536
15) Data protection officer (DPO) or privacy contact
Bangladesh does not mandate a nationwide DPO regime, but if you operate in regulated sectors or prefer to appoint a privacy contact, you may provide their details here.