Legal

Privacy policy

What data DropShop BD collects from sellers and shoppers, how it is stored and secured, and the rights you have over it.

Last updated: 30 July 2026

1. Data we collect

  • Seller account: name, email, and the identity returned by Google or Apple if you use social sign-in.
  • Store data: shop name, slug, products, pricing, orders and customers you create.
  • Shopper data: name, phone, delivery address and payment method submitted at storefront checkout.
  • Technical: log and diagnostic data needed to operate the service.

2. How we use it

To operate your store, render your storefront, process orders, book deliveries and provide support. We do not sell personal data.

3. Sharing

  • Suppliers, for the products you import.
  • Courier partners, for the consignments you book.
  • Infrastructure providers hosting the platform and database.

4. Security

Store data is isolated with row-level security so one seller cannot read another's records. Privileged operations run server-side only, and public order intake is validated and rate-limited.

5. Retention

We retain store and order records while your account is active, and for as long as required for tax and dispute purposes afterwards.

6. Your rights

You can access, correct, export or request deletion of your data by contacting us. Shopper data requests should be raised with the seller whose storefront collected it.

7. Contact

privacy@dropshop.bd