Our promise to you
Khadiza Dreams is a small, independent studio based in Dhaka, Bangladesh. We take your privacy seriously — not because the law requires it, but because you're trusting us with your information, and that matters.
This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and the choices you have. It applies to our website, our order process, and any communication you have with us.
Information we collect
We collect information in three ways: information you give us, information collected automatically, and information from third-party services.
Information you give us
| What | When | Why |
|---|---|---|
| Name, email, phone | At checkout or when creating an account | To confirm and deliver your order |
| Shipping address | At checkout | To deliver your parcel |
| Order details | At checkout | To make and dispatch your piece |
| Payment reference | When you pay via bKash, Nagad or card | To confirm payment (we never see full card numbers) |
| Messages & emails | When you contact us | To answer your question and keep a record |
| Reviews & photos | When you share them with us | To display on our site or social media (with your permission) |
Information collected automatically
- Device & browser info — to make the site work across devices.
- Pages you visit — anonymised, to understand what people like.
- Approximate location — derived from your IP, used only for currency and shipping defaults.
- Cookies — small files that remember your cart and preferences. See section 04.
Information from third parties
If you pay via bKash, Nagad or a card, our payment partners share a confirmation with us (a transaction ID and status) — but never your full card number or PIN. If you arrive at our site through a social media ad, the platform may share aggregate statistics with us, not your identity.
How we use your information
We use your personal information only for the following purposes:
- To process and deliver your order. This includes confirming payment, making your piece, dispatching it, and providing tracking.
- To communicate with you about your order. Order confirmations, dispatch notices, and responses to your messages.
- To improve the shop. We look at anonymised data to understand which pages are useful and which need work.
- To send you updates — only if you've opted in. New drops, restocks and offers. You can unsubscribe anytime, and we'll stop immediately.
- To meet our legal obligations. Keeping accurate records for tax, accounting and consumer protection.
- To prevent fraud and abuse. Keeping the shop and our customers safe.
Cookies & local storage
We use a small number of cookies and local browser storage to make the shop work:
- Essential cookies — keep you logged in, remember your cart, and secure your session. The site won't work without these.
- Preference cookies — remember your language and currency choice.
- Analytics cookies — anonymised, help us understand what's working. You can block these without breaking the site.
We don't use advertising cookies or cross-site trackers to follow you around the internet.
Who we share your information with
We share the minimum necessary information with the following partners, only to fulfil your order and run the shop:
- Courier companies — your name, phone and delivery address, so your parcel reaches you.
- Payment providers — bKash, Nagad and our card gateway, to process your payment.
- Email service — to send order confirmations and, if you opted in, occasional updates.
- Website hosting & analytics — anonymised access to keep the site fast and functional.
- Legal authorities — only if we're required to by law, and only the minimum required.
We never sell, rent or trade your personal information to anyone, ever.
How long we keep your information
We keep your information only as long as needed:
- Order records — for 5 years, to meet tax and accounting requirements in Bangladesh.
- Account details — for as long as your account is active, plus 30 days after you close it.
- Messages and emails — for 2 years, so we can help if you come back to us.
- Marketing subscriptions — until you unsubscribe, plus 30 days.
- Anonymised analytics — up to 26 months, then deleted.
When information is no longer needed, we delete it or anonymise it so it can't be traced back to you.
What you can ask us to do
You have the following rights over your personal information. We'll always respond within 30 days.
Access
Ask us what we hold about you, and get a copy.
Correction
Ask us to fix anything that's wrong or out of date.
Deletion
Ask us to delete your data, except what we must keep by law.
Withdraw consent
Unsubscribe from emails or stop non-essential processing.
Portability
Ask for your data in a readable format to move elsewhere.
Object
Tell us to stop a specific use of your data and we will.
To exercise any of these rights, contact us with the details. We may ask you to confirm your identity first — but only to keep your data safe.
How we protect your information
We take reasonable technical and organisational measures to keep your data safe:
- HTTPS everywhere — all traffic between your browser and our site is encrypted.
- Secure payments — card data goes directly to our PCI-compliant gateway. We never see or store card numbers.
- Limited access — only the founder and (where necessary) our technical partner can access order data.
- Regular backups — so nothing is lost, and everything can be recovered.
Children's privacy
Our shop is intended for adults and young people aged 16 and over. We don't knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please let us know and we'll delete it promptly.
Parents and guardians are welcome to order on behalf of a child — in that case, we collect your information (the adult), not the child's.
International data transfers
We're based in Bangladesh, and the services we use to run the shop — website hosting, email, analytics — may store data on servers outside Bangladesh. Wherever your data goes, we make sure it's protected by appropriate safeguards and written agreements with our providers.
If you're ordering from outside Bangladesh, you understand that your information will be transferred to and processed in Bangladesh (and possibly other countries) so we can fulfil your order.
Links to other sites
Our site may link to other websites — for example, our Instagram page or a payment provider. We're not responsible for the privacy practices of those sites. When you leave our site, we encourage you to read the privacy policy of any site you visit.
Updates to this policy
We may update this Privacy Policy from time to time — for example, if we add a new service, change payment providers, or if the law changes. When we do, we'll update the "Last updated" date at the top of this page.
If the changes are significant, we'll notify you by email (if you have an account or are subscribed) at least 14 days before they take effect.
Get in touch about your data
If you have any questions about this Privacy Policy, or want to exercise any of your rights, please contact us:
- Email: privacy@khadizadreams.com
- General enquiries: hello@khadizadreams.com
- WhatsApp: +880 17 0000 0000
- Postal address: Khadiza Dreams, Gulshan 2, Dhaka 1212, Bangladesh
We'll always try to resolve any concern you have. If you're not satisfied with our response, you have the right to complain to the relevant data protection authority in your country.