Privacy Policy
Effective date: 4 July 2026
Ekafela (“ইকাফেলা”, “we”, “us”) operates the online store at ekafela.com. This policy explains what personal data we collect, why, who we share it with, and your choices. By using our website or contacting us through our messaging channels, you agree to this policy.
1. Information we collect
Account & order information. Your name, mobile number, email address, and delivery address (street, area, thana, district, division, postcode) when you place an order or create an account.
Order & payment information. Items ordered, order history, amounts payable, and payment details for the method you choose (e.g. cash on delivery). We do not store card numbers.
Delivery information. Delivery status updates from our delivery partner, and a proof-of-delivery photo taken when a cash-on-delivery order is handed over.
Messages. If you contact us through our Facebook Page (Messenger), WhatsApp, phone, or email, we receive and store your messages — including any photos, voice notes, or files you send — so our support team can help you. Messages are linked to your customer account using your phone number.
Device & usage information. Pages visited, products viewed, and purchases, collected through cookies and similar technologies (see section 5).
2. How we use your information
Process, deliver, and provide updates about your orders (including SMS and email notifications).
Respond to your questions and provide customer support across all channels.
Maintain your account, order history, and receipts.
Prevent fraud and secure our platform.
Measure advertising and improve our website and product range (see section 5).
Comply with legal and accounting obligations in Bangladesh.
We do not sell your personal data.
3. Who we share it with
Delivery partners — name, phone, address, and order value, to deliver your parcel and collect payment.
SMS and email providers — your phone number/email, to send order notifications.
Payment providers — when you pay through them, to process the payment.
Analytics and advertising services (Google, Meta) — see section 5.
Authorities — only where required by applicable law.
All service providers receive only the data needed for their task.
4. Facebook Messenger & WhatsApp
When you message our Facebook Page or WhatsApp Business number, Meta delivers those messages to us and we store them in our own systems to provide support and keep a record of your conversation. Meta’s own processing of your data is governed by Meta’s privacy policy. We never receive your Facebook password or private profile data — only the messages and attachments you send to us.
5. Cookies & analytics
We use Google Analytics (GA4) and the Meta Pixel, which set cookies (such as _ga, _fbp, _fbc) to understand how the store is used and to measure advertising. For purchase events we may also send data server-side to Google and Meta; any personal identifiers (email, phone) in those events are irreversibly hashed (SHA-256) before sending. You can block cookies in your browser settings; the store keeps working.
6. Storage & security
Your data is stored on secured servers. Chat attachments and delivery photos live in private storage accessible only through short-lived links. Access inside our company is role-restricted, and every change to your data is recorded in an audit log. All traffic to our website is encrypted (HTTPS).
7. Retention
We keep your data while your account is active and as long as needed for warranty, accounting, and legal requirements. Records that must be kept by law (e.g. invoices) are retained for the legally required period even after a deletion request.
8. Data deletion
You may request deletion of your personal data at any time:
Email [email protected] from the email/phone linked to your account, subject “Data deletion request”, or
Message our Facebook Page or WhatsApp with the same request.
We will verify your identity, delete or anonymize your personal data within 30 days, and confirm when done — except records we are legally required to keep (section 7).
9. Your rights
You can ask us to access, correct, or delete your personal data, or to stop sending you marketing messages, using the contacts in section 8.
10. Children
Our store is not directed at children under 13, and we do not knowingly collect their data.
11. Changes
We may update this policy; the current version is always at ekafela.com/privacy-policy with its effective date.
12. Contact
Ekafela — Dhaka, Bangladesh
Email: [email protected]
Facebook: our official Ekafela Page