Privacy Policy

Effective date: 31 July 2026

Astoraa (“Astoraa,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you visit or use the Astoraa e-commerce website, create an account, place an order, communicate with us, or subscribe to our promotional communications.

By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

Astoraa is an e-commerce store operating in Bangladesh.

For privacy-related questions, requests, or complaints, you may contact us using the following details:

Business name: Astoraa
Website: https://astoraa.store/
Email: contact@astoraa.store
Phone: +88-01624769779, +88-01851709883, +88-01353141500
Business address: Dhaka, Bangladesh.

2. Personal Data We Collect

The personal data we collect depends on how you interact with Astoraa.

2.1. Personal Data We Collect

When you create or manage an Astoraa account, we may collect:

* Your full name;
* Email address;
* Mobile phone number;
* Username or account identifier;
* Password in encrypted or securely hashed form;
* Saved delivery addresses;
* Account preferences; and
* Your account and order history.

You are responsible for keeping your account information accurate and protecting the confidentiality of your password.

2.2 Order and delivery information

When you place an order, we may collect:

* Customer name;
* Mobile phone number;
* Email address, where provided;
* Delivery address;
* Billing address, where applicable;
* Products ordered;
* Order value;
* Order date and status;
* Delivery instructions;
* Communications relating to the order;
* Return, exchange, cancellation, or complaint information; and
* Cash-on-delivery payment status.

Astoraa currently accepts **cash on delivery only**. We do not collect or store debit card, credit card, mobile banking, or online payment account details through the website.

2.3 Communications

When you contact us by telephone, email, SMS, social media, website form, or another communication channel, we may collect:

* Your name and contact details;
* The content of your enquiry or message;
* Order or account information connected to your enquiry;
* Customer-support records; and
* Any attachments or information you voluntarily provide.

2.4 Marketing information

When you subscribe to or consent to receive promotional communications, we may collect:

* Your name;
* Email address;
* Mobile phone number;
* Marketing preferences;
* Records of your consent;
* Your responses to promotional messages; and
* Unsubscription or opt-out requests.

2.5 Website and technical information

When you use our website, certain technical information may be collected automatically, including:

* Internet Protocol address;
* Browser type and version;
* Device type;
* Operating system;
* Login and session information;
* Pages visited;
* Date and time of access;
* Website errors; and
* Security and fraud-prevention information.

We may use essential cookies or similar technologies where necessary to operate the website, maintain account sessions, remember shopping-cart contents, and protect the website from fraud or unauthorised access.

3. How We Collect Personal Data

We may collect personal data:

* Directly from you when you create an account, place an order, contact us, or subscribe to marketing;
* Automatically when you access or interact with our website;
* From our employees or delivery personnel when they process or deliver an order;
* From courier and logistics providers regarding delivery status;
* From customer-service providers acting on our behalf; and
* From publicly available sources where permitted by law.

Please do not provide another person’s personal data unless you have their permission to do so.

4. How We Use Personal Data

Astoraa may use personal data to:

* Create, authenticate, and manage customer accounts;
* Receive, confirm, process, and fulfil orders;
* Contact customers to verify cash-on-delivery orders;
* Arrange delivery through our own delivery personnel or third-party couriers;
* Provide order confirmations and delivery updates;
* Respond to enquiries, complaints, returns, exchanges, and cancellations;
* Maintain customer and transaction records;
* Prevent fraudulent, false, abusive, or unauthorised orders;
* Protect our customers, personnel, website, and business;
* Improve our products, website, customer service, and operations;
* Send email or SMS marketing where the customer has consented or where otherwise permitted by law;
* Manage marketing preferences and opt-out requests;
* Comply with applicable legal, regulatory, accounting, tax, and reporting obligations;
* Establish, exercise, or defend legal claims; and
* Enforce our website terms, policies, and agreements.

We will not use personal data for a purpose that is materially different from the purpose for which it was collected without providing appropriate notice or obtaining consent where required.

5. Marketing Communications

Astoraa may send promotional offers, product updates, discount information, or other marketing messages by email or SMS when you have agreed to receive them or when such communication is otherwise permitted by applicable law.

You may stop receiving marketing communications at any time by:

* Selecting the unsubscribe option in a marketing email;
* Following the opt-out instructions in an SMS;
* Changing your communication preferences in your account, where available; or
* Contacting us at contact@astoraa.store.

Opting out of marketing will not prevent Astoraa from sending essential service messages, including order confirmations, delivery updates, account security notices, or responses to customer-support requests.

We do not sell or rent customer contact information to third parties for their independent marketing purposes.

6. Disclosure of Personal Data

We may disclose personal data only where reasonably necessary for the purposes described in this Privacy Policy.

6.1 Own delivery personnel

Where Astoraa delivers an order using its own personnel, relevant customer information may be provided to authorised employees or delivery representatives. This may include the customer’s name, telephone number, delivery address, order details, payable amount, and delivery instructions.

6.2 Courier and logistics providers

Where an order is delivered by a third-party courier, we may provide the courier with information necessary to complete the delivery, including:

* Customer name;
* Mobile phone number;
* Delivery address;
* Order or parcel reference;
* Cash-on-delivery amount;
* Delivery instructions; and
* Information needed to manage a failed, returned, or disputed delivery.

Courier providers may process this information under their own operational and legal obligations.

6.3 Service providers

We may use trusted service providers for services such as:

* Website hosting;
* Information technology support;
* Email or SMS delivery;
* Customer communication;
* Data storage and backup;
* Website security;
* Fraud prevention; and
* Business administration.

These providers should receive only the information reasonably necessary to perform their services and must handle the information in accordance with applicable obligations and contractual restrictions.

6.4 Legal and regulatory disclosure

We may disclose personal data where we reasonably believe disclosure is required:

* By applicable law, regulation, court order, or lawful government request;
* To cooperate with law-enforcement or regulatory authorities;
* To investigate suspected fraud, cybercrime, or unlawful activity;
* To protect the rights, property, safety, or security of Astoraa, its customers, employees, or the public; or
* To establish, exercise, or defend a legal claim.

6.5 Business restructuring

If Astoraa undergoes a merger, acquisition, sale, restructuring, financing, or transfer of business assets, relevant personal data may be disclosed to professional advisers, prospective purchasers, or the resulting business, subject to appropriate confidentiality and legal protections.

7. Legal Grounds for Processing

Depending on the circumstances and applicable law, Astoraa may process personal data on one or more of the following grounds:

* Your consent;
* The steps necessary to create or manage your account;
* The steps necessary to accept, process, deliver, or administer your order;
* Compliance with a legal or regulatory obligation;
* Protection of customers, Astoraa, or another person from fraud, harm, or unlawful conduct; and
* Astoraa’s legitimate business purposes, where such processing is permitted and does not improperly override your rights.

Where processing is based on consent, you may withdraw that consent, subject to applicable legal and contractual limitations.

8. Data Retention

Astoraa retains personal data only for as long as reasonably necessary to:

* Maintain your account;
* Process and document orders;
* Complete deliveries;
* Handle returns, complaints, and disputes;
* Maintain tax, accounting, and transaction records;
* Prevent fraud and misuse;
* Meet legal or regulatory requirements; and
* Establish, exercise, or defend legal claims.

The applicable retention period may vary according to the type of information and the reason it was collected.

When personal data is no longer reasonably required, we will take reasonable steps to delete, anonymise, or securely dispose of it, subject to our legal and operational obligations.

Closing an account may not result in the immediate deletion of all information. Certain order, delivery, accounting, fraud-prevention, or legal records may need to be retained.

9. Data Security

Astoraa uses reasonable administrative, organisational, and technical safeguards intended to protect personal data against:

* Unauthorised access;
* Unlawful use or disclosure;
* Accidental loss;
* Alteration;
* Destruction;
* Fraud; and
* Other forms of misuse.

These safeguards may include access controls, password protection, secure account authentication, system monitoring, restricted employee access, backups, and appropriate security procedures.

However, no website, electronic transmission, or storage system can be guaranteed to be completely secure. Customers should use strong passwords, keep their login information confidential, and notify Astoraa promptly if they suspect unauthorised access to their account.

10. Your Privacy Rights

Subject to applicable law and relevant exceptions, you may have the right to:

* Ask whether Astoraa holds personal data about you;
* Request access to your personal data;
* Request correction of inaccurate or incomplete information;
* Update your account and contact information;
* Withdraw consent where processing is based on consent;
* Object to or restrict certain uses of your information;
* Request deletion of personal data that is no longer required;
* Opt out of email or SMS marketing;
* Request information about relevant disclosures of your data; and
* Submit a complaint regarding how your data has been handled.

To make a privacy request, contact us at [Insert privacy email address].

We may need to verify your identity before processing a request. We may also retain or continue processing certain information where required or permitted by law, including for order records, tax obligations, fraud prevention, dispute resolution, or legal claims.

11. Cookies

Astoraa may use essential cookies and similar technologies to:

* Keep customers signed in;
* Maintain shopping-cart contents;
* Remember basic website preferences;
* Support website functionality;
* Protect accounts and the website from security threats; and
* Diagnose technical problems.

You may be able to block or delete cookies through your browser settings. However, disabling essential cookies may prevent certain website features, including account login or shopping-cart functions, from working correctly.

If Astoraa later introduces non-essential analytics, advertising, or behavioural tracking cookies, we may update this Privacy Policy and provide additional notices or consent controls where required.

12. Children’s Privacy

Astoraa’s website is not intended to knowingly collect personal data directly from children who do not have the legal capacity to provide valid consent or enter into a purchase transaction.

A parent or legal guardian should supervise any order placed by a minor. If we learn that a child’s personal data was collected without appropriate authorisation, we may delete or restrict the information as required by law.

Parents or guardians may contact us at contact@astoraa.store regarding a child’s personal data.

13. Third-Party Websites

The Astoraa website may contain links to websites, social media pages, or services operated by third parties.

Astoraa does not control the privacy practices, security, or content of those third parties. Customers should review the privacy policies of external services before providing them with personal information.

14. Data Breaches

If Astoraa becomes aware of a personal-data breach, we will investigate the incident and take reasonable steps to contain and address it.

Where required by applicable law, we will notify the relevant authority and affected individuals within the required period and provide available information about the nature of the incident and recommended protective actions.

15. Changes to This Privacy Policy

Astoraa may update this Privacy Policy to reflect:

* Changes to our website or services;
* Changes to our delivery or marketing practices;
* New technologies or service providers;
* Changes in applicable law; or
* Improvements to our privacy and security procedures.

The updated version will be published on our website with a revised effective date. Where a change materially affects how we use personal data, we may provide an additional notice or obtain consent where required.

Customers should review this Privacy Policy periodically.

16. Complaints

If you have a question or complaint about Astoraa’s handling of your personal data, please contact us first using the details below:

Website: https://astoraa.store/
Email: contact@astoraa.store
Phone: +88-01624769779, +88-01851709883, +88-01353141500
Business address: Dhaka, Bangladesh.

We will review the matter and respond within a reasonable period.

You may also have the right to submit a complaint to the relevant data-protection, consumer-protection, judicial, or governmental authority in Bangladesh.

16. Governing Law

This Privacy Policy and Astoraa’s handling of personal data are governed by the applicable laws of the People’s Republic of Bangladesh.

Any dispute relating to this Privacy Policy will be subject to the jurisdiction of the competent courts of Bangladesh, unless applicable law requires otherwise.

17. Contact Us