প্রাইভেসি পলিসি

What you provide directly:

• Full name, email address, and mobile phone number
• Business name, business address, and related details
• Billing and payment information - we do not store full card or mobile banking account numbers
• Store content: product images, descriptions, and pricing
• Your customers' information entered on your store: name, address, phone number, and order details

What is collected automatically:

• Device information: device type, operating system, and browser
• IP address and approximate location
• Platform activity logs: login timestamps, pages visited, and actions taken
• Data from cookies and similar tracking technologies

What we receive from third parties:

• Payment gateways (bKash, Nagad, card processors) - transaction confirmation data
• Courier partners (Pathao, RedX, Steadfast, and others) - delivery status updates
• Facebook / Meta - if you log in via Facebook or have the Facebook Pixel enabled on your store
• WhatsApp Business API - data related to customer communications initiated through the platform

To deliver our services:

• Creating and managing your Boneek account
• Setting up and operating your online store
• Processing subscription payments and managing billing
• Facilitating courier bookings, parcel tracking, and delivery management
• Operating the AI Calling feature on your behalf
• Providing customer support and technical assistance

We also use it to improve the platform - designing features, ensuring security and stability, and analysing usage patterns - and to communicate with you about service notices, updates and policy changes. Promotional messages are sent only with your consent. Data is also used to prevent fraud and abuse, and to comply with applicable laws and lawful government requests.

• Essential cookies - required for core platform functionality such as login sessions and security tokens
• Functional cookies - to remember your preferences and settings
• Analytics cookies - to understand how the platform is used
• Marketing cookies - including the Facebook Pixel, to support your advertising and remarketing

You can control or disable cookies through your browser settings. Disabling essential cookies may prevent parts of the platform from working correctly.

Boneek does not sell your personal or business data to any third party - ever. It is shared only in these limited circumstances:

• Service providers: payment gateways for processing, courier partners for delivery booking and tracking, WhatsApp Business API and Meta for customer communication, cloud infrastructure providers for storage, and SMS gateways for OTP and notifications
• Dropshipping suppliers: when you fulfil an order through a supplier on the Boneek Dropshipping Marketplace, the minimum necessary customer information - name and delivery address - is shared with that supplier solely for fulfilment
• Legal requirements: to comply with a valid legal order, court ruling or government request, or where disclosure is necessary to protect the rights, property or safety of Boneek, its users or the public
• Business transfers: in a merger, acquisition or sale, your data may be transferred to the acquiring entity, with advance notice of the transfer and the applicable protections

All third-party partners are subject to their own independent privacy policies and data protection obligations.

When the AI Calling feature is used, call-related data - the purpose of the call, response outcomes and interaction logs - may be stored within the platform, and may be used in anonymised form to improve call quality over time. By using the feature with your customers' phone numbers, you confirm that those customers have consented to be contacted.

The data your customers submit on your Boneek store - names, addresses, phone numbers and order information - is controlled by you, the Merchant. Boneek processes it on your behalf solely to deliver platform services, acting as a data processor rather than a data controller.

You are solely responsible for ensuring your collection and use of that data complies with the laws of Bangladesh and any other jurisdiction you operate in. Boneek will not use your customers' data for its own marketing, profiling or commercial purposes beyond what is necessary to operate the services you subscribed to.

• While your account is active, all your data is retained in full.
• Following cancellation or termination, your data remains available for download for 30 days.
• After 30 days it is permanently deleted, except where retention is required by law - financial transaction records, for example, are kept for the period Bangladeshi law requires.

• SSL/TLS encryption for all data in transit
• Access controls and role-based permission management
• Regular security audits and vulnerability assessments
• PCI-DSS aligned practices for payment data handling

No digital system can guarantee absolute security. In the event of a breach affecting your information, Boneek will notify affected Merchants as promptly as practicable, along with the steps being taken.

• Access - request a copy of the data we hold about you
• Rectification - request correction of inaccurate or incomplete data
• Erasure - in certain circumstances, request deletion of your data
• Portability - export your business data from the platform at any time
• Opt out - unsubscribe from promotional communications at any time

To exercise any of these, contact privacy@boneek.com.bd. We respond within 7 business days.

The platform is intended exclusively for users aged 18 and above. We do not knowingly collect personal data from anyone younger; if we become aware that we have, it is deleted promptly.

Some third-party providers - cloud infrastructure, Meta, Google - may process your data outside Bangladesh. Where that happens we take appropriate steps to keep protection standards consistent with this Policy.

Boneek may update this Policy at any time. For material changes we give at least 14 days' notice by email or a prominent notice on the dashboard, and continued use after an update constitutes acceptance of the revised Policy.

For any questions about this policy, email us at hello@boneek.com.bd or reach our support team on WhatsApp at 01806-975141.

This policy is governed by the laws of the People's Republic of Bangladesh.