Privacy Policy
Effective Date: April 6, 2026 Last Updated: April 6, 2026
1. Introduction
Welcome to Shuloban (“we,” “our,” or “us”). Shuloban is a social impact–driven e-commerce platform rooted in the Sundarbans, Bangladesh, dedicated to empowering marginalized women and local artisans across Bangladesh.
This Privacy Policy describes how we collect, use, store, and protect your personal information when you visit www.shuloban.com, create an account, make a purchase, or interact with our platform in any way.
By accessing or using our website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please discontinue use of our services immediately.
2. Legal Compliance
This Privacy Policy is drafted in compliance with the following legal frameworks:
- Digital Security Act, 2018 (Bangladesh)
- Information & Communication Technology (ICT) Act, 2006 (Bangladesh)
- Consumer Rights Protection Act, 2009 (Bangladesh)
- EU General Data Protection Regulation (GDPR) — applicable to EU-based users
- California Consumer Privacy Act (CCPA) — applicable to California-based users
- UN Guidelines on Consumer Protection (2015)
3. Who We Are
Shuloban Social Enterprise & Green E-Commerce Platform
📍 Headquarters: Nalian, 9273, Sutarkhali, Dacope, Khulna, Bangladesh
🏢 Corporate Office: Apollo Link Road, Vatara (Beside Bashundhara R/A), Dhaka 1229, Bangladesh
📧 Email: admin@shuloban.com
🌐 Website: www.shuloban.com
📞 Phone/WhatsApp: +8801911 368538
4. Information We Collect
4.1 Information You Provide Directly
- Account Information — your full name, email address, phone number, username, and password when you register on our platform
- Order Information — billing address, delivery address, and purchase details when you place an order
- Payment Information — mobile banking transaction IDs (bKash, Nagad, Rocket, Upay) and bank transfer references used to verify payments; we do not store full card numbers or banking credentials on our servers
- Donation Information — name, contact details, and donation amount when you contribute to our non-profit wing
- Communication Data — messages, feedback, or inquiries submitted through our contact form, email, WhatsApp, or Messenger
4.2 Information We Collect Automatically
- Device & Technical Information — IP address, browser type, operating system, and device identifiers
- Usage Data — pages visited, time spent on pages, links clicked, and referring URLs
- General Location Data — approximate geographic location inferred from your IP address
4.3 Information from Third Parties
- Payment confirmation data from our payment partners including bKash, Nagad, Rocket, Upay, Dutch Bangla Bank, Exim Bank, Agrani Bank, and Bangladesh Krishi Bank
- Basic profile information if you choose to log in or connect via a third-party platform such as Facebook or Google
5. How We Use Your Information
We use your personal information solely for the following purposes:
- To process, fulfill, and communicate updates about your orders
- To create and manage your account on our platform
- To verify and process payments securely
- To respond to your inquiries and provide customer support
- To send you order confirmations, receipts, and important service notifications
- To send newsletters or promotional communications — only if you have explicitly opted in
- To improve the performance, content, and usability of our website
- To detect, prevent, and respond to fraud, abuse, or security threats
- To comply with applicable laws and legal obligations
- To coordinate non-profit program activities with our community partners, where relevant and with your knowledge
We will never use your data for any purpose beyond what is stated above without obtaining your explicit consent first.
6. How We Share Your Information
Shuloban does not sell, rent, or trade your personal information to any third party under any circumstances.
We may share your data only in the following strictly limited situations:
6.1 Trusted Service Providers
We work with carefully selected third-party service providers who help us operate our platform. These include payment processors, delivery partners, website hosting providers, and email communication services. All service providers are bound by confidentiality agreements and are strictly prohibited from using your data for their own purposes.
6.2 Legal Obligations
We may disclose your information if required to do so by Bangladeshi law, a valid court order, or a lawful request from a government authority — or where necessary to protect the rights, property, or safety of Shuloban, our users, or the general public.
6.3 Non-Profit Program Coordination
With your prior knowledge and consent, limited information may be shared with Humanity Public Library and Youth Climate Network solely for the purpose of coordinating community programs and impact reporting. No information is shared beyond what is necessary for this purpose.
6.4 Business Transfers
In the unlikely event of a merger, acquisition, or asset transfer involving Shuloban, your personal information may be included as part of that transition. You will be informed via email or a prominent notice on our website before any such transfer takes place.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law:
- Order and transaction records — 5 years, in accordance with Bangladeshi commercial regulations
- Account information — retained until you request deletion or close your account
- Donation records — 7 years, for financial accountability and compliance
- Communication records — 2 years
- Newsletter subscriptions — until you choose to unsubscribe
Once the applicable retention period expires, your data is securely deleted or permanently anonymized.
8. Your Rights
We respect your rights over your personal data. Depending on your location, you may be entitled to the following:
For All Users (Bangladesh)
- The right to know what personal data we hold about you
- The right to access and review your personal information
- The right to correct any inaccurate or outdated data
- The right to withdraw consent at any time
- The right to file a complaint with relevant Bangladeshi authorities
For EU Users (GDPR)
- The right to erasure — the “right to be forgotten”
- The right to data portability
- The right to restrict or object to processing
- The right to lodge a complaint with a supervisory authority
For California Users (CCPA)
- The right to know what personal information is collected and how it is used
- The right to request deletion of your personal information
- The right to opt out of the sale of personal information (Shuloban does not sell personal data)
- The right to equal service and non-discrimination when exercising your privacy rights
To exercise any of the above rights, please contact us at admin@shuloban.com with the subject line “Privacy Request.” We will acknowledge your request within 7 business days and respond fully within 30 days.
9. Data Security
We take the protection of your personal information seriously and implement the following measures to safeguard it:
- SSL/TLS encryption across all pages and transactions on our website
- Secure password hashing — passwords are never stored in plain text
- Strict access controls — personal data is accessible only to authorized personnel on a need-to-know basis
- No storage of full payment credentials or banking details on our servers
- Regular internal reviews to assess and strengthen our data security practices
While we apply industry-standard security measures, please be aware that no method of data transmission over the internet can be guaranteed to be 100% secure. We strongly encourage you to use a strong, unique password for your Shuloban account and to keep your login credentials confidential.
10. Children’s Privacy
Shuloban’s platform is intended for users aged 13 and above. We do not knowingly collect or solicit personal information from children under the age of 13. If we become aware that we have inadvertently collected such information, we will take immediate steps to delete it.
If you believe a child under 13 has provided us with personal information, please contact us at admin@shuloban.com and we will act promptly.
11. International Users
Shuloban is headquartered in Bangladesh. If you are accessing our website from outside Bangladesh — including from the European Union, United Kingdom, United States, or any other country — please be aware that your personal information will be transferred to and processed in Bangladesh.
By using our services, you consent to this transfer. We take all reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy and applicable international standards.
12. Third-Party Links
Our website may contain links to external websites, social media platforms, or partner organizations. This Privacy Policy applies solely to www.shuloban.com. We are not responsible for the privacy practices of any third-party websites or platforms. We encourage you to read the privacy policies of any external sites you visit before providing any personal information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes, we will:
- Update the “Last Updated” date at the top of this page
- Notify registered users by email in the case of significant changes
- Display a visible notice on our website
We encourage you to review this Privacy Policy periodically. Your continued use of our website following any updates constitutes your acceptance of the revised policy.
14. Contact Us
If you have any questions, concerns, or requests related to this Privacy Policy or the way we handle your personal information, please do not hesitate to reach out:
Shuloban Privacy Team 📧 Email: admin@shuloban.com 🌐 Website: www.shuloban.com 📞 Phone / WhatsApp: +8801911 368538
🏢 Corporate Office: Apollo Link Road, Vatara (Beside Bashundhara R/A), Dhaka 1229, Bangladesh
📍 Headquarters: Nalian, 9273, Sutarkhali, Dacope, Khulna, Bangladesh
We are committed to addressing all privacy-related concerns within 30 business days.
This Privacy Policy is effective as of April 6, 2026. Shuloban is committed to transparency, trust, and the responsible stewardship of every individual’s personal information.