PRIVACY POLICY

We collect information necessary to deliver seamless shopping, order fulfillment, and personalized apparel curation:

• Account & Profile Data: Full name, email address, contact phone number, encrypted password credentials, saved delivery addresses, and size preferences.
• Transactional & Order Records: Purchased items, SKU selections, billing snapshots, payment method identifiers (e.g., bKash transaction IDs, card tokens handled via PCI-DSS compliant SSL gateways), shipping carrier tracking codes, and discount coupon redemptions.
• Device & Browsing Metadata: IP address, browser type, device resolution, geographic location approximation, referral URLs, pages viewed, time spent, and cart session tokens.
• Customer Care Communications: Inquiries submitted via WhatsApp, email support tickets, feedback ratings, and size exchange records.

We utilize the collected information strictly for legitimate commercial and operational purposes:

• Processing, validating, and fulfilling your apparel purchases and doorstep deliveries.
• Real-time SMS and email order confirmation and dispatch tracking updates.
• Preventing fraudulent transactions and ensuring inventory reservation integrity.
• Managing size exchanges, customer returns, and warranty claims.
• Delivering opt-in VIP member drops, early access codes, and promotional newsletter alerts.
• Analyzing aggregate platform performance to enhance website speed, mobile layout, and sizing accuracy.

RAWAJ adheres to industry-standard physical, electronic, and procedural safeguards:

• 256-Bit SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using modern cryptographic protocols.
• Zero Plaintext Storage: User passwords are encrypted with one-way Bcrypt hashing with salted rounds. Payment card numbers are never stored on our local servers.
• Restricted Administrative Access: Granular Role-Based Access Control (RBAC) ensures only verified fulfillment staff can view necessary shipping details.

We never sell, rent, or trade your personal information to third-party data brokers. We share minimal necessary data only with trusted partners essential for service execution:

• Logistics Partners: Courier companies (e.g., Pathao, SteadFast, RedX) receiving recipient name, phone, and delivery address.
• Payment Gateways: Secure PCI-DSS certified payment processors (SSLCommerz, bKash, Nagad) for payment verification.
• Legal & Regulatory Authorities: Only when strictly mandated by Bangladeshi legal statutes or court orders.

You have full autonomy over your personal data:

• Access & Update: Modify your profile, contact details, and addresses anytime in your account dashboard.
• Marketing Opt-out: Unsubscribe from promotional email newsletters with a single click.
• Data Deletion: Request account deactivation or data removal by contacting our Data Protection Officer.