GreenHeaven | Privacy Policy

🔒 Our Core Privacy Commitments

Zero Data Selling: GreenHeaven NEVER sells, rents, or monetizes your personal data to advertisers or third-party brokers.
Minimal Data Collection: We only collect information strictly required to process, fulfill, and deliver your orders.
Encrypted Connections: Full end-to-end 256-bit SSL encryption protects every transaction and account detail.
Control Over Your Data: You can access, edit, or request full deletion of your profile data at any time.

1. Information We Collect from You

To provide a smooth, dependable shopping and delivery experience, GreenHeaven collects information through direct interactions and automated technological logging:

A. Information You Provide Directly

Contact & Identity Details: Full name, recipient name, contact phone number, delivery address (district, upazila/thana, area, road/house), and email address.
Order & Purchase History: Products purchased, order dates, transaction values, delivery instructions, and communication history with our support desk.
Account Credentials: Username, encrypted password hash, and saved delivery preferences if you create a registered account.
Feedback & Reviews: Product ratings, submitted reviews, questions, and customer support ticket notes.

B. Information Collected Automatically

Device & Network Data: Internet Protocol (IP) address, browser type and version, device operating system, and mobile device identifiers.
Browsing & Interaction Metrics: Pages viewed, search terms entered, referral source, session timestamps, and shopping cart persistence data.
Cookies & Local Storage: Small text tokens stored on your browser to keep you logged in, remember your cart items, and maintain security.

C. Financial & Payment Information

When you make an online payment (bKash, Nagad, Rocket, Credit/Debit Cards), the payment is processed directly by Bangladesh Bank-licensed payment gateways (SSLCommerz, bKash PGW, etc.). GreenHeaven does not store or process your credit card numbers, CVV codes, bank PINs, or MFS secret pins on our servers.

2. How We Use Your Information

Every piece of data collected serves a legitimate business purpose aimed at ensuring top-notch fulfillment and security:

Data Category	Primary Purpose	Lawful Basis
Name, Phone & Address	Processing, dispatching, and delivering your parcel via courier	Contractual Fulfillment
Mobile Phone Number	Sending order verification OTP, SMS dispatch notifications, delivery tracking	Customer Service & Security
Order History & Cart Data	Managing order replacements, warranty claims, and account management	Customer Service & Warranty
Device & IP Logs	Detecting fraudulent orders, preventing bot attacks, safeguarding platform integrity	Fraud Prevention & Security
Email Address (Optional)	Sending digital invoices, warranty cards, and transactional order receipts	Legitimate Interest

3. Information Sharing & Third-Party Disclosure

We treat your personal data with absolute discretion. We only share relevant details with third parties under strict contractual and operational safeguards:

Authorized Logistics Partners: We share your recipient name, delivery address, and contact number exclusively with certified courier partners (such as Pathao Courier and Steadfast Courier) to deliver your parcel.
Licensed Payment Aggregators: Financial payment gateways receive billing amounts and transaction tokens solely to authorize secure payments.
Cloud & Hosting Infrastructure: Our enterprise database and hosting servers are deployed in SOC-2 / ISO-27001 compliant high-security data centers.
Legal & Regulatory Authorities: We may disclose personal data if formally mandated by the courts, law enforcement, or statutory bodies of the People's Republic of Bangladesh.

4. Data Storage, Retention & Security Safeguards

We deploy robust organizational, administrative, and technological security controls to shield your data against unauthorized access, loss, tampering, or disclosure:

SSL/TLS Encryption: All communications between your web browser and GreenHeaven servers are encrypted via modern Transport Layer Security protocols.
Access Management: Access to customer records is strictly restricted on a role-based, least-privilege basis to authorized fulfillment and technical staff.
Data Retention Policy: We retain order records for as long as necessary to comply with tax, warranty, dispute-resolution, and statutory accounting requirements. Inactive accounts can be archived or deleted upon request.

5. Cookies & Tracking Preferences

GreenHeaven uses cookies and browser local storage to enhance your shopping experience:

Essential Cookies: Required for fundamental website operations, including user authentication, shopping cart memory, and checkout progress.
Performance Cookies: Provide anonymous analytics to help us identify site performance bottlenecks, broken links, and popular product categories.
Managing Cookies: You can configure your browser to block or alert you about cookies; however, disabling cookies may prevent you from adding items to your cart or completing checkout.

6. Your Rights & Data Protection Choices

As a GreenHeaven customer, you possess complete control over your personal data:

Access & Correction: You can review and update your name, phone number, and delivery addresses at any time via your user account profile.
Data Deletion Request: You have the right to request the complete deletion of your account and associated personal data by contacting our customer care team.
Promotional Opt-Out: If you receive promotional SMS or emails, you can opt out at any time by replying with the designated opt-out keyword or adjusting notification preferences.

7. Children's Privacy

GreenHeaven does not intentionally solicit or collect personal information from individuals under 18 years of age without parental supervision. If we discover that personal data of a minor has been gathered inadvertently, we will delete it promptly from our systems.

8. Policy Revisions & Updates

We may update this Privacy Policy from time to time to adapt to evolving technology, operational updates, and Bangladesh digital commerce regulations. Changes will be posted directly on this page with an updated revision date. We encourage periodic review to stay informed.