1. Information Collection

1.1 Personal Information

We may collect personal identification information from Users in various ways, including but not limited to when Users register on the App, make purchases, fill out a form, or interact with the App's features. The personal information we collect may include:

• Name: To personalize your experience and process your orders.
• Email Address: To verify your identity, send order confirmations, and communicate important updates and notifications.
• Account credentials: We store a password hash for password-based accounts and authentication identifiers or tokens needed to maintain your sign-in session.
• Phone Number: For order delivery coordination and account verification.
• Address: For product delivery and shipping purposes.
• Third-party sign-in: When you choose a supported sign-in provider, such as Google, we receive the account identifier and profile information it shares, such as your name, email address and profile picture. We do not receive that provider’s password.
• Orders and payments: Products, amounts, payment status, transaction references, delivery history, reward points and coupon activity are used to process purchases and maintain account records. Payment details entered into a payment provider’s checkout are handled by that provider.
• Uploads and support messages: Images, documents and messages you submit are processed for the feature or support request you choose.
• Seller information: Seller profiles may include shop details, pickup locations, identity or business verification documents, and courier account credentials supplied to enable delivery automation. Courier credentials are stored encrypted and are not displayed publicly.

You have the right to refuse to provide us with your personal information; however, this may prevent you from accessing certain features and services offered by the App, including making purchases.

1.2 Device, Usage and Location Information

Device and usage information can identify or be linked to you. This may include IP addresses, account or device identifiers, notification tokens, operating system and app version, interactions and diagnostic records. We use this information to operate, secure and troubleshoot the service. Delivery addresses and seller pickup locations are used for order fulfillment. If a feature requests device location, the permission prompt explains its purpose; you can manage that permission in device settings.

2. Third-Party Services

The app uses third-party services that may collect, process, and store data to provide functionality, advertising, or analytics. These services include:

2.1 Google AdMob

AdMob may collect device information and user behavior to serve personalized or non-personalized ads. Advertising features can differ by platform. Where tracking across other companies’ apps or websites is used on iOS, it requires your permission through Apple’s App Tracking Transparency prompt before tracking begins. You can decline or change that permission in Settings → Privacy & Security → Tracking. Tracking permission is separate from any regional advertising-consent choices; refusing it does not prevent access to core shopping features.

2.2 Firebase

Firebase services support app functionality such as notifications and authentication. Where Analytics or Crashlytics is included in the app version you use, those services process usage events, app or device identifiers, diagnostics and crash information to understand reliability and improve the service.

For more details about how Google handles your data, please see the Google Privacy Policy.

3. Information Usage

We may collect and use Users' personal information for the following purposes:

• To authenticate and secure User accounts: Your personal information, including your email address and password, is used to verify your identity and ensure the security of your account.
• To process transactions: We use your information to process your purchases, manage your orders, and facilitate product delivery.
• To improve customer service: The information you provide helps us respond to your customer service requests and support needs more effectively.
• To personalize user experience: We may use your information to personalize your shopping experience, recommend products, and provide customized content and features.
• To manage reward points and coupons: Track your earned points and coupon redemptions for a better shopping experience.
• To send order updates: We use your email address and phone number to send order confirmations, shipping notifications, and delivery updates.
• To send periodic emails: We may use your email address to send you important information and updates regarding the App, your orders, as well as occasional promotional messages. You may unsubscribe from receiving promotional emails at any time by following the instructions provided in the email.
• To facilitate competitions (optional): If you choose to participate in MCQ competitions, your information may be used to track your progress and distribute prizes. Participation, results and rewards are handled according to the rules of the specific activity.

4. Information Protection

We adopt appropriate data collection, storage, and processing practices and security measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal information, transaction data, and order details stored on our App. Payment information is processed through secure third-party payment gateways (such as shurjoPay, where offered at checkout) and is encrypted during transmission. We retain transaction references and payment results needed to handle orders and disputes. No security measure can guarantee absolute protection.

5. Information Sharing

We do not sell, trade, or rent Users' personal identification information to others. We may share your information with:

• Sellers: Your order information (name, address, phone number) may be shared with sellers to fulfill your orders.
• Delivery partners: When a seller uses a courier such as Pathao, we share the recipient’s name, phone number, delivery address, order reference, parcel details and collection amount needed to fulfill and track delivery.
• Payment Processors: Your payment information is shared with secure third-party payment processors (such as shurjoPay, where offered at checkout) to complete transactions. We receive payment status and transaction references for order reconciliation.
• Service providers and legal disclosures: Hosting, communications, support and security providers process information needed to deliver their services. We may also disclose information where necessary to comply with a legal obligation, address fraud or protect legal rights.
• Business Partners: We may share generic aggregated demographic information not linked to any personal identification information with our business partners, trusted affiliates, and advertisers for the purposes outlined above.

6. Third-Party Websites and Services

The App may contain links to third-party websites or services that are not operated by us. We have no control over the content, privacy policies, or practices of any third-party websites or services. We encourage Users to read the privacy policies of any third-party websites they visit.

7. Changes to this Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Any changes we make to this Privacy Policy will be posted on this page, and the updated date will be indicated at the top of the page. We encourage Users to review this Privacy Policy periodically for any changes.

8. Permissions and Consent

This policy explains our practices; reading it or continuing to use the service does not replace a permission or consent request. Where processing requires your consent, we request it separately. You can withdraw consent for future processing. You can control notifications, camera, photo and location permissions in your device settings where those features are available. Denying an optional permission may limit that feature. Website sign-in cookies or session storage keep you signed in; clearing them may sign you out.

9. Advertising

We may display image, slider, or video advertisements within the App. These ads are managed internally and may also include third-party SDKs like AdMob. The advertisements are designed to enhance your experience and provide relevant content and promotional offers. Users in applicable regions will be asked for consent regarding personalized ads in accordance with GDPR and other privacy regulations.

10. Shopping Features

Orbit Shop provides e-commerce functionality including:

• Product browsing and search
• Shopping cart management
• Secure checkout and payment processing
• Order tracking and history
• Reward points system and coupon redemption
• Seller ratings and reviews (if applicable)
• Optional MCQ competitions for additional engagement

Order, payment, reward and optional competition records are associated with your account to provide the features you use. Please review the applicable checkout or activity rules before participating.

11. Children's Privacy

Our app is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If a parent or guardian becomes aware that their child has provided us with personal information without their consent, they should contact us at timesshop.xyz1@gmail.com. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to remove that information from our servers.

12. Your Data Rights

You have the following rights regarding your personal data:

• Access: You can request access to the personal information we hold about you.
• Correction: You can request that we correct any inaccurate or incomplete personal information.
• Account closure and erasure: The app’s navigation menu includes an account-closure control labelled Delete Account. Closing an account does not automatically erase all personal information. See the account-closure guide. To request erasure of personal information, contact us at timesshop.xyz1@gmail.com.
• Data Portability: You can request a copy of your data in a structured, commonly used format.
• Withdraw Consent: You can withdraw your consent for data processing at any time where we rely on consent as the legal basis.

To exercise any of these rights, please contact us at timesshop.xyz1@gmail.com. We will respond to your request within a reasonable timeframe as required by applicable law.

13. Data Retention and Account Closure

We retain account and service records while needed to provide the service. Order, payment and related records may need to be retained to fulfill purchases, handle returns or disputes, prevent fraud, and satisfy legal or accounting obligations. Retention depends on the record’s purpose and applicable requirements; it is not a single fixed period for every type of data.

The current account-closure process marks your account as closed but does not itself erase your profile, uploaded content or related records. Removing the app from your device also does not delete server-side information. You may separately request access, correction or erasure through our privacy support contact. We may verify your identity before processing a request and explain any information that must be retained and why.

When information is no longer needed for its stated purpose or a required retention obligation, it should be deleted or anonymized. Backup copies may remain until the applicable backup cycle expires. Contact us for information about the records associated with your account and the status of an erasure request.

14. Contact Us

If you have any questions about this Privacy Policy or the practices of Orbit Shop, please contact us at timesshop.xyz1@gmail.com