JADUZ collects only what it needs to deliver your order and run the shop: your name, mobile number and address when you order, and your Google name and email if you sign in. Makers see only your first name and district, and the courier gets your address. We never sell your data, and you can ask for a copy or deletion at any time.
Who we are
JADUZ is an online marketplace for handmade decor, art, textiles and gifts by makers across Bangladesh, run from Dhaka. This policy covers everyone who visits JADUZ, places an order or signs in. If you sell on JADUZ, the Maker Privacy Notice explains what we collect from makers.
What we collect
When you order: your name, mobile number, district, area and delivery address; your email, a note and personalisation text if you add them; and whether you want WhatsApp updates.
When you sign in with Google: your name, email address and profile picture, as Google shares them. We never see your Google password.
When you use the shop: your bag, saved pieces, orders, reviews and review photos, claim photos, and the alerts you ask for.
From your device: a random visitor ID in a cookie, the pages you open, your browser and device type, an approximate location from your IP address, and error reports when something breaks.
When we talk: notes from the call that confirms your order, and the messages you send to support.
How we use it
To deliver your order: make, pack and ship it, and collect the Cash on Delivery payment.
To confirm orders and stop fraud: we call to confirm each order, check past deliveries to the same number, and may block numbers that refuse parcels again and again.
To keep you updated about your order in your account, and on WhatsApp if you opted in.
To handle damage and wrong-item claims, refunds and replacements.
To show your reviews, with your first name only.
To run, secure and improve JADUZ: count visits, fix errors and limit abuse.
To meet our legal, tax and accounting duties.
We don't sell your personal information, and we don't send you marketing messages unless you agree to them.
Who sees it
Makers see your first name, your district and any personalisation for their piece. They don't see your phone number or address.
Our courier gets your name, mobile number, address and the amount to collect, so it can deliver the parcel.
Service providers that run JADUZ for us: Supabase (database, sign-in and file storage), Vercel (hosting and privacy-friendly site statistics), Google (sign-in and Google Analytics) and Sentry (error reports). Messaging providers such as WhatsApp will join this list when we start sending messages through them.
Everyone, for what you choose to make public: reviews show your first name, and a passport page you share shows your first name and stamps.
Authorities, when Bangladeshi law requires it, or to protect people from fraud or harm.
Some of these providers store data on servers outside Bangladesh. They process it for JADUZ under their own security and privacy terms.
Cookies and browser storage
Sign-in and language cookies keep you signed in and remember whether you chose English or Bangla. Your account doesn't work without them.
The jz_vid cookie is a random ID that keeps your bag, saved pieces and recent orders together before you sign in. It lasts one year.
Your browser keeps a list of the pieces you viewed recently. That list never leaves your device.
Google Analytics sets cookies to count visits and see which pages help. Vercel's site statistics use no cookies.
You can block or delete cookies in your browser settings. Blocking the sign-in cookies or jz_vid stops the bag and your account from working. You can block Google Analytics with Google's opt-out browser add-on.
How long we keep it
Orders, payments and refunds: as long as tax, accounting and dispute rules require. Our money records are permanent: a mistake is fixed with a correcting entry, never by editing.
Claim photos: one year after the claim is resolved.
Photos on reviews we hide: 30 days.
In-app notifications: 180 days.
Your account: until you ask us to delete it.
Blocked numbers: until our staff remove them.
Google Analytics data: as long as our Analytics retention setting allows. Google then deletes it.
Logs of staff actions: permanently, so every change can be traced.
Your choices and rights
See your data: ask for a copy of the personal information we hold about you.
Fix it: ask us to correct anything that's wrong.
Delete it: ask us to delete your account. We delete or anonymise what we can, and keep only what the law, our accounts, an open order or claim, or fraud prevention needs.
Stop messages: leave WhatsApp updates unticked at checkout, or tell us to stop at any time.
Contact us using the details below. We reply within 30 days, and we may first ask you to confirm the request is yours.
Keeping it safe
Data travels over HTTPS. Only staff who need it can see it, staff sign in with a second step, and every staff change is logged. No system is perfectly secure, so if an incident puts your data at risk, we'll tell you and fix it as fast as we can.
Children
JADUZ is for adults. To order, you must be 18 or older or have a parent's or guardian's permission. We don't knowingly collect data from children under 13. If you think we have, tell us and we'll delete it.
Changes to this policy
When we change this policy, we update the date at the top. If a change matters, we'll also say so on the site before it takes effect.
Questions or requests
Questions about this page, or want a copy, correction or deletion of your data? Contact us and we'll reply within 30 days.