Privacy Policy

Last updated: 27 October 2026

EkshatheKini (একসাথে কিনি) (ekshathekini.com) respects your privacy. This policy explains what we collect, why, how we keep it, and your rights.

What we collect

  • Mobile number — to log you in and send verification codes (OTP).
  • Name, delivery address and district — to deliver your order.
  • Payment details — the bKash/Nagad number and TrxID, to verify booking deposits and refund them when needed. We never ask for PINs, passwords or card details.
  • Messages you send us on Facebook Messenger, WhatsApp or the website chat, and your Messenger/WhatsApp ID — to answer you.
  • Technical data — a browser cookie, a device identifier and a hashed (not raw) IP address — for security and fraud prevention.
  • A browser push subscription, if you allow notifications.

How we use it

  • Login, bookings, payment verification, invoices and delivery.
  • Telling you about price drops, payment verification, the final price and refunds by SMS, push notification or your account inbox.
  • Answering chat messages. Our assistant (chatbot) may use an AI service to write replies; a person may review conversations when needed.
  • Stopping one person from collecting extra stock with many SIM cards, so everyone gets a fair chance.

Who we share it with

We never sell your data. Only what is needed to provide the service is shared with:

  • Couriers (such as Steadfast, Pathao) — name, phone and address, for delivery.
  • Our SMS provider — your number and the message, to send codes and notifications.
  • Meta (Facebook/WhatsApp) — to reply through their platform when you message us there.
  • AI providers — message text, to generate chat replies.
  • Cloudflare — which hosts our website and database.
  • Government authorities, when required by law.

How long we keep it

Verification codes expire after 5 minutes. Order, payment and invoice records are kept as long as needed for accounting and legal reasons. Other data is deleted when you ask us to.

Security

All connections use HTTPS. Verification codes and IP addresses are stored only in hashed form. Only authorised admins, signing in with two-factor authentication, can see customer data.

Your rights

  • Ask to see or correct your data.
  • Ask us to delete your data — see the Data Deletion page.
  • Turn off push notifications at any time.

Children

This service is not intended for people under 18.

Changes

If this policy changes, the new version will be published on this page with a new date.

Contact

  • Email: support@ekshathekini.com
  • Country: Bangladesh