Privacy Policy
ChotoPaa is a kids' shoe shop in Chattogram, Bangladesh. We collect only what we need to get the right shoes to you. Here's exactly what that is.
Our shop is for parents
We sell shoes for children, but this website is for parents and guardians. We don't knowingly collect personal information from children. Orders and accounts should be made by an adult. If you think a child has sent us their details, contact us and we'll delete them.
What we collect
- When you order: your name, phone number, delivery address (address, city and thana) and what you bought. If you pay a bKash advance, the sending number and transaction ID.
- If you create an account: your name, email and password (stored scrambled, never in plain text). If you sign in with Google, we also get your name, email and profile photo from Google.
- When you message us: whatever you send us on WhatsApp, phone or email.
How we use it
- To pack, send and deliver your order, and to contact you about it.
- To handle exchanges, refunds and questions.
- To keep your account working, including password reset emails.
- To understand how the site is used and to measure our ads (see below).
We never sell your personal information.
Who we share it with
- Steadfast (our courier): your name, phone number, delivery address, the amount to collect on delivery, and a description of what's in the parcel — so they can deliver it.
- Meta (Facebook and Instagram): when the Meta Pixel is switched on, it records visits and actions like viewing a shoe, adding to cart and ordering. We also send these events to Meta from our server (the Conversions API). They can include your email, phone number, name and city — scrambled (hashed) before they're sent — plus your IP address, browser details and Meta's own cookies. Meta uses this to measure and show our ads.
- Google Analytics 4: when switched on, it records how the site is used (pages viewed, device, rough location) using cookies.
- Services that run the shop: Google (if you sign in with Google), our email provider (for password reset codes), and our hosting and file storage providers.
- Anyone the law requires us to share it with.
Cookies and storage on your device
Your browser keeps some things for us:
- Your login, if you sign in.
- Your shopping bag.
- Your language choice (English or বাংলা).
- Shoes you've looked at, to show you similar ones. This stays on your device.
- Notices and pop-ups you've closed, so we don't show them again.
- Cookies from Google Analytics and the Meta Pixel, when they're switched on.
You can clear these any time in your browser settings. If you do, you'll be signed out and your bag will be emptied.
How long we keep things
- Orders: [TODO: __ years — the period your accountant confirmed]
- Accounts: until you ask us to delete yours.
Your choices
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Just get in touch. We may need to keep some order records where the law requires it.
Questions?
We're happy to explain anything on this page.
Reach us through our contact page.
