Privacy Policy

1. What we collect

We only collect what an order actually needs, plus what you choose to give us.

• Contact details: your name, mobile number, email address and delivery address.
• Order details: what you bought, when, and how you chose to pay.
• Account details: your password, stored only as a hash we cannot reverse.
• Usage data: pages viewed and searches made, used to fix and improve the shop.

2. How we use it

To take payment, pack your order, hand it to a courier and keep you updated about it. To answer you when you contact support. To detect fraud and keep accounts secure.

We send marketing messages only if you have opted in, and every one of them carries a way to stop them.

3. Payments

We do not store your full card number. Card, bKash and Nagad payments are handled by the payment provider on their own systems; we receive only a confirmation and the last few digits so you can recognise the transaction.

For cash on delivery, no payment details reach us at all.

4. Who we share it with

Couriers, so they can deliver to you. Payment providers, so they can take payment. Service providers who run our email, SMS and analytics under contract.

We do not sell your data. We disclose it to authorities only where the law requires it.

5. Cookies

We use cookies to keep you signed in, remember your cart and understand which parts of the shop are used. Blocking them in your browser will keep the shop working but will empty your cart between visits.

6. How long we keep it

Order records are kept for as long as tax and accounting rules require. Account data is kept while your account is open. Marketing consent records are kept until you withdraw them, and then for a short period as proof that you did.

7. Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete your account. Write to us and we will respond within 30 days.

Deleting your account does not remove order records we are legally required to keep.

8. Children

We sell children's products to adults. Accounts are for over-18s, and we do not knowingly collect data from a child. If you believe a child has given us data, contact us and we will remove it.

9. Security

Traffic is encrypted in transit, passwords are hashed, and access to customer data is limited to staff who need it. No system is perfect — if a breach affects you, we will tell you.

10. Contacting us

Reach us at hello@outlittletales.com · +880 1XXX-XXXXXX, or by post at House 12, Road 5, Sector 9, Uttara, Dhaka 1230, Bangladesh.