Privacy Policy

This policy explains what Kidora collects when you use kidoraworld.com, why we collect it, who we share it with, and the choices you have. It applies to this website and to the orders you place through it.

We collect the minimum we need to sell you a toy and get it to your door, plus anonymous measurement that tells us which parts of the shop are working.

Information you give us: your name, phone number, email address and delivery address when you place an order or create an account; the contents of any message you send us through the contact form.

Account information: your email address and a securely hashed password. We never store your password in a readable form. If you sign in with Google, we receive your name and email address from Google — never your Google password.

Order information: what you bought, the amount, the delivery address and the status of the order.

Technical information collected automatically: your IP address, browser and device type, the pages you view, and how you arrived at the site.

Essential cookies keep the site working: they hold your signed-in session and remember your cart between pages. The site cannot function without these.

Analytics and advertising cookies are set by Google Analytics and the Meta (Facebook) Pixel — see the next section. These are not essential, and you can block them without losing any shopping functionality.

You can clear or block cookies in your browser settings at any time. Blocking essential cookies will sign you out and empty your cart.

We use Google Analytics 4 to understand how the shop is used — which pages are visited, which products are viewed, and where visitors come from. Google receives your IP address, device and browser information, and the pages you view, and processes it as a data processor on our behalf.

We use the Meta (Facebook) Pixel to measure our advertising on Facebook and Instagram. The Pixel reports events such as viewing a product, adding to cart, starting checkout and completing a purchase, along with the value of the order.

We also send purchase events to Meta from our own server through the Meta Conversions API. Where these include your email address or phone number, they are irreversibly hashed (SHA-256) on our server before being sent — Meta never receives your raw email address or phone number from us. This is used to attribute and measure ads, not to build a profile of you for anyone else.

We do not use analytics or advertising data to make automated decisions about you, and we never sell your personal data.

Google Analytics: install the Google Analytics Opt-out Browser Add-on, or block analytics cookies in your browser.

Meta: adjust your ad preferences in your Facebook or Instagram account settings, where you can also disconnect off-Facebook activity.

Browser-level: most browsers offer a "block third-party cookies" setting, and private/incognito windows discard all cookies when closed. Any of these stops analytics and advertising collection without affecting your ability to browse or order.

To process, confirm, pack and deliver your order, and to contact you about it.

To provide your account, order history and wishlist.

To answer your questions and provide customer support.

To measure and improve the shop, and to measure the effectiveness of our advertising.

To meet our legal and accounting obligations.

Couriers: your name, phone number and delivery address, so your parcel can reach you.

Payment providers: the details needed to process your payment when you pay by bKash or Nagad.

Google (Analytics) and Meta (Pixel and Conversions API): the analytics and advertising data described above.

Our email provider, to send you order confirmations and account emails.

Authorities, where we are legally required to disclose information.

We do not sell, rent or trade your personal data to anyone, for any purpose.

Order records are kept for as long as needed to support returns, warranty claims and our accounting and tax obligations.

Account information is kept while your account is open. Ask us to delete your account and we will remove your personal details, keeping only what the law requires us to retain for completed orders.

Analytics data is retained according to the settings of the platform that holds it — currently up to 14 months in Google Analytics.

The site is served over HTTPS, passwords are stored hashed, and access to order data is limited to the people who need it to run the shop. No system is perfect, but we take reasonable measures to protect your information.

We sell toys for children, but the shop is intended to be used by adults. We do not knowingly collect personal information from children. If you believe a child has given us their information, contact us and we will delete it.

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it.

You can update your name, phone number and addresses yourself from your account at any time.

To make any of these requests, email info@kidoraworld.com or call 01740043739.

If we change how we collect or use your information, we will update this page. Please check back occasionally — continuing to use the site after a change means you accept the updated policy.

Questions about your privacy or this policy? Email info@kidoraworld.com, call 01740043739, or write to us at Lalbagh, Dhaka.