Legal
Privacy Policy
Last updated: September 17, 2026
Introduction
TakeNow Store ("TakeNow," "we," "us," or "our") operates an e-commerce website serving customers in Bangladesh. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you browse the store (including campaign and ad landing pages), create an account, check out as a guest, place a Cash on Delivery order, contact us, or request a return.
Applicable law
We process personal data in line with applicable laws in Bangladesh, including the Personal Data Protection Act 2026 (PDPA), the Information and Communication Technology Act 2006, the Digital Security Act 2018, and the constitutional right to privacy. This policy is provided for transparency and does not constitute legal advice.
Data controller
TakeNow Store is the data controller for personal data collected through this website.
Address: Kabbokash Super Market, 3/D (5th Floor), Room No- 5/23, Kawran Bazar, Tejgaon, Dhaka - 1215
Email: info@takenow.store
Information we collect
- Account data: name, Bangladesh mobile number (used to sign in), optional email, delivery address, inside/outside Dhaka delivery zone, saved extra addresses (including recipient name and phone), and password if you set one (stored hashed). Guest checkout creates or updates a customer record for that phone even before you set a password.
- Order data: products, quantities, variations, Cash on Delivery as the payment method, delivery details, coupon codes, and order history. We do not collect card numbers — checkout is COD only.
- Support data: contact form name, optional email, and message; return requests (phone, order number, product, reason). If you message us on WhatsApp or call us, we see whatever you send on that channel.
- On-device data: cart contents, cookie choices, language, theme, and recently viewed products stored in your browser.
- Technical data: pages visited, browser and device information, and IP address when needed for advertising measurement (only after marketing consent) or to diagnose errors.
Lawful bases for processing
- Contract: to process and deliver COD orders, manage your account, send shipping SMS, and handle returns
- Consent: for Google Analytics, Google Tag Manager, Meta Pixel, and Meta Conversions API
- Legal obligation: to retain certain records for tax, accounting, and fraud prevention where required by law
How we use your information
- Process, fulfill, and deliver your COD orders
- Send SMS for password-reset codes and when an order ships
- Alert our operations team of new orders and contact messages
- Provide customer support (including phone and WhatsApp) and process returns
- Prevent fraud and keep internal notes on order quality where needed
- Measure advertising and site usage when you consent to those cookies
Cookies and tracking technologies
Essential cookies and local storage keep sign-in, cart, language, theme, and your cookie choices working. Analytics and marketing tools load only after you opt in. Google Tag Manager loads if you accept analytics, marketing, or both. You can change your choices anytime using .
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
| customer_session | TakeNow | Keeps you signed in to your account | 7 days | Essential |
| locale | TakeNow | Remembers Bangla or English | 1 year | Essential |
| tn_marketing_consent | TakeNow | Remembers marketing opt-in so ads tools stay off until you agree | 1 year | Essential |
| takenow-cart-v1 (local storage) | TakeNow | Stores your guest shopping cart | Until cleared | Essential |
| takenow_cookie_consent_v1 (local storage) | TakeNow | Stores your cookie choices | Until cleared | Essential |
| theme (local storage) | TakeNow | Remembers light or dark appearance | Until cleared | Essential |
| takenow.recently-viewed (local storage) | TakeNow | Shows products you recently viewed | Until cleared | Essential |
| _ga, _ga_*, _gid | Website usage analytics (GA4) | Up to 2 years | Analytics | |
| GTM cookies (_gcl_* and similar) | Tag Manager / ad measurement tags | Varies | Analytics / Marketing | |
| _fbp, _fbc | Meta | Ad measurement and campaign performance | Up to 90 days | Marketing |
With marketing consent we also send events to Meta from our servers (Conversions API). Those events can include hashed name, phone, and email, plus IP address, browser user agent, and Meta click IDs so ad results can be measured without sending your raw contact details in that payload. Google and Meta may set additional cookies under their own policies.
Sharing your information
We do not sell your personal information. We share data only as needed to run the store:
- Courier and delivery partners, so they can deliver your parcel
- Product suppliers who fulfill some dropshipped items (name, phone, and delivery address)
- Our SMS provider in Bangladesh (BulkSMSBD) for password-reset codes and shipping updates
- Telegram, to notify our operations team of new orders (order number, phone, total) and contact-form messages (name and message)
- Hosting and logging providers that run this website and store operational error logs (Better Stack). Notification logs redact phone numbers and emails where we record destinations.
- Google (Analytics and Tag Manager) and Meta (Pixel and Conversions API) when you consent
- Authorities when required by applicable law
We do not currently send order emails or WhatsApp Cloud API messages from the website. If you start a WhatsApp chat with us, that conversation is also processed by Meta as the WhatsApp provider.
Data retention
We keep account information while your account is active. Password-reset codes are stored hashed and expire. If you delete your account, we anonymize your profile (name, phone, email, password, address), delete saved extra addresses and your server-side cart, and unlink orders from the account. We may still keep order records, return records, SMS notification records, and contact-form messages where needed for commercial, tax, support, or legal purposes.
Security
We use HTTPS, access controls, an httpOnly session cookie, and hashing for passwords and password-reset codes. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
Your rights
Under applicable Bangladesh law, you may have the right to access, correct, or delete your personal data, withdraw consent for cookie-based processing, and object to certain uses of your data. To delete your account, see our data deletion instructions. You can update profile details in your account. For returns and other help, visit support.
Children
Our services are not directed at anyone under 18. We do not knowingly collect personal data from children.
International transfers
Some service providers may process data on servers outside Bangladesh, including Google, Meta, Telegram, and Better Stack (often in the United States or the European Union). Where required, we rely on your consent or appropriate safeguards for such transfers.
Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the latest version.
Contact us
For privacy questions or to exercise your rights, email info@takenow.store or visit our contact page. When the National Data Governance Authority begins accepting complaints under the PDPA, you may also have the right to lodge a complaint with that authority.