Privacy Policy

On this page

1. Who we are
2. What we collect
3. How we use your information
4. Cookies, sessions & local storage
5. Analytics
6. Advertising & Meta
7. Who we share data with
8. Payments
9. How long we keep data
10. Your choices & rights
11. How we protect data
12. Children's data
13. Changes to this policy
14. Contact us

This policy explains what personal information RiioBD collects when you use our website, why we collect it, who we share it with, and the choices you have. We have tried to write it in plain language rather than legalese.

1. Who we are

RiioBD operates the online store at bdbasket.xyz, selling and delivering products to customers in Bangladesh. In this policy, “we”, “us” and “our” mean RiioBD. We decide how and why your personal data is processed on this website.

• Shop No. 57 & 58, Level 3 (Lift-2), House 20, Ward No. 60, Rayerbag Complex Super Market, Rayerbag, Dhaka 1236, Bangladesh
• support@riiobd.isti.studio
• 01921-122151

2. What we collect

You can browse and buy from us without creating an account. We collect the following.

Information you give us

• When you place an order (including as a guest): your name, email address, phone number and delivery address, plus the delivery city, zone and area needed by our courier.
• If you send the order to someone else: the alternate recipient's name, phone number, address and city, and any gift note you write.
• If you create an account: your username, email address, phone number and a password. Passwords are stored only as a one-way hash — we never see them.
• When you pay by mobile wallet: the Transaction ID (TxnID) you copy from your bKash, Rocket or Nagad confirmation message.
• When you contact us: your name, email, phone, subject and message.
• When you subscribe to our newsletter: your email address.
• When you post a product review or question: the content you submit and the name shown alongside it.

Information collected automatically

• Your IP address and your browser's user-agent string.
• Pages and products you view, what you add to your cart, and when you begin checkout.
• The page that referred you to us, and general device information.
• Your order history, order totals and order status.

We do not ask for, collect or store card numbers, CVV codes, or your mobile-wallet PIN or password. See Payments.

3. How we use your information

• To take, confirm, pack, deliver and, where necessary, refund your orders.
• To let our courier reach you, and to collect payment on delivery.
• To answer your messages, reviews and questions.
• To create and secure your account, and to verify your email with a one-time code.
• To understand how the website is used so we can improve it.
• To measure and improve our advertising, and to show you relevant ads.
• To detect and prevent fraud and abuse, and to meet our legal and accounting duties.

4. Cookies, sessions & local storage

We use a small number of cookies. The essential ones are set by our own website:

We also store two items in your browser's local storage: your shopping cart, so it survives a page reload, and a short summary of your most recent order so we can show you the thank-you page. These stay on your device and you can clear them from your browser at any time.

Most browsers let you block or delete cookies. Blocking the two essential cookies above will break sign-in and checkout.

5. Analytics

We load our measurement tags through Google Tag Manager (container GTM-MMXPWS46) and use Google Analytics 4 (measurement ID G-M6Z3EBFZBT) to understand how visitors use the site.

Analytics events — page views, product views, add-to-cart, checkout starts and purchases — are collected in your browser and routed through a server-side tagging endpoint at jepnpnfz.sav.stape.io, which is operated for us on the Stape platform, before being forwarded to Google and Meta. This endpoint receives the event data described in this policy, including your IP address and user-agent.

6. Advertising & Meta

We advertise on Facebook and Instagram. To measure whether those ads work, we use the Meta Pixel (pixel / dataset ID 833531114885686) in your browser, and the Meta Conversions API, which sends event data directly from our server to Meta rather than from your browser. When you complete an order, a Purchase event is sent to Meta from our server in addition to the browser event.

Meta processes this data as an independent controller under its own terms. You can review and limit how Meta uses your data in your Facebook or Instagram Settings → Ads → Ad preferences. By using this website you consent to the processing described in this section; if you do not agree, please stop using the site or block the advertising cookies in your browser.

7. Who we share data with

We do not sell your personal data. We share it only as set out below.

• Pathao (courier, Bangladesh) — to deliver your parcel we send Pathao the recipient's name, phone number and full delivery address, the delivery city, zone and area, a description of the items, the quantity and weight, any special delivery instruction, and, for Cash on Delivery, the amount to collect from you.
• Meta Platforms — the hashed identifiers, the unhashed IP address, user-agent and Meta cookies, and the event data (including product IDs, order value and currency) described in section 6, for advertising measurement and optimisation.
• Google — analytics and tag-management data described in section 5.
• Stape — operates the server-side tagging endpoint that relays our analytics and advertising events.
• Our hosting and infrastructure providers — who store the website and its database on our behalf.
• Authorities or advisers — where we are required to disclose information by law, or to establish or defend a legal claim.

Meta, Google and Stape may process your data on servers outside Bangladesh.

8. Payments

We currently accept:

• Cash on Delivery — you pay the courier in cash when your parcel arrives.
• bKash, Rocket and Nagad — you send the payment yourself from your own wallet app to our number, then paste the Transaction ID into the checkout page so we can match your payment to your order.

No card payment is processed on this website. We never receive, and never store, your card number, CVV, wallet PIN or wallet password. The only payment data we keep is which method you chose and, for wallet payments, the Transaction ID you gave us.

9. How long we keep data

• Orders, invoices and delivery records are kept for as long as we need them to run the business and to satisfy our tax, accounting and legal obligations.
• Account details are kept while your account is open, and are deleted or anonymised after you ask us to close it.
• Contact messages, reviews and questions are kept while they are useful for support and for the integrity of our product pages.
• Analytics and advertising data are retained by Google and Meta according to their own retention settings and policies, not ours.

10. Your choices & rights

You can ask us to:

• tell you what personal data we hold about you;
• correct anything that is wrong or out of date;
• delete your account and the personal data attached to it.

To make any of these requests, email us at support@riiobd.isti.studio from the address on your account or order, so that we can verify who you are. We will respond within a reasonable time.

Please note we may be unable to delete records of completed orders where we are required to keep them for tax or accounting purposes. You can also opt out of analytics and advertising by blocking those cookies in your browser, or through your Meta and Google ad settings.

11. How we protect data

The whole site is served over HTTPS. Session cookies are marked Secure and HttpOnly, passwords are stored as one-way hashes, our forms are protected against cross-site request forgery, and email addresses are verified with a one-time code. No website can promise perfect security, but we take these measures seriously and review them.

12. Children's data

This website is intended for adults and is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

13. Changes to this policy

We may update this policy as our website, our tools or the law change. The date at the top of this page shows when it was last revised. If we make a significant change we will make that clear on this page. Please check back from time to time.

14. Contact us

If you have any question about this policy or about your data, please get in touch.