HoquemartEverything You Need, All in One Place.

Privacy Policy

Your privacy matters to us. This policy explains how we handle your data.

Last updated: [PLACEHOLDER: Effective Date]

1. Introduction

This Privacy Policy describes how Hoque Mart("we," "us," or "our") collects, uses, stores, and protects your personal information when you use our website (https://hoquemart.com) and related services.

By using our website, you consent to the practices described in this policy. We encourage you to read this policy carefully.

2. Information We Collect

We collect information that you provide directly and information collected automatically through your use of the website.

2.1 Information You Provide

  • Account Information: Name, email address, and password when you create an account.
  • Contact Information: Name, email address, and phone number when you place an order, fill out a contact form, or communicate with us.
  • Shipping Information: Delivery address, division, district, and area details for order fulfillment.
  • Order Information: Products ordered, order history, and payment method selected (we do not store full payment card details).
  • Communication: Messages sent through our contact form or support channels.

2.2 Information Collected Automatically

  • Device and Browser Information: Browser type, device type, operating system, and screen resolution.
  • Usage Information: Pages visited, time spent on pages, navigation paths, and interaction patterns on the website.
  • Visitor Identifier:A randomly generated unique identifier stored in your browser's localStorage to distinguish between visitors. This identifier is not linked to your personal identity.
  • Referrer Information: The website or source that directed you to our website.
  • IP Address: Your IP address, used for security, fraud prevention, and analytics purposes.

3. How We Use Your Information

We use the information we collect to:

  • Process Orders: Fulfill your purchases, process payments, and deliver products to your address.
  • Communicate: Send order confirmations, updates, and respond to your inquiries and support requests.
  • Customer Support: Assist you with order issues, product questions, returns, and account management.
  • Security: Detect and prevent fraud, abuse, and security incidents.
  • Website Improvement: Understand how visitors use our website to improve functionality, content, and user experience.
  • Analytics: Analyze usage patterns and trends to optimize our services.
  • Legal Compliance: Comply with applicable laws, regulations, and legal processes.

4. Analytics

We use a custom first-party analytics system to understand how visitors interact with our website. This system:

  • Generates a random, non-personal visitor identifier stored in your browser's localStorage (not a cookie).
  • Tracks page views and key interactions such as product views, add-to-cart events, and checkout initiation.
  • Stores analytics data on our own servers — we do not use third-party analytics services such as Google Analytics.
  • Uses this data solely to improve our website and services.

You can clear your visitor identifier by clearing your browser's localStorage for this website.

5. Meta / Facebook Conversions API

We use Meta's Conversions API (CAPI) to measure the effectiveness of our marketing and advertising. This is a server-side integration — we do not use a Meta Pixel or any browser-based tracking from Meta.

Through CAPI, we may send the following events to Meta:

  • ViewContent — when a product page is viewed
  • AddToCart — when a product is added to cart
  • InitiateCheckout — when checkout is started
  • Purchase — when an order is completed

Information sent to Meta may include:

  • A hashed (SHA-256) version of your phone number (if provided during checkout)
  • A hashed visitor identifier for ad measurement
  • Your IP address and browser user agent
  • Product information and order values (for Purchase events)
  • The page URL (excluding query strings and any sensitive data)

This data is used by Meta for ad measurement and optimization. We do not share your personal identity with Meta. For more information about Meta's data practices, please refer to Meta's Privacy Policy.

6. Cookies and Local Storage

We use cookies and browser localStorage for the following purposes:

  • Essential Cookies: Required for authentication, session management, and core website functionality. These cannot be disabled.
  • Visitor Identifier (localStorage):A random identifier for analytics, stored in your browser's localStorage.
  • Authentication Tokens: Encrypted session tokens managed by our authentication system to keep you logged in.

We do not use advertising cookies or third-party tracking cookies. You can manage or delete localStorage data through your browser settings.

7. Third-Party Services

We use the following third-party services to operate our website. Each service processes data according to its own privacy policy:

  • MongoDB: Cloud database service used to store account, order, and website data.
  • Cloudinary: Image hosting and optimization service used to store and deliver product images.
  • Resend: Transactional email service used to send order confirmations and order-related notifications.
  • Nodemailer: Email service used for account-related communications such as password resets.
  • bKash: Payment processing service for online transactions.
  • Meta Conversions API: Server-side analytics and ad measurement service (see Section 5).
  • Upstash: Infrastructure service used for rate limiting and security.
  • NextAuth: Authentication service for user account management.

8. Data Security

We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encrypted data transmission (HTTPS)
  • Secure password hashing
  • Rate limiting on sensitive endpoints
  • Server-side authentication and authorization

However, no method of transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Data Retention

  • Account Information: Retained for as long as your account is active, plus a reasonable period after account closure for legal and business purposes.
  • Order Information: Retained for [PLACEHOLDER: Order Data Retention Period] to comply with legal, tax, and business record-keeping requirements.
  • Contact Form Submissions: Retained for [PLACEHOLDER: Contact Data Retention Period] to respond to inquiries and maintain communication records.
  • Analytics Data: Aggregated analytics data is retained for [PLACEHOLDER: Analytics Data Retention Period].
  • Visitor Identifier (localStorage): Persists in your browser until you clear it, or automatically expires after 2 years of inactivity.

10. Sharing of Information

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service Providers: With third-party service providers who assist in operating our website (as listed in Section 7), strictly as necessary to provide their services.
  • Legal Requirements: When required by law, regulation, legal process, or governmental request.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to affected users.
  • With Your Consent: When you have given explicit consent for sharing.

11. Account Deletion

[PLACEHOLDER: Account Deletion Procedure — describe how users can request account deletion, what data is removed, and what data may be retained for legal/business purposes]

12. Children's Privacy

Our website and services are not intended for children under the age of [PLACEHOLDER: Children's Privacy / Minimum Age Policy]. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you through the website or by email. Your continued use of the website after changes are posted constitutes acceptance of the updated policy.

14. Governing Law

This Privacy Policy is governed by [PLACEHOLDER: Governing Law and Jurisdiction]. [PLACEHOLDER: Applicable Privacy Rights and Legal Requirements]

15. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: