Privacy Policy

This Privacy Policy explains how Torongo Gadgets handles personal data when you browse our website, create an account, subscribe to the newsletter, contact us, write a review, or place an order. We act as the organization responsible for the information described here.

Depending on how you use the service, we may collect:

• Account data: name, email address, phone number, password in hashed form, profile image, verification status, and saved delivery address.
• Order data: products, selected variants, quantity, prices, coupon use, recipient details, shipping address, payment method and status, and order history.
• Communications: support messages, OTP and password-reset activity, and responses to order confirmation.
• Content and preferences: product reviews, ratings, cart contents stored on your device, and newsletter subscription email.
• Technical data: IP address, browser or device information, request logs, authentication tokens, cookies, and security diagnostics generated when you use the service.

• Create and secure accounts, verify identity, and reset passwords.
• Process, confirm, deliver, support, and keep records of orders.
• Calculate delivery charges, discounts, coupon eligibility, and store analytics.
• Send transactional emails, requested newsletters, and important service notices.
• Display reviews and improve products, navigation, reliability, and customer service.
• Prevent fraud, abuse, unauthorized access, and other security incidents.
• Comply with tax, accounting, consumer-protection, law-enforcement, and other legal obligations.

We handle data as necessary to provide the service or fulfil an order, with your consent where consent is appropriate (such as newsletter subscription), for legitimate operational and security purposes, and where required by Bangladesh law. You may withdraw consent for future optional processing, but this does not make earlier lawful processing invalid or prevent processing required for an order or legal obligation.

The site uses essential browser storage and cookies to keep you signed in, maintain your cart, and support core functionality. The authentication token may be stored in local storage and an essential cookie on your device. These technologies are not intended to build third-party advertising profiles.

You can remove cookies or site data through your browser, but doing so may sign you out, clear your cart, or stop parts of the service from working correctly.

We do not sell personal data. We may share only what is reasonably necessary with trusted providers that help us operate, including hosting and database providers, email services, image storage, payment processors when enabled, delivery partners, IT and security providers, and professional advisers.

We may also disclose information when required by law, lawful process, or a competent authority; to protect customers, the public, or our legal rights; or as part of a business reorganization where appropriate safeguards apply.

Some technology providers may store or process information outside Bangladesh. Where this occurs, we will use providers and arrangements intended to provide appropriate confidentiality, security, and lawful handling consistent with applicable Bangladesh requirements.

We keep personal data only as long as reasonably needed for the purposes described here. Account data is generally retained while the account is active; order, invoice, payment-status, and transaction records may be retained for the period required by tax, accounting, fraud-prevention, consumer-protection, and limitation laws. OTPs expire after a short period. Newsletter data is kept until you unsubscribe or we no longer need it. Security logs and support records are retained for a proportionate period.

We use reasonable administrative and technical safeguards, including password hashing, access controls, authentication, input validation, and restricted administrative functions. No online system can be guaranteed completely secure. Keep your password and OTP confidential, and contact us promptly if you believe your account has been compromised.

Subject to applicable law and reasonable identity verification, you may ask us to provide access to, correct, update, or delete personal data; object to or restrict certain handling; withdraw optional consent; or unsubscribe from marketing. Some information may need to be retained to complete an order, resolve a dispute, prevent fraud, or comply with law.

You can update certain profile details through your account. For other requests, email support@torongo.com. We will respond within a reasonable period and explain if a request cannot be fulfilled.

We may send store news and relevant offers to newsletter subscribers and, where permitted, registered customers. You may opt out of promotional messages at any time using an unsubscribe option provided in a message or by contacting us. Transactional messages about your account, security, or orders are not marketing and may still be sent when needed to provide the service.

The store is not designed to collect personal data directly from children. A person under 18 should shop only with a parent or legal guardian. If you believe a child supplied personal data without appropriate involvement, contact us so we can review and take suitable action.

We may update this policy when the service, our practices, or legal requirements change. We will revise the effective date and provide reasonable notice of a material change where appropriate.

For privacy questions or requests, email support@torongo.com. You may also approach a competent authority in Bangladesh where you believe your rights have not been respected.