Privacy Policy

Effective date: September 07, 2023
Company: Softunes I,T
Website: https://noapstorebd.com
Contact: hello@nocapstorebd.com | WhatsApp: +8801787809746

Nocapstore BD provides digital services to customers in Bangladesh and overseas, including Virtual Visa Cards, OTT subscriptions, Turnitin access, AI tools, and photo/video editing software. We respect your privacy and are committed to protecting your personal information.

1. Scope

This Privacy Policy explains how we collect, use, share, secure, and retain personal information when you:

browse or use nocapstorebd.com,
create an account or place an order,
contact support (email/WhatsApp),
view or submit content to the Proof of Delivery or Reviews sections, or
interact with our analytics and advertising tools (for example, Meta/Facebook Pixel, if enabled).

By using our Site and services, you agree to this Privacy Policy. Where required by law, we will seek your consent for specific processing (for example, non‑essential cookies or marketing).

2. Who controls your data

Data Controller: Nocapstore BD. (www.nocapstorebd.com)
Primary contact for privacy matters: hello@nocapstorebd.com

3. What we collect

3.1 Information you provide directly

Identity and contact: name, email address, phone number, country, billing address.
Account: username, password (stored in hashed form), preferences.
Orders and fulfillment: product selections (e.g., VCC, OTT plan), order ID, timestamps, delivery instructions, Proof of Delivery artifacts (with personal data minimized or redacted).
Payments: payment method and status details (e.g., bKash, Nagad, Rocket, cards via EPS, PayPal for overseas). We do not store full card numbers or CVV; sensitive card data is handled by the payment processor or wallet provider.
Support and communications: messages you send to us by email, WhatsApp, forms, or surveys.
Reviews and user content: star ratings, review text, display name, and any images you upload (please do not include sensitive personal information in reviews).

3.2 Information collected automatically

Device and usage: IP address, device type, browser, operating system, referring URLs, pages viewed, time on page, and general location derived from IP.
Cookies and similar technologies: to keep you logged in, remember preferences, secure checkout, analyze traffic, and (only with consent where required) support advertising/retargeting.

3.3 Information from third parties

Payment and fraud prevention partners (e.g. EPS and supported methods, PayPal, card networks, mobile wallets) provide transaction confirmations, risk checks, and status information.
Anti‑abuse and security tools provide signals to help prevent spam, fraud, and misuse.
Advertising/analytics partners (if enabled) provide aggregated insights and performance metrics.
Public sources (e.g., social media information you make public) may help us resolve support issues or prevent abuse.

4. How we use your information (purposes)

We use personal information to:

Provide services and fulfill orders: account creation, checkout, payment processing, and delivery of digital products.
Operate Proof of Delivery and Reviews: maintain delivery logs internally; publish reviews and select proof elements publicly with personal data minimized or redacted.
Process payments and prevent fraud: route payments via aamarPay and supported methods, PayPal for overseas, and conduct risk checks.
Support and communicate: respond to messages, send order updates, and provide customer assistance.
Improve and secure our Site: analytics, debugging, load balancing, and security monitoring.
Marketing (with consent where required): send offers and updates; build custom audiences on platforms that support privacy‑respecting advertising; measure campaign performance.
Comply with legal obligations: tax, accounting, auditing, and responding to lawful requests.

Legal bases (GDPR/EEA/UK): contract necessity, legitimate interests (e.g., fraud prevention, security, basic analytics), consent (e.g., non‑essential cookies or marketing), and legal obligation.

5. Cookies, pixels, and similar technologies

Essential cookies: required for login, cart, checkout, and security.
Functional/performance cookies: remember preferences and help us improve the Site.
Analytics cookies: measure traffic and basic usage patterns (often in aggregate).
Advertising pixels/tags (optional): for ad measurement and retargeting (e.g., Meta/Facebook Pixel). These are used only with your consent where required.

Your choices: manage cookies in your browser settings and (if present) our cookie banner/manager. Blocking some cookies may affect Site functionality. We currently do not respond to “Do Not Track” signals due to a lack of consistent industry standards.

WordPress‑style cookies (if enabled):

Comment convenience cookies (name/email/website) may last up to 1 year.
Login/session cookies typically last from session‑end to a few days; “Remember Me” may persist up to 2 weeks.
Screen/display options may last up to 1 year.
Editor cookies for published/edited content may last about 1 day.
(These examples reflect common defaults; your actual durations depend on your CMS/plugins.)

6. Who we share information with

We do not sell personal information. We share information only as needed, under appropriate safeguards:

Hosting and infrastructure: Hostinger (our hosting provider) and related infrastructure (e.g., security, content delivery, performance monitoring).
Payment processing and mobile wallets: aamarPay (which may support Visa/Mastercard and local wallets such as bKash, Nagad, Rocket), and PayPal for overseas payments. Sensitive card data is handled by the payment processor.
Communications: email delivery providers and WhatsApp Business/Meta for support messages.
Analytics and advertising (if enabled): tools that help measure usage and ad performance (e.g., Meta/Facebook Pixel).
Customer service and surveys: helpdesk, ticketing, and review platforms.
Affiliates and professional advisors: under confidentiality and only for permitted purposes.
Legal and compliance: when required by law or to protect rights, property, users, or public safety.
Business transfers: in case of merger, acquisition, or sale of assets, the successor will honor this Policy.

7. International transfers

We may store or process data in countries other than your own (for example, where our hosting, payment, or analytics providers are located). When we transfer personal data across borders, we apply appropriate safeguards consistent with applicable law.

8. Data retention

We retain personal information only as long as needed for the purposes above and to meet legal obligations. Typical examples:

Orders, invoices, and tax records: generally 5–7 years (may vary by law).
Account data: retained while your account is active; minimal records may be archived after closure to meet legal/financial obligations and prevent abuse.
Support communications: usually 2–3 years after resolution.
Analytics logs: commonly 12–24 months, often aggregated or anonymized earlier.
Where deletion is not immediately feasible (for example, backups), we isolate and secure data from further processing.

9. Your privacy rights and choices

Depending on your location, you may have rights to:

access a copy of your data,
correct inaccurate or incomplete data,
delete certain data,
restrict or object to processing (including direct marketing),
data portability,
withdraw consent at any time (processing before withdrawal remains lawful),
opt out of marketing communications,
opt out of “sale” or “sharing” for cross‑context behavioral advertising where those definitions apply (we do not sell personal information; if “sharing” applies for advertising in your region, you may opt out).

How to exercise your rights: email hello@softunes.com with the subject “Privacy Request” and include the email/phone tied to your account/order. We may ask for information to verify your identity. We will respond within the timeframes required by applicable law.

EU/UK: you may also lodge a complaint with your local supervisory authority.
California (CCPA/CPRA): you may request access, deletion, correction, and opt out of sale/sharing (as applicable) without discrimination for exercising your rights.

10. Marketing communications

By providing your email address, you may receive:

Transactional messages: order confirmations, delivery steps, service notices.
Marketing messages: offers, tips, and news (only with consent where required).
You can unsubscribe from marketing at any time via the link in the email or by emailing hello@softunes.com. Transactional messages will continue as needed to fulfill your orders.

We may use hashed identifiers or email addresses to build custom audiences on advertising platforms for people who have opted to receive communications from us. You can opt out as described above.

11. Proof of Delivery and Reviews

Proof of Delivery: we maintain internal logs (e.g., order ID, timestamps, redacted confirmations). If we publish proof or testimonials, we minimize personal data and redact sensitive details.
Reviews: your review content may be public along with your display name. Please avoid sharing personal or sensitive information in reviews.

12. Security

We use technical and organizational measures appropriate to risk, such as HTTPS, access controls, secure credential storage, monitoring, and least‑privilege access. No method is perfectly secure; we continuously improve safeguards and will notify you and regulators of a data breach when required by law.

13. Children’s privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact us and we will take appropriate steps to remove it.

14. Third‑party links and embedded content

Our Site may include links to or embeds from third‑party sites and services (for example, videos, posts, payment pages). Those third parties operate under their own privacy policies and may use their own cookies or tracking. Please review their policies before interacting.

15. Affiliates and corporate control

We may share information with corporate affiliates under common control. Any affiliate must process your information in line with this Privacy Policy. If our business is involved in a merger, acquisition, or asset transfer, your information may be transferred to a successor that will continue to protect it as described here.

16. Sale of business

If Nocapstore BD or its affiliates are involved in a sale or transfer of all or part of the business, we may transfer personal information to the buyer or successor, provided they agree to use it consistent with this Policy and applicable law.

17. Data minimization and accuracy

We collect only the information needed for the purposes described and take reasonable steps to keep it accurate and up to date. You can help by reviewing and updating your account details.

18. Your responsibilities

Please keep your account credentials confidential and use a strong, unique password. Do not include sensitive information (for example, national ID numbers or full card details) in support messages, reviews, or open‑text fields.

19. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version with a new “Effective date” at the top. If changes are significant, we may also notify you by email or a notice on the Site. Your continued use after changes means you accept the updated Policy.