IFFAAH FASHION
Privacy Policy
Last updated 24 October 2026
1. Introduction
This Privacy Policy explains how IFFAAH FASHION ("we", "us", "our") collects, uses, stores, and protects your personal information when you visit iffaah.com ("the Website") and place orders through it.
IFFAAH FASHION is an ecommerce storefront for modest fashion and everyday wear based in Bangladesh. By using the Website or creating an account, you agree to the practices described in this policy.
2. Personal Information We Collect
We collect personal information that you provide directly to us, including:
- Account details: name, email address, phone number, and profile picture when you sign in with Google.
- Delivery details: country, division, district, city, street, house/bari, village, and postal code for order delivery.
- Order details: items ordered, quantities, prices, shipping address, and order status.
- Newsletter: email address if you subscribe to IFFAAH updates.
- Communications: messages you send to us via WhatsApp or other contact channels.
We do not collect payment card details. Payment is by cash on delivery (COD) in Bangladesh, and no card payment is processed online through the Website.
3. Account Details
Customer accounts on the Website are created through Google sign-in only. When you sign in with Google, we receive your name, email address, and profile picture from Google to create and manage your account. We do not collect or store a separate password for your IFFAAH account.
- You can view and update your profile details, including delivery address, through your account page on the Website.
- You are responsible for keeping your Google account credentials confidential.
- We may suspend or disable an account if we believe it has been used in violation of our Terms of Service.
4. Orders
We collect order information to process and deliver your purchases, including:
- Products ordered, size and color selections, quantities, and prices.
- Recipient name, phone number, and email address.
- Delivery address in Bangladesh.
- Order status, payment status (cash on delivery), and delivery notes.
You can view your order history through your account at /my-orders. We use order information to fulfill deliveries, communicate about your order, and handle returns or refunds.
5. Payments
IFFAAH FASHION accepts cash on delivery (COD) in Bangladesh. You pay for your order when it is delivered to you.
- No payment card details are collected, stored, or processed online through the Website.
- We do not have access to your payment card information.
- Order totals are calculated server-side from product prices at the time of checkout.
6. Cookies and Client-Side Storage
The Website uses an HttpOnly session cookie named authToken to keep you signed in. This cookie is set by the backend API and is sent automatically with requests to the API. It is not accessible to client-side scripts.
- The session cookie expires after 24 hours and is marked secure in production and SameSite=Lax.
- Signing out clears the session cookie.
- The Website also stores some data in your browser's local storage, including cart items, wishlist items, and order information, so your shopping session persists between visits. This data is stored on your device, not on our servers.
You can manage or delete cookies through your browser settings. Disabling cookies may prevent you from signing in or placing orders.
7. How We Use Your Information
We use your personal information to:
- Create and manage your account and sign you in with Google.
- Process and fulfill your orders, including delivery and customer support.
- Communicate with you about your orders, account, or policy changes.
- Send newsletter updates if you have subscribed.
- Prevent fraud and improve the security of the Website.
8. Sharing and Disclosure
We do not sell your personal information. We may share your information only as follows:
- With delivery partners and couriers, solely to deliver your order.
- With service providers who operate the Website and backend API on our behalf, under confidentiality obligations.
- When required by law, regulation, or valid legal process in Bangladesh.
9. Data Security
We implement reasonable technical and organizational measures to protect your personal information, including encrypted connections (HTTPS) for the Website and API, and server-side access controls for stored account and order data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Data Retention
We retain your personal information for as long as needed to fulfill the purposes described in this policy, including processing orders, handling returns, and complying with legal obligations in Bangladesh. You may request deletion of your account and associated data by contacting us, subject to any legal retention requirements.
11. Your Rights
You have the right to:
- Request access to the personal information we hold about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of your account and personal information.
- Withdraw newsletter subscription at any time.
- Object to processing of your personal information for direct marketing.
To exercise these rights, please contact us using the details below. We will respond to your request in accordance with applicable law.
12. Contact Information
If you have any questions about this Privacy Policy or your personal information, please contact IFFAAH FASHION:
- Website: iffaah.com
- Customer support (WhatsApp): +8801603247404
IFFAAH FASHION — modest fashion and everyday wear in Bangladesh. This Privacy Policy was last updated on 24 October 2026.