Your information matters

Privacy Policy &
Data Security

This policy explains what information Eklas Store collects, why we use it, when it may be shared, and the safeguards we use when you browse our website, contact our Telegram bot, or buy a digital product.

Effective: 10 August 2026

Plain-language summary: We collect only the information reasonably needed to provide and support your order, prevent fraud, and meet legal obligations. We do not sell personal information, and full payment credentials are handled by the payment provider—not by Eklas Store.

1. Scope and who we are

This Privacy Policy applies to Eklas Store (“Eklas Store,” “we,” “us,” or “our”), including store.eklas.dev, our Telegram storefront and support conversations, and related order-fulfilment services.

Our store sells digital products such as gift cards, software licences, subscriptions, game top-ups, online courses, design assets, and similar digitally delivered goods.

2. Information we collect

Information you provide

  • Contact and account information: your name, email address or phone number when supplied, Telegram username, Telegram user/chat identifier, and profile information made available through Telegram.
  • Order information: the product selected, amount, currency, order number, delivery status, redemption or activation status, and support history.
  • Support information: messages, screenshots, receipts, or other evidence you send when asking for assistance or requesting a refund.

Information collected automatically

  • Transaction metadata: payment reference, payment method type, status, date, amount, and fraud or risk signals returned by our payment provider. We do not receive or intentionally store your complete card number, CVV, PIN, or mobile-financial-service credentials.
  • Technical information: IP address, browser and device type, timestamps, referring page, and security or error logs generated when you use our website or services.

Telegram and your payment provider collect information under their own privacy terms. Please review those terms before using their services.

3. How we use information

We use personal information only when reasonably necessary to:

  • process, verify, deliver, and keep a record of your order;
  • confirm payment and send receipts or service messages;
  • provide customer support and resolve delivery, activation, refund, or dispute requests;
  • detect and prevent fraud, abuse, account compromise, and unauthorised transactions;
  • maintain, troubleshoot, secure, and improve our website and automated storefront;
  • comply with tax, accounting, payment-network, regulatory, and other legal obligations; and
  • send promotional messages only where you have chosen to receive them. You may opt out at any time.

4. Payment information

Payments are processed through independent banks, payment gateways, card networks, or mobile financial service providers. Payment forms may be hosted or controlled by those providers. Eklas Store generally receives a transaction reference and confirmation or failure status so we can fulfil the order.

We do not ask you to send a card PIN, CVV, one-time password, or complete payment-account password through Telegram or support chat. Never share those credentials with anyone claiming to represent Eklas Store.

5. When information may be shared

We do not sell or rent your personal information. We may share the minimum information needed with:

  • payment and banking partners to authorise payments, issue refunds, prevent fraud, and handle disputes;
  • technology providers that host, secure, monitor, or operate our website, Telegram bot, communications, and order systems;
  • product fulfilment or licensing partners when necessary to deliver, activate, replace, or troubleshoot the product you ordered;
  • professional advisers or authorities when reasonably necessary to meet a legal obligation, enforce our agreements, or protect customers, Eklas Store, or others; and
  • a successor organisation in connection with a merger, acquisition, reorganisation, or sale, subject to appropriate confidentiality protections.

Some providers may process information outside Bangladesh. Where this occurs, we take reasonable steps to use reputable providers and appropriate contractual or technical safeguards.

6. Data security

We use reasonable administrative, technical, and organisational measures designed to protect information against unauthorised access, alteration, disclosure, or loss. Depending on the system, these measures include HTTPS encryption in transit, access restrictions, credential and permission controls, logging, provider security reviews, backups, and fraud monitoring.

No website, messaging platform, or method of electronic storage is completely secure. We therefore cannot guarantee absolute security. If we become aware of a data incident that creates a material risk to you, we will take reasonable steps to contain it and notify affected people or authorities where required.

7. Data retention

We retain information only for as long as reasonably necessary for the purposes described in this policy. The period varies by record type. Order and transaction records may be kept longer to meet accounting, tax, anti-fraud, payment dispute, and legal requirements. Support messages and technical logs are deleted or anonymised when they are no longer reasonably needed, subject to backup cycles and legal holds.

8. Your choices and privacy requests

Subject to applicable law and any recordkeeping duties, you may ask us to:

  • confirm whether we hold personal information about you;
  • provide access to or correct inaccurate information;
  • delete information that is no longer required;
  • withdraw consent or opt out of promotional messages; or
  • review a concern about how your information has been handled.

We may need to verify your identity and order details before responding. We may also keep information where retention is required for legitimate security, dispute, accounting, or legal purposes.

Children’s privacy

Our services are not directed to children under 18. If you believe a child has provided personal information without appropriate permission, contact us so we can review and delete it where required.

Changes to this policy

We may update this policy when our services, providers, or legal obligations change. The new effective date will appear at the top of this page. Material changes will be highlighted through the website or another appropriate channel.

9. Contact us

For privacy questions or requests, contact Eklas Store through our official Telegram support channel. Include your order number where relevant, but never send a password, OTP, PIN, or CVV.

Eklas Store Privacy Support
Website: store.eklas.dev
Telegram: @eklasstorebot