Privacy Policy

ClickBD (clickbd.com) is an online marketplace operating in Bangladesh since 2005, where buyers browse and purchase products and classified listings and where sellers list and sell their products. This Privacy Policy explains how ClickBD ("ClickBD", "we", "us", "our") collects, uses, discloses, stores and safeguards your personal information when you use the ClickBD website, mobile applications and related services (together, the "Platform").

Browsing ClickBD does not require an account. You only need to create an account — with your email and password, or by using "Continue with Google" or "Continue with Facebook" — to place an order, contact a seller, or list an item for sale. If you sign in with Google or Facebook, please also read Section 5 — Google Sign-In and Google User Data and Section 6 — Facebook Login and Facebook User Data, which describe exactly what account information we receive from each provider and how we use it.

Data controller: ClickBD, 55/1 Kakrail, Dhaka, Bangladesh. Privacy contact: [email protected].

Last updated: 12 October 2026

2.1 Information You Provide

• Account registration data: name, email address, phone number, password
• Profile information: delivery addresses, payment preferences
• Transaction data: order history, payment records, delivery details
• Communication data: messages to sellers, customer support interactions
• Seller-specific data: business name, trade licence, bank account details, NID

2.2 Information Collected Automatically

• Device information: device type, operating system, browser type
• Usage data: pages viewed, search queries, time spent, click patterns
• Location data: IP address, approximate geographic location
• Cookies and tracking technologies (see our Cookies Policy)

2.3 Information From Social Sign-In Providers

If you create or access your account using "Continue with Google" or "Continue with Facebook", we receive basic profile information from that provider — your unique account ID, your name, your email address, whether the provider has verified that email address, and your profile picture URL. We do not receive your password for that provider. See Section 5 and Section 6 for the full disclosures covering Google user data and Facebook user data respectively.

• Process and fulfil your orders and transactions
• Create and manage your user account
• Provide customer support and respond to your enquiries
• Coordinate delivery through our logistics partners
• Process payments through our payment service providers
• Send order confirmations, shipping updates, and delivery notifications
• Personalise your shopping experience and provide product recommendations
• Send promotional communications (with your consent)
• Prevent fraud, detect security threats, and ensure platform integrity
• Comply with legal obligations under Bangladeshi law

We share your personal data only as necessary to operate the Platform:

• With Sellers: Name, delivery address, and phone number to fulfil your order
• With Logistics Partners: Delivery address and contact details for shipping
• With Payment Providers: Transaction data for payment processing (bKash, Nagad, card networks)
• With Legal Authorities: When required by law, regulation, or court order

We do not sell your personal data to third parties for marketing purposes.

ClickBD offers Google Sign-In ("Continue with Google") purely as a convenient way to create and access a ClickBD account. This section describes, in full, what Google user data ClickBD requests, how we use it, how we store it, with whom we share it, and how you can revoke access or have it deleted.

5.1 What Google Data We Request and Receive

When you choose "Continue with Google", we request only the two basic sign-in scopes offered by Google OAuth:

• .../auth/userinfo.email — your Google account email address and whether Google has verified it
• .../auth/userinfo.profile — your Google account ID, your display name and your profile picture URL

Google then returns the following to ClickBD, and nothing else: your Google account ID, your name, your email address, your email-verified status, and your profile picture URL.

ClickBD does not request, access, read, download or store any other Google data. We do not request access to Gmail or your messages, Google Drive or your files, Google Contacts, Google Calendar, Google Photos, Google Pay, YouTube, your Google search history, your location history, or any Google Workspace content. ClickBD requests no restricted or sensitive Google API scopes.

5.2 How We Use Google Data

Google user data is used only to deliver the sign-in and account features you asked for:

• To create your ClickBD account, or to sign you in to your existing account
• To authenticate you as the owner of that account on return visits
• To pre-fill your name and profile picture on your ClickBD profile, so you do not have to enter them
• To match your Google email to an existing ClickBD account so you do not end up with duplicate accounts
• To send you transactional messages at that address — order confirmations, delivery updates, account security notices and customer support replies

We do not use Google user data for advertising, ad targeting, retargeting, profile building, credit assessment or resale. We do not use Google user data to train, develop or improve generalised or general-purpose artificial intelligence or machine learning models. No human at ClickBD reads your Google data except where you have given explicit consent, where it is necessary for security purposes or to investigate abuse or fraud, where it is required by applicable law, or where the data is aggregated and anonymised for internal operations.

5.3 How We Store and Retain Google Data

The Google account ID, name, email address, email-verified flag and profile picture URL are stored in your ClickBD user record, on access-controlled servers, encrypted in transit over SSL/TLS. ClickBD never receives or stores your Google password, and we do not retain Google OAuth access tokens or refresh tokens after your sign-in has completed — each sign-in is a fresh authentication with Google. Your Google-derived profile data is retained for as long as your ClickBD account remains active, and is deleted when you delete your account, subject to any retention period required by Bangladeshi law or needed to resolve a dispute or complete a pending transaction.

5.4 How We Share Google Data

We do not sell, rent or trade Google user data, and we do not transfer it to third parties for advertising or any other independent purpose. Your name and contact details may be shared with a seller or a delivery partner strictly to fulfil an order you have placed, exactly as described in Section 4 — Information Sharing, and with our service providers (such as hosting and email delivery providers) acting on our instructions under confidentiality obligations. We may also disclose data where required by law, regulation or a valid court order, or to protect the rights, property or safety of ClickBD, our users or the public.

5.5 Limited Use Disclosure

5.6 Revoking Access and Deleting Your Google Data

You remain in control at all times:

• Revoke ClickBD's access to your Google account at any time from your Google Account settings: myaccount.google.com/permissions. Revoking access does not delete your ClickBD account; you can continue to sign in by setting a ClickBD password.
• Delete your ClickBD account and the Google data linked to it by emailing [email protected] from your registered address, or by contacting [email protected]. We action verified deletion requests within 30 days.

ClickBD offers Facebook Login ("Continue with Facebook") purely as a convenient way to create and access a ClickBD account. This section describes, in full, what Facebook user data ClickBD requests, how we use it, how we store it, with whom we share it, and how you can revoke access or have it deleted.

6.1 What Facebook Data We Request and Receive

When you choose "Continue with Facebook", we request only the two default Facebook Login permissions:

• public_profile — your Facebook account ID, your name and your profile picture URL
• email — the email address registered on your Facebook account

Facebook then returns the following to ClickBD, and nothing else: your Facebook account ID, your name, your email address and your profile picture URL.

ClickBD does not request, access, read, download or store any other Facebook data. We do not request your friends list, your posts, timeline or feed, your photo albums or videos, your Messenger conversations, your Pages or Groups, your ad or interest data, your check-ins or location history, or any Instagram or WhatsApp data. ClickBD requests no Facebook permissions that require App Review beyond the two default permissions listed above.

6.2 How We Use Facebook Data

Facebook user data is used only to deliver the login and account features you asked for:

• To create your ClickBD account, or to sign you in to your existing account
• To authenticate you as the owner of that account on return visits
• To pre-fill your name and profile picture on your ClickBD profile, so you do not have to enter them
• To match your Facebook email to an existing ClickBD account so you do not end up with duplicate accounts
• To send you transactional messages at that address — order confirmations, delivery updates, account security notices and customer support replies

We do not use Facebook user data for advertising, ad targeting, retargeting, profile building, credit assessment or resale, and we do not use it to train, develop or improve generalised or general-purpose artificial intelligence or machine learning models.

6.3 How We Store and Retain Facebook Data

The Facebook account ID, name, email address and profile picture URL are stored in your ClickBD user record, on access-controlled servers, encrypted in transit over SSL/TLS. ClickBD never receives or stores your Facebook password, and we do not retain Facebook access tokens after your login has completed — each login is a fresh authentication with Facebook. Unlike Google, Facebook does not return a separate "email verified" indicator; Facebook only releases an email address it has itself confirmed, so an email received this way is recorded as verified on your ClickBD account. Your Facebook-derived profile data is retained for as long as your ClickBD account remains active, and is deleted when you delete your account, subject to any retention period required by Bangladeshi law or needed to resolve a dispute or complete a pending transaction.

6.4 How We Share Facebook Data

We do not sell, rent or trade Facebook user data, and we do not transfer it to third parties for advertising or any other independent purpose. Your name and contact details may be shared with a seller or a delivery partner strictly to fulfil an order you have placed, exactly as described in Section 4 — Information Sharing, and with our service providers (such as hosting and email delivery providers) acting on our instructions under confidentiality obligations. We may also disclose data where required by law, regulation or a valid court order, or to protect the rights, property or safety of ClickBD, our users or the public.

6.5 Compliance With Meta Platform Terms

6.6 Revoking Access and Deleting Your Facebook Data

You remain in control at all times:

• Revoke ClickBD's access to your Facebook account at any time from your Facebook settings: Settings & Privacy → Settings → Apps and Websites, then remove ClickBD. Revoking access does not delete your ClickBD account; you can continue to sign in by setting a ClickBD password.
• Delete your ClickBD account and the Facebook data linked to it by emailing [email protected] from your registered address, or by contacting [email protected]. We action verified deletion requests within 30 days and confirm by email once the data has been removed.

We implement industry-standard security measures including SSL/TLS encryption for data transmission, encrypted storage of sensitive personal data, regular security audits and vulnerability assessments, and access controls limiting employee access to personal data on a need-to-know basis.

We retain your personal data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account by contacting [email protected].

You have the right to access, correct, update, or request deletion of your personal information. You may opt out of promotional communications at any time. To exercise these rights, contact us at [email protected].

The Platform is not intended for children under 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a child, we will delete it promptly.

We may update this Privacy Policy periodically. We will notify you of material changes through the Platform or via email.

If you have any question, concern or complaint about this Privacy Policy, about how your personal data is handled, or about Google or Facebook user data specifically, please contact us:

We aim to respond to every privacy enquiry within 7 business days.