MetalCraft makes personalised metal gifts in Dhaka, Bangladesh. To make and deliver your order we need a few details about you. This page explains what we collect, what we do with it, and what you can ask us to do with it.
What we collect
- When you order: your name, mobile number and delivery address; the text, names, dates, logos or photos you want engraved; and the bKash or Nagad transaction ID of your payment.
- When you contact us: your name, email or phone number, your message and any file you attach.
- When you join the newsletter: your email address.
- When you browse: your cart is kept in your own browser so it survives a refresh, and a copy of it is saved on our server with a random number for your browser. Our server also keeps a short-lived session and the usual technical logs (IP address, browser, pages requested) to keep the site working and secure.
- While you fill in checkout: your name, mobile number, address, delivery area and payment choice are saved as you type, even before you press Place Order, so we can help if something goes wrong. We never save the transaction ID until you place the order.
We do not ask for your bKash or Nagad PIN, card numbers or passwords, and we never will. Nobody from MetalCraft will ask for them by phone either.
How we use it
- To make your piece, contact you about it, and deliver it.
- To check your payment against our bKash or Nagad statement.
- To call or message you about your order, and to answer your questions — including, if you filled in checkout but didn’t finish, to ask whether you need help placing it.
- To send the newsletter, only if you joined it. Every email has an unsubscribe link.
- To keep the accounts and records the law asks a business to keep.
Who we share it with
We do not sell or rent your details to anyone. We share only what is needed:
- The courier gets your name, phone number, address and, for cash on delivery, the amount to collect.
- bKash and Nagad already have your payment; we only match the transaction ID.
- Our hosting and email providers store and send data for us, and may not use it for anything else.
- Authorities, if the law requires it.
Ads and visitor statistics
We may use Meta (Facebook) Pixel and Google Analytics to count visits and to see whether our ads lead to orders. They set cookies and receive information such as the pages you view, what you add to the cart and the value of an order. Our server may also send these events to Meta directly (the Meta Conversions API). To match them to ads, Meta receives your IP address and browser, and a scrambled (hashed) form of your mobile number and name that cannot be read back — never your address or the number itself. You can block the Pixel with your browser’s privacy settings or an ad blocker, and the shop will still work.
Your designs and photos
Logos and photos you upload are used only to make your order. Uploads that never become an order are deleted automatically within two days. We do not show your design publicly or use it in our marketing without asking you first.
How long we keep it
Order records are kept for as long as we need them for accounts, warranties and repeat orders. Contact messages and newsletter addresses are kept until you ask us to remove them. Carts and checkout details that never became an order are deleted after 90 days.
Keeping it safe
The site uses an encrypted (https) connection. Only our staff can see orders, and each person sees only what their job needs — for example, the people engraving do not see payment details.
Your choices
You can ask us for a copy of the details we hold about you, ask us to correct them, or ask us to delete them (except what we must keep for our accounts). Unsubscribe from the newsletter at any time with the link in any email.
Changes to this policy
If we change how we use your details we will update this page and the date at the top.
Questions
Call or WhatsApp us on +880 1712 345678, email [email protected], or use the contact form. We are open Sat–Thu, 10am–8pm.