ROKPAR is a skin and hair care brand based in Gazipur, Bangladesh. Our range includes hair oil, hair packs, facepacks, bodypacks and combos. This policy explains personal information used for website shopping, accounts, reviews and customer support. Current store: https://haircare.rokpar.com. Main brand domain: https://rokpar.com.

For an order or support request, you may provide your name, phone number, delivery address, order notes and, where requested, an email address. Order records include selected products, sizes, quantities, prices, discounts, payment status, transaction references and delivery details. Accounts also contain profile and login-related information. Fields marked optional do not have to be completed.

When you access the website, hosting or enabled security services may record your IP address, browser and device type, request times, requested pages and error logs. These records support website operation, troubleshooting and protection against unauthorised use.

Information is used to confirm orders, check payment status, arrange delivery, manage returns and refunds, operate accounts and respond to your questions. Without required information, we may be unable to complete the relevant order or service. Information may also be needed for record keeping, dispute resolution, fraud prevention and applicable legal obligations.

The payment provider processes relevant information according to the payment method shown at checkout. For Cash on Delivery, the courier receives the amount payable for the order. A refund may require the recipient’s bKash or Nagad number or necessary bank details. Do not send your PIN, password, card CVV or payment OTP in a message.

Authorised staff may access relevant records to handle orders and support. Hostinger provides website hosting; WordPress and WooCommerce manage store records. Delivery partners receive names, phone numbers, addresses and necessary order details. For order channels connected to ecomdrive, relevant order information is sent there for order management and fulfilment. Selected payment providers and enabled security or communication services may also receive information relevant to their work. Disclosure to authorities may be necessary for a legal obligation or valid request.

Cookies or similar technologies may remember cart items, maintain login sessions and store necessary preferences. You can delete or block cookies in your browser; doing so may affect your cart or login. Cookie lifetimes depend on enabled services and settings. If analytics or advertising tracking is enabled, the relevant notice needs to identify its services, purposes and controls; this policy does not itself enable or disable tracking.

When you submit a review or comment, its form fields, text and uploaded photographs may be stored. The display name, text and images in an approved review may be visible to other visitors. Do not include phone numbers, addresses or private details in public text. Upload only your own images or images you have permission to use, and remove embedded EXIF location data first. If Gravatar is enabled for profile images, a hash derived from an email address may be sent to that service; a hash should not be treated as fully anonymous. Enabled spam-prevention services may check comment data.

Pages may contain YouTube videos, Google Fonts or other resources loaded from external servers. Loading them can disclose your IP address and browser-related information to those providers, which may use cookies under their own policies. Following WhatsApp, Messenger or Instagram links brings you to services governed by their own policies. Those platforms also process messages you send through them.

We may use the number or contact channel you provide for order confirmation, delivery and support. If you agree to receive promotional messages, you can contact us to stop them. Stopping promotions does not prevent necessary messages about an active order or your request. Avoid sending unnecessary medical records or sensitive personal information to support.

Order, payment and refund records are retained as needed for fulfilment, accounting, disputes and applicable record-keeping obligations. Account data supports account operation and related obligations. Review information may remain for publication and moderation. Retention of support records, security logs and backups depends on their purposes and service settings. A deletion request is assessed to determine what can be removed and what must be retained. Backup copies may remain until their normal replacement cycle.

You can request a copy of your information, correction of inaccuracies, deletion of an account or personal information, and an end to promotional messages. We may ask for limited information to verify the requester. Disclosure or deletion may be limited where it would affect another person’s information or legally required records. Removing website data does not automatically delete records independently held by external platforms.

Appropriate access controls and technical measures are important to protecting personal information. No internet transmission or storage system is entirely risk-free. Keep passwords and verification codes confidential and tell us about suspected unauthorised access. Hosting, embedded content or communication providers may process information outside Bangladesh; locations depend on the relevant provider’s infrastructure.

Minors should involve a parent or guardian when ordering or submitting personal information. A parent or guardian who believes a child’s information has been submitted inappropriately can contact us so that appropriate action can be considered.

This policy may be updated when services or information practices change. Additional notice will be provided for significant changes where appropriate. A new app or new data-collection feature requires its information practices to be covered before release.