Privacy Policy

1. Information you give us

When you shop with Shiro, you may provide:

• Contact & delivery details — name, email, phone number, and shipping address.
• Order details — the items, sizes, and quantities you buy, and your order history.
• Fit information — if you use our size recommender, the height, weight, and optional chest measurement you enter. This is used to suggest a size and is not sold or used for advertising.
• Payment information — for bKash payments and preorder deposits, we may receive your transaction reference or a screenshot you upload as proof. We do not store your full card or bKash PIN.

2. Information from Google Sign-In

If you choose “Sign in with Google,” Google shares a limited profile with us so we can create and secure your account. We receive:

• your name and email address;
• your Google profile picture; and
• a unique Google account identifier.

We use this only to identify you, keep you signed in, and connect your orders to your account. Shiro’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell this data or use it for advertising. You can revoke Shiro’s access at any time from your Google Account permissions.

3. Information we collect automatically

Like most websites, we collect basic technical data when you visit — device and browser type, approximate region, and pages viewed — and we use essential cookies and similar storage to keep your session and shopping cart working. We do not use this to build advertising profiles.

4. How we use your information

• to process, fulfil, and deliver your orders;
• to recommend a size when you ask us to;
• to send order and delivery updates, and to respond when you contact us;
• to manage your account and keep it secure; and
• to meet legal, tax, and accounting obligations, and to prevent fraud or abuse.

5. Who we share it with

We do not sell your personal information. We share it only with the service providers we rely on to run Shiro, and only as needed:

• Couriers (such as Pathao and Steadfast) — your name, address, and phone number, so your order can be delivered.
• Payment (bKash) — to confirm and reconcile payments and deposits.
• Infrastructure — Supabase (accounts and order database) and Vercel (website hosting), which process data on our behalf.
• Google — for sign-in, as described above.

We may also disclose information if required by law or to protect the rights and safety of Shiro and our customers.

6. Data retention

We keep order and account records for as long as your account is active and as long as needed for delivery, warranty, tax, and accounting purposes. When information is no longer needed, we delete or anonymise it.

7. Security

Access to customer data is restricted, and orders are handled through secured, server-side systems separate from the public site. No method of storage or transmission is perfectly secure, but we take reasonable measures to protect your information.

8. Your rights and choices

• Access & correction — ask us for a copy of your data or request a correction.
• Deletion — ask us to delete your account and personal data, subject to records we must keep by law.
• Sign out & revoke — sign out anytime, and disconnect Google access from your Google Account settings.

To exercise any of these, email us at shiro.apparel.official@gmail.com.

9. Children

Shiro is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has provided us data, contact us and we will remove it.

10. Changes to this policy

We may update this policy as Shiro grows. When we do, we will revise the “last updated” date above, and material changes will be made clear on this page.

11. Contact

Questions about your privacy? Write to us at shiro.apparel.official@gmail.com. We read everything, and we reply.