Privacy policy

What YuriLink collects

• Account details: your name, email address, phone number and password (stored only as a cryptographic hash — YuriLink cannot read it).
• Delivery addresses you save, and the address snapshot attached to each order.
• Order and payment records, including the photo of the payment confirmation you upload for bKash and bank transfer orders. That image is held in private storage alongside identity documents and is never shown to the store you bought from.
• Activity used to make the site useful: products viewed, searches run, items saved.
• Messages you exchange with stores or with YuriLink support.
• Technical records kept for security: sign-in attempts, the IP address they came from, and the browser used.

Sellers and their documents

• Stores additionally provide a trade licence, a national ID or passport, and payout details.
• These are held in private storage that is not reachable from the public internet. They are never published on a store page or returned by the public API.
• Bank account numbers are encrypted at rest and only ever displayed back in masked form.
• Every time a YuriLink staff member opens one of these documents, the platform records who opened it and when.

What is shared, and with whom

• When you place an order, the store fulfilling it receives your name, phone number and delivery address. It cannot see your payment details or your other orders.
• Couriers receive what they need to deliver the parcel.
• YuriLink does not sell personal data, and does not share it for third-party advertising.

How long data is kept

• Order, payment and settlement records are retained as long as required for accounting and tax purposes.
• Browsing and search history can be cleared from your account at any time.
• Closing your account removes personal details, but records tied to completed financial transactions are retained where the law requires it.

Your choices

• View and correct your account details, addresses and notification preferences under My account.
• Turn off promotional email and SMS separately from order notifications.
• Request a copy of your data, or ask for your account to be closed, through the routes on the Contact page.

Keeping your account secure

• Two-factor authentication is available to every shopper and required for stores and staff.
• Resetting your password signs you out of every other device.
• YuriLink will never ask for your password, sign-in code or mobile banking PIN by phone, email or chat.