Privacy policy

This policy explains what personal information Raadha Bookshop (“we”) collects when you use our website, why we collect it, and the choices you have. It applies to our online shop only.

What we collect

• Mobile number — to sign you in with a one-time SMS code and to contact you about your order.
• Name, delivery address and (optionally) email — to deliver your order and send receipts.
• Order details — the items you buy, prices, delivery area, order instructions and payment status.
• Payment information — card payments are made on the Bank of Maldives payment page. We never see or store your card number; we only receive the transaction reference and whether the payment succeeded.
• Technical information — your IP address is used briefly to prevent abuse (for example, too many sign-in attempts).

How we use it

• to process, deliver and support your orders, and handle returns and refunds;
• to verify your mobile number and keep your account secure;
• to keep the records we are required to keep for accounting and tax purposes;
• to prevent fraud and misuse of the website.

We do not sell your personal information, and we do not send marketing messages unless you ask us to.

Who we share it with

Only the service providers needed to run the shop, and only what they need:

• Bank of Maldives (BML Connect) — processes online card payments;
• MessageOwl (MsgOwl) — sends the SMS sign-in codes to your mobile number;
• our hosting provider, which stores the website and our database;
• authorities, if the law requires us to.

Your account and in-store records

Your online account uses the same customer record as our stores. If you have shopped with us in store using the same mobile number, your online orders are linked to that record.

Cookies and storage on your device

We do not use advertising or tracking cookies. Your browser stores your cart, order instructions and, if you choose to stay signed in, a sign-in token. You can clear these at any time by signing out or clearing your browser data.

How long we keep it

Order and payment records are kept for as long as the law requires for accounting purposes. Sign-in codes expire after 5 minutes, and sign-in sessions after 30 days.

Security

The website uses encrypted connections (HTTPS). Sign-in codes and session tokens are stored only in scrambled (hashed) form, and access to customer records is limited to authorised staff.

Your choices

You can view and update your name, email and address on your account page. To ask for a copy of your information, or for it to be corrected or deleted (except records we must keep by law), contact us at [email protected].

Changes

If we change this policy, we will update the date at the top of this page.