Privacy Policy
Last updated 17 October 2026 · Hermizon, Dhaka, Bangladesh
Hermizon makes handmade women’s footwear in Dhaka and sells it directly through this website. This policy explains what personal information we collect when you browse the site or place an order, why we collect it, who sees it and what you can ask us to do with it. It describes what we actually do today, not what we might do later — when that changes, this page changes with it.
Who we are
Hermizon, Shop# 218 (Level-2), Metro Shopping Mall, Dhanmondi, Dhaka 1209, Bangladesh. For anything in this policy, contact us at info@hermizon.com or +880 1540 324544.
What we collect
When you place an order. Your name, delivery address, phone number, email address if you give one, what you ordered, and any delivery instructions you give us. Because we deliver cash on delivery, we never see or store card or mobile-wallet details.
When you create an account. Your email address, a password we store only as a cryptographic hash, your saved addresses and your order history.
When you write to us. The name, email address, subject and message you type into the contact form. It reaches us by email and is not published anywhere.
When you review a product. Your name, email address, star rating, review text and the IP address the review was sent from. The name, rating and text are published on the product page; the email address and IP address are not.
When you ask to hear that a product is back. Your email address and the product or size, until we have told you or you cancel. WooCommerce first sends you an email to confirm the address is yours.
Automatically. Our web server keeps ordinary request logs — IP address, browser user agent, the page requested and the time. These are used to keep the site running and to investigate abuse.
Cookies
The site sets these cookies so that it works:
- Cart and session — so the shopping bag survives moving between pages.
- Login — so you stay signed in to your account.
- Preferences — small settings such as a dismissed notice.
- Order source — WooCommerce notes which link, search or ad brought you to the shop (cookies starting
sbjs_) and attaches it to your order.
The site also uses cookies from Meta, Google and Microsoft, to measure our advertising and to see how the shop is used. They are described in the next section.
Advertising and measurement
Meta (Facebook and Instagram). We advertise on Facebook and Instagram. We use Meta’s Pixel and Conversions API to see which ads lead to visits and orders, and to show our ads to people likely to be interested in them. Your browser and our server tell Meta:
- which pages and products you looked at;
- what you added to your bag;
- when you started checkout;
- once your order is confirmed, what you bought and the order value.
With this we send your IP address, your browser’s details and Meta’s cookie identifiers (_fbp, _fbc).
If we already know your phone number or email address, we send those too, along with your customer account number. We know them when you are signed in, or once you have typed them at checkout. For a confirmed order we also send your name, city and country. All of these are scrambled (hashed) on our server before they leave it. Meta uses them only to match the visit to a Facebook or Instagram account that already holds the same details.
Meta uses this information under its own privacy policy: facebook.com/privacy/policy. You can control the ads you see in your Facebook or Instagram ad preferences: facebook.com/adpreferences.
Google Analytics. Google Analytics counts visits and shows us how the site is used. It sets its own cookies (_ga). Google’s advertising features are switched on, so Google may also use this information for advertising reports and to personalise ads. We also use Google Ads: when you place an order, Google is told its value, so we can see which Google ads lead to sales. Google’s tag also picks up an email address, phone number or address typed into the site’s forms — at checkout, in the contact form, in the newsletter box — and scrambles (hashes) it in your browser before sending it, so Google can match the visit to a Google account that already holds the same details. Google’s privacy policy: policies.google.com/privacy. You can manage the ads Google shows you at myadcenter.google.com.
Microsoft Clarity. Microsoft Clarity records how visitors move around our pages — clicks, scrolling and mouse movement — so we can see where the site is confusing and fix it. It hides what you type. Its cookies are _clck and _clsk. Microsoft’s privacy statement: privacy.microsoft.com/privacystatement.
Your choice. You can block or delete these cookies in your browser’s settings, and the shop works the same without them. Google offers a browser add-on that stops Google Analytics: tools.google.com/dlpage/gaoptout. If you chose “Not now” on the cookie banner this site showed until October 2026, we keep to that choice for as long as your browser keeps it (up to 180 days; some browsers, Safari among them, keep it for less).
Why we collect it
- To pack, dispatch and deliver your order, and to collect payment on delivery.
- To contact you about that order — confirmation, dispatch, a delivery problem.
- To let you sign in, see past orders and reorder.
- To answer questions you send us.
- To detect and prevent fraud and abuse.
- To meet our accounting and legal obligations in Bangladesh.
Who we share it with
Our delivery partner, Pathao Courier, receives your name, delivery address, phone number and the amount to collect. That is the minimum needed to hand you the parcel.
Our hosting provider stores the site and its database on our behalf.
Our SMS provider (MiMSMS) receives your phone number and the text of a message when we send you a code.
Meta, Google and Microsoft receive the information described under Advertising and measurement.
Nobody else. We do not sell, rent or trade personal information.
How long we keep it
- Order records — six years, which is what accounting practice here implies.
- Account details — until you ask us to close the account.
- Contact form messages — one year after we have answered you.
- Reviews — until you or we remove them.
- Server logs — for as long as our hosting provider keeps them.
What you can ask for
Write to info@hermizon.com and you can ask us to give you a copy of the personal information we hold about you, correct anything that is wrong, or delete it. We will reply within 30 days.
One limit worth stating plainly: we cannot delete the record of an order we are legally required to keep. Everything else can go.
Children
This site is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a child has given us personal information, contact us and we will remove it.
Changes to this policy
When this policy changes we update the date at the top of the page. Material changes will also be announced on the site.
Contact
Write to info@hermizon.com or call +880 1540 324544. Our address is Shop# 218 (Level-2), Metro Shopping Mall, Dhanmondi, Dhaka 1209, Bangladesh.