Privacy Policy

Last updated: 27 May 2026

Yangon Bookshop (“we”, “us”, “our”) operates the yangonbookshop.com website and the Yangon Bookshop mobile application (the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

ရန်ကုန်စာအုပ်ဆိုင်သည် yangonbookshop.com website နှင့် Yangon Bookshop mobile app တို့ကို operate လုပ်ပါသည်။ ဤ Privacy Policy တွင် မည်သည့်အချက်အလက်ကို ကောက်ယူသည်၊ မည်သို့ အသုံးပြုသည်၊ သင်၏ ရွေးချယ်ပိုင်ခွင့်များ စသည်တို့ ဖော်ပြထားပါသည်။

1. Information We Collect / စုဆောင်းသော အချက်အလက်များ

1.1 Account information

Name — to identify you when placing orders.
Email address — for account verification, password reset, and order communications.
Phone number (optional) — for delivery coordination.
Password — stored in salted, hashed form (we never see your plain-text password).

1.2 Shipping & billing addresses

Street address, township/city, postal code — used solely for delivery.

1.3 Order and loyalty data

Books you have viewed, added to cart, and purchased.
Loyalty points earned, redeemed, and remaining balance.
Customer↔staff chat messages and any image attachments you send.

1.4 Device data (for push notifications)

Firebase Cloud Messaging (FCM) token on Android devices.
Web Push subscription endpoint on browsers.
These identifiers let us deliver order updates and announcements; they do not identify the physical device.

1.5 Technical data

IP address (recorded transiently for rate-limiting and abuse prevention; not stored long-term).
App version and basic device type (Android / Web).

1.6 What we do NOT collect

We do not collect precise location, contacts, camera/microphone data, biometric data, browsing history outside our app, or financial card numbers.
Payment is collected by independent payment processors at delivery (cash-on-delivery) or in-store. We never see card numbers.

2. How We Use Your Information / အသုံးပြုပုံ

Provide the Service — process orders, track shipments, manage loyalty points.
Communicate — send order confirmations, shipping updates, password resets, and announcements you opted into.
Improve the Service — understand which books are popular (in aggregate); diagnose crashes.
Security — detect and prevent fraud, abuse, and unauthorized access.
Legal — comply with applicable Myanmar law.

3. Sharing of Information / မျှဝေခြင်း

We do not sell your personal information to third parties.

We share data only with the following processors, and only the minimum necessary:

Google Firebase (Cloud Messaging) — receives only your FCM token and the push payload, to deliver notifications. Firebase privacy.
Delivery riders / courier services — receive name, phone, and address to fulfill delivery.
Hosting providers (GoDaddy, Cloudflare) — store our website data under industry-standard security.
Law enforcement — only when legally required.

4. Data Retention / သိမ်းဆည်းမှု ကြာချိန်

Account data is kept while your account is active.
Order records are kept for 5 years for accounting and warranty purposes.
Chat messages are kept indefinitely unless you request deletion.
Loyalty point history is kept while your account is active.

5. Your Rights / သင်၏ အခွင့်အရေးများ

You have the right to:

Access the personal data we hold about you.
Correct inaccurate data via Profile → Addresses or by contacting us.
Delete your account and associated data (see “Account deletion” below).
Object to receiving marketing notifications — toggle them off in Profile → Notifications.
Export your data — email us for a downloadable copy.

5.1 Account deletion

To delete your account, email yangonbookshop@gmail.com from the address registered with your account, or send a message via in-app chat. We will process the request within 30 days. Order records will be anonymized (your name + address replaced with “Deleted”) but retained for the legal accounting period.

6. Security / လုံခြုံမှု

All data is transmitted over HTTPS (TLS 1.2+).
Passwords are stored hashed (never plain text).
Authentication tokens are stored in secure encrypted storage on your device.
The app does NOT bundle API credentials in the installation package.

7. Children / ကလေးငယ်များ

The Service is intended for users aged 18 and over. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us so we can delete it.

8. International Users / နိုင်ငံတကာ အသုံးပြုသူများ

Our servers are hosted in the United States (GoDaddy) and routed through Cloudflare. By using the Service, you consent to your data being processed in those jurisdictions.

9. Changes to This Policy / ပြောင်းလဲမှုများ

We may update this policy from time to time. We will post the new version at this URL and update the “Last updated” date above. Significant changes will be announced in-app.

10. Contact / ဆက်သွယ်ရန်

This privacy policy was last reviewed on 27 May 2026.

Cart