Privacy Policy

Last updated: 22 August 2026

This Privacy Policy explains how parcel2bd ("we", "us", "our") collects, uses, shares, and protects personal data when you use our platform (the "Platform"). parcel2bd connects people who wish to send parcels ("Senders") with travellers who carry them ("Travellers") between Bangladesh and Sweden.

We act as the data controller for the personal data described below. By using the Platform you acknowledge this Policy. Where required, we rely on your consent, the performance of our contract with you, our legitimate interests, and our legal obligations as lawful bases for processing.

1. Data We Collect

  • Account data — your email address (used to sign in), first and last name, an optional phone number and country code, and your country of residence.
  • Sign-in data — if you sign in with Google, Google provides us with your Google account identifier, your verified email address, and your name. We never receive your Google password.
  • Profile data — address, postcode, and city.
  • Identity verification data — document type, document number, and uploaded document images, where you choose to verify your identity.
  • Listing and transaction data — trips, parcel requests, categories, weights, routes, and messages exchanged with other users.
  • Legal acceptance records — the legal documents you accept, the version accepted, the date and time, and the IP address and device/browser information recorded at the moment of acceptance. We keep these as proof of agreement.
  • Technical data — IP address, device and browser information, and basic usage and diagnostic logs.

2. How We Use Your Data

  • to create and manage your account and complete your profile;
  • to operate the marketplace and let Senders and Travellers find and contact one another;
  • to verify identity and improve trust and safety;
  • to record and evidence your acceptance of our Terms and this Policy;
  • to send service-related and security notifications;
  • to maintain, secure, and improve the Platform; and
  • to comply with legal obligations and to establish, exercise, or defend legal claims.

3. Legal Basis for Acceptance Records

When you accept our Terms & Conditions and this Privacy Policy, we store an acceptance record (who accepted, which version, and when, together with the IP address and device information). We process this data on the basis of our legitimate interest and legal obligation to demonstrate that agreement was given, and to satisfy accountability requirements under applicable data-protection law (including the EU/Swedish GDPR).

4. Sharing Your Data

  • With other users — limited profile information (such as your name and verification status) and the content you post is shown to the users you transact with. Do not share more personal data with other users than necessary.
  • With service providers — hosting, storage, e-mail/OTP delivery, and analytics providers acting on our behalf under appropriate safeguards.
  • With authorities — where required by law, customs, or a valid legal request.

We do not sell your personal data.

5. International Transfers

Because the Platform operates between Bangladesh and Sweden, your data may be processed in either country and by service providers located elsewhere. Where data is transferred out of the EU/EEA, we use appropriate safeguards (such as standard contractual clauses) as required by applicable law.

6. Data Retention

We keep personal data for as long as your account is active and as needed to provide the Platform. Legal acceptance records, identity records, and transaction/dispute data may be retained for longer where necessary to comply with legal obligations or to defend legal claims.

7. Your Rights

Subject to applicable law (including the GDPR for users in Sweden/the EU), you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent. To exercise these rights, contact us using the details below. You may also lodge a complaint with your local data-protection authority (in Sweden, Integritetsskyddsmyndigheten (IMY)).

8. Security

We apply reasonable technical and organisational measures to protect personal data. However, no system is completely secure, and we cannot guarantee absolute security.

9. Cookies and Local Storage

We do not use advertising or analytics tracking cookies. To keep you signed in, we store authentication tokens in your browser's local storage. These are strictly necessary for the Platform to work and are removed when you sign out. If we introduce non-essential cookies or similar technologies in the future, we will ask for your consent first.

10. Changes to This Policy

We may update this Policy from time to time. The updated version takes effect when posted on the Platform (or on the stated effective date). Material changes may require you to accept the new version before continuing to use the Platform.

11. Contact

For privacy questions or to exercise your rights, contact us at privacy@parcel2bd.com.