Privacy Policy

This Privacy Policy describes how GolemMart collects, uses, handles, and protects information relating to customers, website visitors, and service users. GolemMart operates as an online digital storefront specializing in gaming products, digital redemption codes, in-game currency, and related digital gaming items.

This policy applies to your interactions with the GolemMart website, digital checkout, customer support channels, and any related communications. By browsing GolemMart, registering an account, or placing an order, you acknowledge that your information will be handled in accordance with this Privacy Policy and our Terms & Conditions.

GolemMart collects only the information necessary to provide its services, process transactions, deliver digital goods, and offer customer assistance. We do not collect information that we do not actually need or use.

Depending on your interactions with GolemMart, collected information may include:

• Name: Customer full or display name provided during checkout or account registration.
• Email Address: Used for order delivery, invoice distribution, account authentication, and order notifications.
• Phone / Contact Details: When provided by the customer for order verification, payment inquiries, or support notifications.
• Billing & Order Information: Selected country/region, order details, purchased digital items, quantities, order timestamps, and order history.
• Payment-Related Information: Transaction identifiers (e.g., bKash or Nagad TrxID), sender account phone numbers, or payment reference numbers provided voluntarily by the customer when necessary for payment verification.
• Customer Support Communications: Messages, order inquiry details, screenshots, or correspondence sent through our Help Desk, Support Portal, or official WhatsApp channel.
• Technical & Device Information: IP address, browser type, operating system, and basic request metadata collected through standard web server logs where technically collected.
• Cookies & Session Data: Technical identifiers required for shopping cart retention, active user sessions, and security verification.
• Voluntary Customer Information: Product-specific fields or instructions voluntarily submitted to complete order fulfillment (e.g., gamer tag, platform identifiers, or required redemption data).

Information collected by GolemMart is utilized strictly for operational, support, security, and legitimate business purposes, including:

• Order Processing & Delivery: Fulfilling purchases, generating digital license codes, activating digital subscriptions, and delivering digital gaming products.
• Payment Verification: Matching payment proofs, transaction IDs (TrxID), and account references against banking or mobile financial service confirmations.
• Order Communications: Transmitting order confirmation emails, digital receipt documentation, delivery status updates, and critical service notifications.
• Customer Support: Investigating order delivery questions, warranty inquiries, code redemption troubleshooting, and general customer requests.
• Dispute Resolution: Resolving transaction discrepancies, payment reconciliation issues, or disputed claims.
• Fraud Prevention & Security: Detecting and mitigating fraudulent orders, unauthorized payment attempts, abusive automated traffic, and security threats.
• Platform Maintenance: Ensuring website uptime, monitoring server performance, debugging technical issues, and optimizing customer checkout flow.
• Business & Legal Compliance: Maintaining accounting, tax, and transaction records in compliance with applicable laws and regulatory standards in Bangladesh.

To complete transactions on GolemMart, customers provide payment-related verification details such as mobile financial service transaction IDs (e.g., bKash or Nagad TrxID) or payment account phone numbers.

Payment transaction proofs and reference numbers voluntarily submitted by customers are retained exclusively for transaction verification, dispute handling, and accounting records.

GolemMart does not sell, rent, lease, or intentionally share customer personal information with third parties for their independent commercial, advertising, or marketing purposes.

However, to operate an online e-commerce storefront, certain technical infrastructure providers and service vendors technically process information strictly on behalf of GolemMart, including:

• Web Hosting & Server Infrastructure: Secure servers and cloud hosting environments where website files and databases reside.
• E-Commerce Platform (WordPress / WooCommerce): Core database and e-commerce infrastructure powering order recording, cart state, and customer accounts.
• Payment Processing Providers: Payment gateways and mobile financial service verification endpoints used to confirm fund transfers.
• Email Delivery Infrastructure: Transactional mail systems responsible for delivering order confirmations, password reset emails, and digital invoices.
• Security & DDoS Protection: Technical security filters that evaluate IP addresses and request headers to block malicious traffic.

All technical processing by third-party service providers is limited strictly to what is required to maintain, deliver, and protect GolemMart services.

Customer personal information is not currently used for unsolicited promotional or mass marketing campaigns without an appropriate legal basis or clear customer consent.

Emails and messages sent to you by GolemMart are transactional in nature—such as order confirmations, digital redemption instructions, payment updates, or direct customer support responses. If promotional programs or newsletters are introduced in the future, customers will be provided with appropriate opt-in choices and straightforward opt-out mechanisms.

GolemMart uses standard cookies and browser storage technologies essential for core website functionality. Cookies are small text files stored on your device that enable the website to recognize your browser and remember specific state information.

Cookies used on GolemMart serve the following specific purposes:

• Essential E-Commerce Functionality: Remembering cart items as you navigate pages and preserving checkout state.
• Authentication & Account Sessions: Maintaining logged-in user sessions securely so you do not need to re-enter credentials on every page.
• User Preferences: Storing user interface choices, dismissal states for banners, and regional settings.
• Security & Abuse Prevention: Verifying Cross-Site Request Forgery (CSRF) tokens, preventing duplicate form submissions, and securing API endpoints.
• Server Performance & Caching: Facilitating high-performance page caching while bypassing cached pages for active customer carts.

GolemMart does not currently operate invasive third-party behavioral advertising trackers. Additional analytics or performance tracking technologies may be introduced in the future to improve website responsiveness, and this Privacy Policy will be updated accordingly. You may configure your web browser to reject cookies, though doing so may prevent shopping cart and checkout features from functioning correctly.

If you create or maintain a customer account on GolemMart, certain account information (username, registered email address, order history, and account settings) is stored to provide you with order tracking, download access, and account management capabilities.

Customers are responsible for selecting strong passwords and safeguarding their GolemMart account credentials. If you suspect unauthorized access to your account, please reset your password immediately and notify GolemMart support.

This section is critical to understanding how certain gaming purchases are delivered on GolemMart.

Because certain gaming publishers (such as Microsoft, Mojang, and Google) do not offer giftable digital codes for specific items, GolemMart sometimes requires customer-provided account access information to complete order fulfillment:

• Minecraft Pocket Edition (MCPE Android): May require the customer's Gmail / Google account details so the game license can be purchased directly through the customer's own Google account.
• Minecoins & Minecraft Realms Passes: May require the customer's Microsoft, Xbox, or Minecraft account information so in-game currencies or subscription passes can be added directly to the customer's gaming profile.

As a best security practice, customers are encouraged to set a temporary password before providing credentials for fulfillment, and change their password once fulfillment is completed.

GolemMart retains customer information only for as long as reasonably necessary to fulfill the operational, business, legal, and security purposes for which it was gathered, including:

• Active Business & Order Operations: Retaining order histories and delivery logs so customers can verify past purchases and retrieve active digital codes.
• Warranty & Customer Support: Maintaining support records to evaluate product-specific warranty claims or resolve reported activation issues.
• Dispute Resolution & Fraud Defense: Preserving transaction IDs and payment proofs to defend against fraudulent chargebacks, false claims, or payment discrepancies.
• Legal, Tax & Regulatory Obligations: Retaining financial transaction records to comply with applicable statutory record-keeping requirements in Bangladesh.

Because data retention requirements vary depending on transaction types, payment disputes, and legal guidelines, GolemMart does not promise an arbitrary fixed deletion period for general business records. However, temporary fulfillment credentials are deleted manually following order completion as detailed in Section 9.

Customers may contact GolemMart at any time regarding their personal information. Depending on applicable legal standards, your rights include:

• Access: Requesting confirmation of what personal information GolemMart holds regarding your orders or account.
• Correction / Rectification: Requesting correction of inaccurate, outdated, or incomplete personal information.
• Deletion / Erasure: Requesting the deletion of personal data where retention is no longer necessary for an active order, pending dispute, or mandatory legal record.
• Clarification: Requesting explanation regarding how your data is processed, stored, or protected.

Please note that certain transaction records, order logs, and payment proofs cannot be immediately deleted where retention is legally mandated or essential for defending against fraud and financial disputes. To exercise any privacy rights, contact us through our official WhatsApp Support Channel or our Support Portal.

GolemMart implements reasonable technical, administrative, and organizational safeguards designed to protect customer personal information against unauthorized access, loss, misuse, alteration, or disclosure.

These safeguards include:

• Encrypted Transport: Enforcing HTTPS / SSL encryption across all website pages, forms, and checkout interactions.
• Cryptographic Password Protection: Storing user passwords using one-way cryptographic hashing standards.
• Restricted Access: Limiting backend administrative and fulfillment access strictly to authorized personnel with operational necessity.
• Firewall & Brute-Force Defenses: Utilizing server-level rate-limiting and security rules to protect against brute-force login attempts and automated scraping.

While we strive to maintain robust security practices, no method of transmission over the Internet or electronic storage is completely infallible. Therefore, GolemMart cannot and does not claim that any system is "100% secure" or immune from all potential threats.

GolemMart takes security incidents seriously. If GolemMart becomes aware of a confirmed data security incident that materially impacts the confidentiality or integrity of customer personal information:

• We will take immediate containment, investigative, and remediation measures to secure affected systems and prevent further exposure.
• We will assess the scope, categories of data involved, and potential risk to affected customers.
• Where required by applicable law or deemed appropriate, we will provide timely notice to affected customers via their registered email address or a prominent announcement on the website, outlining the incident, actions taken, and recommended precautions.

GolemMart's services and digital gaming products are intended for individuals who are at least 13 years of age (or the age of legal majority in their respective jurisdiction).

We do not knowingly or intentionally collect personal information from children under 13. If you are under 13, please do not provide any personal information on GolemMart. If a parent or guardian becomes aware that a child under 13 has provided personal data without parental authorization, please contact us immediately through our support channels so we can take steps to remove the data promptly.

GolemMart currently primarily offers digital products, downloadable gaming licenses, in-game assets, and virtual game passes. However, GolemMart may expand its catalog in the future to introduce physical merchandise, gaming hardware, accessories, or new service offerings.

If physical products or new service models are introduced that require additional categories of personal information (such as physical postal shipping addresses, courier tracking integrations, or customs declarations), this Privacy Policy will be revised to detail those data practices transparently before such services become operational.

GolemMart may update this Privacy Policy from time to time to reflect modifications in our operational services, digital fulfillment practices, technological infrastructure, or applicable legal and regulatory requirements in Bangladesh.

When updates occur, the revised version will be published on this page with an updated "Last Updated" and "Effective Date" date. Continued access to GolemMart or placement of orders following the posting of revisions constitutes acknowledgment of the updated policy.

For any questions regarding this Privacy Policy, personal data access, correction requests, or data deletion inquiries, please reach out directly through our official WhatsApp support channel or submit an inquiry via our Support Portal.