Privacy Policy

OUTLAND is operated by Devstation IT (“OUTLAND”, “we”, “us”), which determines the purposes and means of processing the personal data described in this Policy and is accordingly the data controller. This Policy governs every personal data processing activity carried out through our website, customer accounts, checkout, customer-support channels and marketing communications (together, the “Platform”).

By accessing the Platform, creating an account or placing an order, you acknowledge that you have read this Policy. If you do not agree with it, please do not use the Platform.

• Identity and contact data name, email address, mobile number and delivery and billing addresses.
• Account data a salted and hashed password (we never store or see your plain-text password), order history and cart contents.
• Transaction data items purchased, amounts, coupon use, the type of payment method chosen and the payment status reported to us. Card numbers and wallet PINs are handled exclusively by the licensed payment provider and are never stored on our systems.
• Technical data IP address, browser and device type, pages viewed and security logs.
• Communications data messages you send to customer support and reviews you publish.

• Performance of the sale contract creating your account, confirming and dispatching orders, arranging delivery, handling returns and refunds, and communicating about your order.
• Legitimate interests preventing fraud, abuse and unauthorised access, securing the Platform, enforcing our terms, and improving the Platform. We weigh these interests against your rights and keep the processing proportionate.
• Consent marketing communications and any optional cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Legal obligation tax, accounting, consumer-protection and regulatory requirements of Bangladesh, and lawful requests from competent authorities.

We use your contact details and purchase history solely to inform you about OUTLAND products, offers and new arrivals, and to show you relevant OUTLAND promotions. We do not use your personal data for any unrelated purpose.

Where the law requires your consent for marketing, we ask for it first. You can opt out at any time through the unsubscribe link in a message, by replying STOP to an SMS, or by contacting us. Opting out of marketing does not stop service messages about your orders.

To understand how the Platform is used and to measure and improve our own advertising, we use Google Tag Manager, Google Analytics, Google Ads, Meta (Facebook and Instagram) and TikTok. These services run in your browser, and Meta also receives limited event data from our servers, such as a product viewed, an item added to the cart, checkout started and a completed purchase.

• What they may receive the event and its value (items, order total, currency, order number), your IP address and browser details, advertising and analytics identifiers set in your browser, and, for a completed order, your email address and phone number in hashed (one-way encrypted) form so Meta can match the purchase to an advertising click.
• What they never receive your password, card or wallet details, or your delivery address in readable form.
• Why to count visits and sales, to measure which of our ads lead to orders, and to show OUTLAND’s own offers to people who have visited the Platform. The lawful basis is our legitimate interest in measuring and improving our business, and your consent where the law requires it.
• These providers act under their own terms and privacy policies and may process data outside Bangladesh. We do not sell your data to them and they may not use it for unrelated purposes under our instructions.

You can object at any time by blocking cookies or tracking in your browser settings, using a content blocker, or opting out through the controls these providers offer (for example Google Ads Settings, Meta Ad Preferences and TikTok’s ad settings). You can also write to us at the contact details below. Blocking these tools does not affect your ability to browse or order.

We do not sell, rent, lease, trade or otherwise commercialise your personal data to any third party, and we do not permit any third party to use it for that party’s own purposes.

We disclose personal data only to the extent necessary, and only to the following categories of recipient:

• Processors acting on our documented instructions and bound by confidentiality: delivery and courier partners, payment providers, SMS and email delivery services, hosting and database infrastructure, and bot-protection and security services. They receive only the data needed for their function.
• Public authorities, courts and regulators where disclosure is required by law, court order or a lawful request, or is necessary to establish, exercise or defend legal claims or to protect the rights, property or safety of OUTLAND, our customers or others.
• A successor entity, if OUTLAND’s business is merged, restructured or transferred. Any successor will be bound by this Policy as to data already collected.

You may request deletion of your account at any time by written request to the contact details below (and, where available, from your account page). We will verify your identity and complete the deletion within thirty (30) days of a verified request. While the request is pending, your account may be suspended.

On completion we erase, or irreversibly anonymise, your profile, saved addresses, cart and other account data, with the exceptions below.

• Order, invoice and payment records are retained for the period required by applicable tax, accounting and consumer-protection law.
• A minimal fraud-prevention and suppression record is retained, consisting of your email address, mobile number and related risk indicators (for example, a flag for payment abuse, repeated refused deliveries, refund abuse or a ban). It is kept for as long as reasonably necessary to prevent fraud and abuse, to stop a banned or abusive user re-registering, to defend legal claims, and to honour your marketing opt-out. This record is used for those purposes only and never for marketing.

Other data is retained only as long as needed for the purposes listed under “Purposes and lawful bases of processing”, then deleted or anonymised.

We apply technical and organisational measures appropriate to the risk, including encrypted transport (TLS), salted password hashing, role-based access controls, rate limiting, and HTTP-only session cookies. No system is entirely secure, and we cannot guarantee absolute security. If a breach affecting your rights occurs, we will notify you and the competent authority as the law requires.

Subject to applicable law, you may ask us to confirm whether we process your personal data and to give you access to it; to correct inaccurate data; to erase your data (subject to “Retention and account deletion”); to restrict or object to certain processing, including marketing; and to withdraw consent. We respond within thirty (30) days and may need to verify your identity first. Requests that are manifestly unfounded, repetitive or excessive may be declined or charged at a reasonable administrative cost where the law permits.

You may also complain to the competent authority in Bangladesh if you believe your data has been unlawfully processed.

We use strictly necessary technologies: an HTTP-only session cookie to keep you signed in, and browser local storage for your cart and display preferences. These are essential and cannot be switched off without breaking the Platform. We also use analytics and advertising cookies and similar identifiers, set by the services listed under “Analytics, advertising and conversion measurement”. These are not essential, and you can block or delete them in your browser settings without losing access to the Platform. You can clear cookies and local storage in your browser settings.

The Platform is intended for persons aged eighteen (18) or over. Children’s products must be purchased by a parent or legal guardian. We do not knowingly collect personal data from minors; if we learn that we have, we will delete it.

Our infrastructure providers may process data on servers outside Bangladesh. Where that happens we take reasonable contractual and technical measures to protect your data to the standard this Policy describes.

We may amend this Policy from time to time. The “Last updated” date shows the current version, and the amended Policy applies from the date it is published. Continued use of the Platform after publication constitutes acceptance. For material changes affecting existing customers we will take reasonable steps to notify you.

This Policy is governed by the laws of the People’s Republic of Bangladesh. Nothing in it limits any right you have under law that cannot be excluded by agreement.

Privacy requests and questions: contact@devstationit.com, +880 1577-302590, Level 6, Bondon Tower, Road No. 4, Shatmasjid Housing, Muhammadpur, Dhaka, Bangladesh.