Privacy policy

Last updated: 5 November 2026

This policy explains what information Druksale ("we") collects when you use this website, why, and the choices you have. If you have a question, contact us or write to support@druksale.bt.

1. Information we collect

• Your account: name, username, email, mobile number, delivery address, dzongkhag, profile picture (if you add one) and your password, which we store only in scrambled (hashed) form.
• Sign in with Google: if you use it, Google tells us your name, email address and a Google account number. We never see your Google password.
• Orders and payments: what you bought, delivery details, how you paid and payment references such as a mobile banking journal number. Card and bank details are entered on the payment gateway's own page; we never see or store them.
• Sellers: shop name, products, photos and order records.
• Messages: what you send through the Contact page.
• Technical data: your IP address and browser type, kept in server logs and used to protect the site (for example to slow down repeated sign-in attempts).

2. How we use it

To run your account, take and deliver orders, take payments, answer your messages, send emails you need (such as password reset links and order updates), keep the site secure, and meet our legal duties. We do not sell your personal information.

3. Who we share it with

• The seller of each item you order, and the courier, receive your name, phone and delivery address so they can deliver.
• Payment providers (such as the RMA Payment Gateway and banks) receive what they need to process a payment.
• Service providers that host the site or send our emails, only to do that work for us.
• Authorities, when the law of Bhutan requires it.

4. Cookies

A cookie is a small file your browser keeps for a website. We use one essential cookie (DRUKSESS) to keep you signed in and remember your shopping bag; the site cannot work without it. It is deleted when you close your browser or sign out.

5. Advertising (Google AdSense)

We show advertisements from Google AdSense to help pay for the site. About advertising cookies:

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
• You may opt out of personalised advertising by visiting Google's Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalised advertising at www.aboutads.info.
• How Google uses information from sites that use its services: policies.google.com/technologies/partner-sites.

Ads are not shown on account, checkout, payment, seller or admin pages.

6. How long we keep it

Account details are kept while your account is open. Order and payment records are kept for as long as tax and accounting rules require. Password reset links expire after one hour and are deleted after a day. Contact messages are kept for up to two years.

7. Your choices and rights

You can see and change your details in Your account, and remove your profile picture there. You can ask us for a copy of your information, or to close your account and delete what we do not have to keep, by contacting us.

8. Security

The site uses an encrypted connection (https), passwords are hashed, and only staff who need it can see order details. No system is perfectly secure, so please keep your password private.

9. Children

Druksale is not meant for children under 13, and we do not knowingly collect their information.

10. Changes

If we change this policy, we will update the date at the top of this page.