What we keep, and why we keep it.

Last updated: 2 May 2026.

What we collect

When you place an order with the maison, we collect your name, delivery address, phone number, and email so we can send your parcel and tell you where it is. When you create an account, we additionally store an encrypted password (or a record of your Google sign-in) and a record of your past orders.

When you submit a bespoke pre-order request, we additionally store the description, references (images or films you upload), budget hint, and any other detail you choose to share. These are visible only to the maison; they are not shown to anyone else.

When you browse, we set a session cookie so your bag is remembered between pages, and a small analytics cookie so we can understand which pieces are most-loved. We do not run advertising trackers and we do not sell our visitor lists.

What we do with it

We use your details to fulfil your order, to answer your questions if you write to us, and — only if you opt in — to send you the seasonal Letter from the Maison. We never share your information with anyone except:

• the courier delivering your parcel (Pathao, Steadfast)
• the payment provider processing your payment, if any (none at present — we collect cash on delivery)
• the email and SMS providers that send you transactional messages (Brevo, SSL Wireless)
• the hosting and database services that operate the website (Vercel, Supabase)

Where your data lives

Your data is stored in Singapore (Supabase, AWS ap-southeast-1). It is not stored in Bangladesh, but it is governed by Bangladesh’s Personal Data Protection Ordinance, 2025, which we comply with.

How long we keep it

Order records are kept for seven years to comply with Bangladeshi tax law (NBR retention requirements). Marketing email subscriptions are kept until you unsubscribe. Browsing analytics are aggregated after thirty days; we cannot identify individual visitors past that point. Bespoke pre-order references and descriptions are kept for two years after the request is closed, then deleted.

Your rights

You may at any time email concierge@sanguine-co.com to ask for a copy of the information we hold on you, to correct it, or to delete it (other than the seven-year tax-record retention required by law). You may unsubscribe from the Letter from the Maison via the link at the foot of every newsletter. See our Data Deletion page for a full account of how to remove your data.

Cookies

• ssg-cart-v1 — your bag, kept in your browser only.
• ssg-wish-v1 — your wishlist, same.
• ssg-coupon-v1 — a coupon you have applied, kept in your browser.
• ssg-route — last-visited route, for back-button etiquette.
• ssg_sid — anonymous session identifier so we can count visits, not visitors. Expires in 30 days.
• ssg-cookie-consent-v1 — your preference about whether we use the analytics cookie above.
• sb-* — Supabase Auth session cookies if you are signed in.

Contact

Sanguine, Dhaka, Bangladesh. concierge@sanguine-co.com