Privacy policy

Last updated: August 22, 2026

Hey Luxana is a brand operated by DevsNest LLC, a limited liability company registered in the State of Wyoming, United States. In this Privacy Policy, "we", "us" and "our" mean DevsNest LLC. We are the data controller of your personal information.

We operate this store and website, including all related content, features, products and services (the "Services"). Our store is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

By using the Services, you acknowledge that you have read this Privacy Policy and understand how we collect, use and disclose your information.

Personal information we collect

"Personal information" means information that identifies or can reasonably be linked to you. It does not include information collected anonymously or de-identified so that it cannot be linked to you. Depending on how you interact with the Services and where you live, we may collect:

Contact details — your name, delivery address, phone number and email address.
Order and payment information — the items you order, your past orders, and how you paid. For cash-on-delivery orders in Bangladesh, we do not collect card or bank details. For prepaid orders, payment is processed by our payment provider; we do not store full card numbers.
Refund details — where we owe you a refund on a cash-on-delivery order, we collect the bKash number you ask us to send it to.
Account information — if you create an account: your username, password and preferences.
Communications with us — what you tell us by email, phone or through our contact form, including order confirmations and support conversations.
Device and usage information — your device, browser, IP address and how you navigate the Services, collected through cookies and similar technologies.

Where this information comes from

Directly from you — when you place an order, speak to us on the phone, email us, or create an account.
Automatically — from your device when you use the Services.
From our service providers — including Shopify, our couriers, and our payment and analytics providers.

How we use your personal information

To fulfil your order. We use your name, address and phone number to confirm your order by phone, arrange delivery, and handle exchanges and refunds. Phone confirmation before dispatch is a standard part of how we deliver.

To provide and improve the Services. To operate the store, remember your preferences, respond to you, and improve how the site works.

Marketing and advertising. To send you marketing by email where you have asked to receive it, and to show you advertisements for our products on other platforms. You can unsubscribe at any time using the link in any marketing email.

Security and fraud prevention. To authenticate accounts, protect against fraudulent orders, and keep the Services secure. If you have an account, you are responsible for keeping your password safe.

Legal reasons. To comply with applicable law and respond to valid legal process.

How we share your personal information

We share personal information in the following circumstances:

With Shopify and other service providers who perform services on our behalf — hosting, payment processing, analytics, customer support and cloud storage.
With our delivery partners in Bangladesh, who need your name, address and phone number to deliver your order and collect payment on delivery.
With business and marketing partners to provide marketing services and advertising. We use Shopify to support personalised advertising based on your activity across merchants and websites. Depending on where you live, you may have the right to tell us not to share your information for targeted advertising — you can exercise that here.
Where you ask us to, or where you consent.
In connection with a business transaction, such as a merger, or to comply with legal obligations, enforce our terms, or protect our rights and the rights of others.

We do not sell your personal information for money.

Our relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your use of the Services in order to provide and improve them. Information you submit will be transmitted to and shared with Shopify and third parties that may be located in countries other than where you live. Shopify may also use personal information collected about your interactions with our store, other merchants and Shopify to provide enhanced features. In those circumstances Shopify is responsible for processing your personal information, including responding to requests about it. To learn more, see the Shopify Consumer Privacy Policy.

Third-party websites and links

The Services may link to websites operated by third parties. We do not control those sites and are not responsible for their privacy practices, security, or the accuracy of information on them. If you follow a link away from our site, review that site's own privacy policy and terms.

Children

The Services are not intended for children, and we do not knowingly collect personal information from anyone under the age of majority in their jurisdiction. If you are a parent or guardian and believe your child has given us personal information, contact us using the details below and we will delete it.

Security and how long we keep your information

No security measure is perfect, and we cannot guarantee that information sent to us over the internet is completely secure. Please do not send us sensitive or confidential information through insecure channels.

How long we keep your personal information depends on why we hold it — for example, to maintain your account, to fulfil and support your order, to comply with legal obligations, or to resolve disputes.

Your rights and choices

Depending on where you live, you may have some or all of the following rights. These rights are not absolute and may only apply in certain circumstances.

Access — to request a copy of the personal information we hold about you.
Deletion — to ask us to delete personal information we hold about you.
Correction — to ask us to correct inaccurate information.
Portability — to receive a copy of your information, or ask us to transfer it to a third party.
Opting out of targeted advertising — where applicable law gives you that right. If you visit our website with a Global Privacy Control signal enabled, we will treat that as an opt-out request for that device and browser where required.
Marketing preferences — you can unsubscribe from marketing emails at any time. We may still send you non-marketing messages about your orders.

If you live in the UK or European Economic Area, you may also have the right to object to or restrict certain processing, and to withdraw consent where we rely on it.

To exercise any of these rights, contact us using the details below. We may need to verify your identity first. We will not treat you differently for exercising your rights.

Complaints

If you have a complaint about how we handle your personal information, please contact us using the details below. Depending on where you live, you may also have the right to complain to your local data protection authority.

International transfers

We may transfer, store and process your personal information outside the country you live in — including in the United States, where our company is registered, and in Bangladesh, where we operate. Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms such as the European Commission's Standard Contractual Clauses, unless the destination country has been determined to provide an adequate level of protection.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal or regulatory reasons. We will post the revised policy here and update the "Last updated" date.