This page explains what information Jhuli collects when you shop with us, why we need it, and what control you have over it. We only ask for what an order genuinely requires.
Last updated: 29 July 2026
To open an account we need your name and mobile number. To deliver an order we also need the recipient's name, phone number and full address, plus your district so the delivery charge can be calculated. An email address is optional and stored only if you choose to give it. Anything you write or record on live chat is kept so our team can follow it up later.
We record your IP address to limit abuse of our login, OTP and order endpoints, and your order history stays linked to your account. Your cart, wishlist and recently viewed products are held in your own browser rather than on our servers until you place an order.
To confirm and deliver your orders, to verify your phone number by SMS one-time code, to answer your questions on chat, to prevent fraudulent or abusive orders, and — unless you have opted out — to tell you about new products and offers.
A secure, http-only cookie named jhuli_token keeps you signed in for 30 days; without it you would have to log in again on every page. We also keep your language, light/dark theme, cart and wishlist in your browser's local storage. We do not use advertising or cross-site tracking cookies.
The recipient's name, phone and address are shared with the courier delivering your parcel. We also rely on providers who process data on our behalf: BulkSMSBD (SMS and OTP), Google/Gmail (email), Cloudinary (product and chat images), Pusher (live chat), Turso (database), Upstash (abuse rate limiting) and Vercel (website hosting). We do not sell your personal information to anyone.
Every promotional email carries a one-click unsubscribe link and we act on it immediately. To stop promotional SMS, tell us on chat or email us and we will remove you from the list. Order confirmations and delivery updates are service messages and will still be sent.
Account and order records are kept while your account is active, and afterwards for as long as we need them for accounting and to resolve any dispute. You can ask us to close your account at any time.
You can view and correct your name, phone, email and address from your account page at any time. Write to us if you want a copy of your data, want something corrected that you cannot edit yourself, or want your account closed.
Passwords are stored only as bcrypt hashes — nobody at Jhuli can read them. The site is served over HTTPS, and staff access to customer records is limited by role and permission. No system is perfectly secure, so please use a password you do not reuse anywhere else.
Jhuli is intended for adults. We do not knowingly collect information from children under 13. If you believe a child has given us their details, contact us and we will delete them.
If this policy changes we will update the date at the top of this page. Significant changes will be announced on the site.