Privacy & cookies

Phungma is a fashion marketplace. You can browse without an account. We offer cash on delivery and do not collect card or online payment details.

Your account and bag

When you register, we store your name, email address, a salted password hash, registration date and last sign-in date. We record account creation, successful and unsuccessful sign-ins, and sign-outs for account security and the owner’s activity dashboard. Unknown emails used in failed sign-in attempts are not saved to that log.

Essential cookies keep you signed in for up to 30 days and remember a guest shopping bag for up to 30 days. A shopping preference cookie remembers your selected Men or Women department for up to 30 days. Signed-in bags are saved to your account across devices. Account records and saved account bags remain until deleted by the operator. Account activity logs are automatically removed after 90 days. The owner can view customer records through a password-protected dashboard.

Checkout submissions

When you submit checkout after accepting the checkout privacy notice, we save your bag items, selected sizes, quantities, prices, name, mobile number, street address, city, district, delivery notes, account reference, submission time and delivery availability result. This includes submissions where delivery is unavailable and no order is placed. We use these records to assess delivery coverage and analyse shopping demand to improve our service.

Checkout submissions are available only to the store operator through the protected dashboard and exports. They are kept for up to 90 days and removed when your account is deleted. These details are not sent to Umami or included in optional browsing analytics. Submitting a checkout does not subscribe you to marketing.

Existing orders

For previously placed orders, we store the selected items, prices, name, mobile number, delivery address, delivery notes and order status. These details are used to manage your order and delivery, and are accessible to the store operator through a protected account. Order records remain until deleted by the operator or when your account is deleted.

Optional analytics

With your permission, we measure page visits, traffic source domains or campaign source labels, product views, searches, filter use, successful bag additions and explicit purchase-interest clicks. We store random browser and session identifiers as hashes. We do not attach browsing analytics to your name or email, record search text, or include account or owner-dashboard pages in browsing analytics.

We also use Umami Cloud to measure visits and shopping events after you allow analytics. Umami receives public page paths, referring website domains and limited product or collection details. We remove URL query strings, fragments and full referrer URLs and do not send your account identity, passwords or search text. Umami does not require analytics cookies.

Analytics cookies last up to 90 days for a browser and 30 minutes for a browsing session. Our own event history is removed after 90 days; Umami history follows the retention settings of our Umami service. Do Not Track and Global Privacy Control prevent optional browser tracking. Declining analytics does not affect registration or your bag.

Your preferences

You can withdraw consent here at any time. This stops future optional tracking and removes analytics identifiers from your browser; existing historical events are removed on the normal 90-day schedule.

Security and requests

The service uses short-lived hashed rate-limit keys to restrict abuse. Hosting access logs may contain request addresses and are managed by the operator. For account access or deletion requests, use the store contact details provided with your order confirmation. The owner can export records and delete an account using the private operations tools.