1. Information we handle
Depending on how you use the store, we may handle the following information:
- Optional checkout contact, such as a phone number or email address
- If you use Google Sign-In: a unique Google Account identifier, your primary email address, and any name or profile image included in the identity permissions you approve
- Order, product, amount, currency, payment reference, payment status, and delivery status
- Support messages and information you choose to send through Telegram
- Technical, security, and anti-abuse signals needed to operate and protect checkout
- Limited browsing, performance, error, and anonymous session analytics
2. Google Sign-In
When you choose Sign in with Google, Google Identity Services provides the identity information listed above. Google does not provide us with your Google password, Google purchase history, or payment history.
We use Google identity information only to authenticate you, protect and recover your account, associate saved carts, orders, purchase history, and delivery status with your DiGi Cambodia account, provide support, and prevent abuse.
The storefront does not request access to Gmail, Google Drive, Google Contacts, Search Console, Google Ads, or other Google content. We do not sell Google user data.
3. Why we use it
We use this information to create and fulfil orders, match payments, provide delivery and support, prevent abuse and fraud, troubleshoot errors, maintain records, and understand storefront performance.
We do not use order credentials or payment references as ordinary analytics properties. Sensitive property names are filtered, and checkout inputs are masked in session replay.
4. Service providers and disclosure
Information may be processed by providers used for hosting, database operations, analytics, anti-abuse checks, payment verification, authentication, and customer support. The current service categories include Google Identity Services when you choose Google Sign-In, payment or banking infrastructure used for KHQR verification, and Telegram when you contact support.
We disclose information only as needed for those services, to complete a transaction, protect the store and customers, respond to a lawful request, or meet a legal obligation. We do not claim that all information stays only inside DiGi Cambodia systems.
5. Information kept on your device
The storefront may use browser storage or secure cookies for language and currency preferences, an anonymous analytics session identifier, signed-in account sessions, recent purchase references, and private order-access tokens. Anyone with access to your signed-in device or copied order link may be able to view order status, so keep the device and link secure.
6. Retention
Google identity information associated with a storefront account may be kept while the account remains active or as needed for account security and record integrity. You may request that the account be disconnected or deleted, subject to the record-retention limits below.
Retention varies by record and purpose. Delivered credentials stop being returned by the storefront order endpoint after 30 days. Other order, payment, support, security, analytics, and accounting records may be kept as needed for fulfilment, warranty or dispute review, fraud prevention, business records, and legal obligations.
A deletion request may not remove information that must be retained for security, payment reconciliation, accounting, a dispute, or another legal requirement.
7. Your requests
Contact Telegram support to request access to, correction of, or deletion of personal information, or to request that a storefront account be disconnected from Google or deleted. Include the relevant order reference, but do not send passwords or banking secrets. We may verify that you control the account or order before responding.
You may also revoke DiGi Cambodia's Google permission from your Google Account. Revoking permission stops future Google access but does not by itself delete storefront order or payment records; contact support for a deletion request.