Privacy Policy

When you place or discuss an order, we may receive your name, phone number, delivery address, order details, customisation instructions, reference images and messages.

If you choose to sign in with Google, Firebase Authentication verifies your identity. We store your Google account identifier, email and display name to maintain your customer account and apply any personal offers. Staff may record private customer notes. Orders placed while signed in are linked to your account. Signing in is optional, and guest checkout remains available.

The website may also collect basic technical information such as browser type, device type, pages visited and approximate traffic source. To estimate live traffic, we use a random browser identifier that expires after one year and approximate country or city information supplied by our hosting proxy. Live activity is stored locally, excluded from the Firebase cloud copy, and removed after five minutes of inactivity when activity is next checked. Traffic history (page views, visits, traffic sources, device categories and approximate locations) is retained for up to one year to show trends. This feature does not store IP addresses or exact coordinates and respects Do Not Track and Global Privacy Control. Your cart may be saved in your browser so it remains available between visits.

• Confirm, prepare, deliver and support your order.
• Provide order tracking and respond to questions or complaints.
• Create an item according to the details you provide.
• Prevent abuse, diagnose problems and improve the website.
• Meet record-keeping and business obligations.

We share only the information needed by service providers that help operate the store, such as hosting, database, analytics and delivery providers. A courier needs your name, phone number, address and parcel details to complete delivery.

We do not sell customer contact details. We may disclose information when required to protect the store, customers or comply with a valid legal request.

Advertising measurement is enabled by default. Unless you opt out, Meta receives product views, cart activity, checkout activity and placed-order values in PKR, along with browser identifiers, browser type and IP address. We use the Meta Pixel and Conversions API to measure and improve advertising.

For new website purchases, when your advertising preferences allow measurement, we also send Meta a SHA-256 hash of your checkout phone number for purchase matching. We normalize a valid Pakistan number and hash it on our server. Meta can use this hash to match the purchase to its accounts. Your raw phone number, name, delivery address and personalisation text are not sent in advertising events. Phone matching is used for Purchase events only.

You can disable measurement using Advertising preferences on the website. We honor previously saved opt-outs, Do Not Track and Global Privacy Control. Cash on Delivery purchase events indicate an order placed, not payment collected.

Order records are kept for as long as reasonably needed for fulfilment, support, accounting, dispute handling and operational records. Unneeded information may be deleted or anonymised.

We use access controls and other reasonable safeguards, but no online system can guarantee absolute security. Please do not send passwords, card PINs or other unnecessary sensitive information.

You may contact us to ask what customer information we hold, request a correction, or ask whether information can be deleted. Some order records may need to be retained for legitimate business or legal reasons. You may also disable optional analytics through your browser controls.