Privacy Policy

1. Who we are

The Platform is operated by [Owner / proprietor full name], trading as Almari — a sole-proprietor business based in Lahore, Pakistan (contact address: [Business / contact address], Lahore, Pakistan). For any privacy-related query you can reach us at privacy@almari.shop or on WhatsApp at +92 314 6145042.

2. Legal framework

We process personal data in accordance with the laws applicable in Pakistan, including:

• the Prevention of Electronic Crimes Act, 2016 (PECA)— in particular section 38, which prohibits the unauthorised transmission of another person’s personal or sensitive data;
• the Electronic Transactions Ordinance, 2002, which gives legal recognition to electronic records, communications and consent;
• applicable provincial Consumer Protection laws (for customers in Punjab, the Punjab Consumer Protection Act, 2005); and
• the Personal Data Protection legislation once enacted — we monitor the Personal Data Protection Bill and will update our practices to comply when it becomes law.

3. Information we collect

Information you give us

• Identity & contact details — name, phone number, email address, delivery address, city and province.
• Order information — items ordered, order history, and communications with our support team.
• Account information — if you create an account, your login credentials (stored in encrypted form).

Information we collect automatically

• Device and usage data — IP address, browser type, pages viewed and referring links.
• Cookies and similar technologies, including analytics and marketing/advertising pixels (for example, tools operated by Meta and Google) used to measure and improve the Platform.

We do not knowingly collect payment card numbers on our own servers; where prepaid payment methods are offered, card and wallet details are handled by the relevant licensed payment service provider.

4. How we use your information

• To process, confirm, deliver and support your orders, including Cash on Delivery verification.
• To send you transactional messages by email and, where your number is on WhatsApp, order updates via WhatsApp.
• To operate accounts, prevent fraud and secure the Platform.
• To improve our products, services and website through analytics.
• To send marketing communications where you have not opted out (you can opt out at any time).
• To comply with legal obligations and lawful requests from authorities.

5. Basis for processing & your consent

We rely on your consent (given when you place an order, create an account or contact us), the performance of our contract with you, our legitimate business interests, and compliance with the law. By using the Platform you consent to the processing described in this Policy. You may withdraw consent for non-essential processing (such as marketing) at any time.

6. Cookies & tracking technologies

We use essential cookies to run the Platform (for example, to keep your cart and session) and optional analytics and advertising technologies to understand usage and measure campaigns. You can control cookies through your browser settings; disabling essential cookies may affect how the Platform works.

7. How we share information

We do not sell your personal data. We share it only as needed with:

• Courier and logistics partners, to deliver your orders and collect Cash on Delivery.
• Payment service providers, when you choose a prepaid payment method.
• Messaging and communication providers, including Meta’s WhatsApp Business platform, to send order confirmations and updates.
• Technology and analytics providers that help us operate and improve the Platform.
• Government, regulatory or law-enforcement authorities, where required by law or valid legal process.

We require our service providers to protect your information and to use it only for the purposes we specify.

8. International transfers

Some of our providers (for example, WhatsApp/Meta and analytics services) may process data on servers located outside Pakistan. Where this happens, we take reasonable steps so that your information continues to be protected consistently with this Policy.

9. Data retention

We keep your information only for as long as necessary to fulfil the purposes described in this Policy — including order fulfilment, accounting, tax and legal record-keeping — after which it is deleted or anonymised. Order and tax records may be retained for the period required by applicable law.

10. Data security

We apply reasonable technical and organisational measures to protect your information, including encryption in transit, access controls and two-factor authentication for staff accounts. Unauthorised access to, or transfer of, personal data is an offence under section 38 of PECA. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your choices & rights

Subject to applicable law, and as a matter of good practice ahead of Pakistan’s data protection legislation, you may:

• request access to the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to delete data we no longer need to retain;
• opt out of marketing communications; and
• withdraw consent for non-essential processing.

To exercise any of these, email privacy@almari.shop. We will respond within a reasonable time and may need to verify your identity first.

12. Children’s privacy

The Platform is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us information, please contact us so we can remove it.

13. Changes to this Policy

We may update this Policy from time to time. The “Last updated” date above shows when it was last revised, and continued use of the Platform after changes take effect means you accept the updated Policy.

14. Contact us

Questions or complaints about privacy? Contact Almari (operated by [Owner / proprietor full name]) at privacy@almari.shop, on WhatsApp at +92 314 6145042, or by post at [Business / contact address], Lahore, Pakistan.