Roz ka kaam. Thora smart.Contact Us

Privacy Policy

Last updated:

How information is handled when you browse, use the shopping bag or contact the store, and when ordering services are available.

Share only what is needed.

Never send passwords, PINs, CVVs, OTPs or full card details to support.

1. Information involved

At present, online checkout does not create an order or process payment. Contact enquiries are active and shopping-bag choices are saved in your browser. Details submitted to the current checkout endpoint are validated, but no order or payment record is created. Payment and fulfilment processing described below applies only when those services are enabled.

Information you provide can include your name, contact number, delivery address, order details and support correspondence. Our contact form sends your name, email, optional phone and order reference, enquiry topic and message to our support service, hosted on a server managed by TN Business Solutions, for storage and review by the store team. These details are used to respond to your enquiry, not to sign you up for marketing. Payment-related records can include amount, status and provider references. Hosting and security services may process technical information such as IP address, browser details and request logs. Browser storage can retain shopping-bag choices where that feature is enabled.

2. Why information is used

Information is used as needed to process requested orders, arrange delivery, reconcile payments, handle returns and enquiries, address suspected misuse and meet applicable record-keeping obligations. We do not request sensitive banking credentials through support.

3. Who may receive information

Necessary information may be processed by hosting, payment, delivery and communication providers involved in the requested service, and by professional advisers or competent authorities where lawfully necessary. Provider services can operate across borders. Their own notices also apply to information they collect directly.

4. Storage and retention

Records should be retained only for the purpose and period needed to fulfil orders, resolve disputes and meet applicable legal obligations. Retention varies by record and provider. Reasonable safeguards are appropriate to the information involved, but no internet transmission or storage can be guaranteed completely secure.

5. Your choices and requests

Use Contact Us to request access to, correction of or deletion of information you provided, or to raise a privacy concern. Requests are assessed under applicable law and may require proportionate verification. Some records may need to be retained for legal, payment or dispute reasons. You can manage browser storage through browser settings; see the Cookie Policy.

6. Children and updates

The store is intended for people able to make an authorised purchase. If you believe a child supplied information without appropriate authorisation, contact us. Changes to information handling should be reflected in this notice. Privacy concerns can also be raised through our Complaints Procedure.

7. Permitted processing and data minimisation

Information is used only for a specified purpose connected with the service, your request or an applicable legal obligation. Depending on the circumstances and applicable law, this may involve responding to a request before a contract, performing an accepted order, meeting a legal duty or a permitted interest such as abuse prevention. Optional uses that require consent must have a separate choice; agreement to store terms is not blanket consent to unrelated uses.

Only information reasonably necessary for the purpose should be requested. We do not sell enquiry information or automatically subscribe customers to marketing. Do not submit confidential details about another person without appropriate authority.

8. Compliance verification and payment information

Where relevant and lawfully required, the store or an authorised payment provider may seek proportionate information to verify identity, payment authorisation or transaction purpose. Such information can support fraud prevention, anti-money laundering and counter-terrorist financing (AML/CFT), applicable sanctions checks or dispute resolution. This does not mean that every visitor is identity-checked.

A provider may apply its own know-your-customer (KYC) requirements and privacy notice. Any necessary identity document must go through a confirmed, appropriate channel. Never send identity documents, card security codes, PINs, OTPs, banking passwords or full card details through the general contact form.

9. Providers, transfers and lawful disclosures

TN Business Solutions Pvt LTD manages the store’s digital presence and the shared enquiry service. Store enquiries are passed through the hosting infrastructure to that service so the relevant team can respond. Hosting, security and other service providers may process data in countries where their systems or staff operate.

Provider access should be limited to the agreed purpose and relevant information. Any safeguards, contractual arrangements or transfer conditions required by applicable law must be considered before a provider is used. We do not promise that all processing remains in Pakistan.

Disclosures to a payment provider, professional adviser, regulator or law-enforcement body require a lawful reason and must be limited to relevant and necessary information. Where appropriate, the authority and scope of a request should be checked. This is not a blanket authorisation to disclose customer records.

10. Access, retention and incident response

Access to enquiry records is restricted to people who need it for their responsibilities. Retention depends on the service, applicable record-keeping duties and unresolved disputes. Records should be deleted or anonymised when no longer needed, unless a legal or other lawful preservation requirement applies. Preservation should cover only the relevant information.

Report suspected exposure or misuse through Contact Us, without repeating compromised credentials. If a personal-data incident is identified, the response is to assess the incident, take appropriate containment steps and preserve relevant evidence. Affected people or competent authorities will be notified where applicable law requires it.

11. Privacy rights and consent choices

Depending on applicable law, you may request access, correction, deletion, restriction, objection or a copy of your information. Where a use relies on consent, you may withdraw consent for future processing without affecting prior lawful use. Rights depend on the conditions and exceptions in the law that applies.

Choose Privacy request on Contact Us and provide enough context to identify the record. Proportionate verification may be needed. We must respond within any applicable statutory period and explain any lawful restriction. You may raise a concern with a competent authority where that right applies; using our internal complaints route does not remove it.