Privacy policy

What we collect

When you place an order, you give us:

• your name;
• your mobile number;
• your delivery address and city;
• your order history — what you bought, what it cost, how you paid and where it went.

That is the whole list. There is no account and no password, so there is nothing to breach on that front. If you pay by bank transfer, JazzCash or EasyPaisa and send us a screenshot of the receipt, that screenshot is attached to your order too — so please crop out anything on it we do not need.

Your cart lives in your own browser's local storage so it survives a refresh. It never leaves your device until you place the order. We set no advertising cookies and run no cross-site tracking scripts, which is why this site has no cookie banner to click away.

Why we need it

To deliver the order and to confirm it with you on WhatsApp before it is dispatched. The mobile number does both jobs: it is how the rider reaches you and how we check the order is real before we pack it. If you paid by transfer, we also use it to tell you that the payment was verified.

We do not add you to a marketing list because you bought fruit. If we ever start sending offers, it will be because you asked for them.

Who else sees it

• The courier. Your name, mobile number and address go on the parcel and into the courier's system, because a parcel cannot be delivered without them. For Cash on Delivery they also handle the money.
• A payment provider, where one is used. Card payments are not live yet. If and when they are, the provider handles the card details and we never see them — we only learn whether the payment succeeded.
• WhatsApp. Confirming your order on WhatsApp means your number and the message pass through it, under its own terms.

Nobody else. We do not sell, rent or trade customer details, and we do not hand them to anyone who is not doing one of the jobs above.

How long we keep it

As long as we need it, and no longer: to get the order to you, to honour the returns window, and to keep the business's own accounts straight. We do not keep addresses on standby in case you come back.

We do not keep a customer record indefinitely: our limit is 18 months from your last order. There is a specific reason for that limit rather than a longer one: mobile numbers in Pakistan get recycled, and an old record attached to a reassigned number would hand a stranger somebody else's name and home address.

Seeing or deleting your details

Message us on WhatsApp, or email us, and ask. You can ask us to show you what we hold, correct it, or delete it. We will do it — the only thing we hold back is whatever a tax or accounting record obliges us to keep, and we will tell you if that applies.

Please ask from the mobile number the order was placed with, or quote the order number. We will not read a stranger's address out to whoever asks nicely.

How it is protected

Order records are reachable only from an admin dashboard that the team signs into. Your own order link is not guessable and is only ever sent to you — looking an order up needs the order number plus a detail only you have, precisely so that nobody can walk through order numbers and read other people's addresses.

The legal position in Pakistan

Pakistan's data-protection legislation is still being settled — the Personal Data Protection Bill has not been enacted, so there is no single statute here that tells a shop like ours what to do with your address. We are not treating that as permission. We hold the minimum we need, keep it for the shortest time we can, limit who on the team can open it, and delete it when you ask. If a data-protection law does come into force, we would rather already be complying with it than be scrambling.