At Sashkey, protecting the privacy, personal data, and security of our visitors and customers is a core priority. This Privacy Policy outlines the types of information we collect, how we process, store, and safeguard it, and the rights you hold regarding your personal data when you interact with our e-commerce platform.
1. Information We Collect
We gather various categories of personal information to provide you with a seamless shopping experience, fulfill your orders, and continuously improve our services.
-
Identity & Contact Data: Includes your full name, shipping address, billing address, email address, mobile phone number, and account username when you create an account or place an order.
-
Transaction & Financial Data: Information regarding orders placed, items purchased, payment methods selected (e.g., Cash on Delivery, credit/debit card, online bank transfers), transaction history, and order notes. Note: We do not directly store or hold raw credit card or bank credentials on our servers; payments are processed securely through certified PCI-DSS compliant payment gateways.
-
Technical & Usage Data: Automatically collected when you visit our website, including your IP address, browser type and version, device identifier, time zone setting, operating system, pages viewed, time spent on pages, search queries, and navigation paths.
-
Marketing & Communications Data: Your preferences in receiving marketing emails, promotional SMS messages, WhatsApp updates, and customer support correspondence.
2. How We Collect Your Information
-
Direct Interactions: You provide information voluntarily by filling out forms on our website, registering an account, subscribing to newsletters, entering promotional campaigns, or communicating with customer service.
-
Automated Technologies & Cookies: As you interact with our website, we automatically collect technical data using cookies, server logs, web beacons, and pixels. Cookies help us maintain your active session, remember items placed in your shopping cart, analyze web traffic, and personalize content.
-
Third Parties: We may receive analytical, technical, or marketing data from trusted third parties, including web analytics providers (e.g., Google Analytics), advertising networks (e.g., Meta/Facebook Ads), and logistics providers for address verification.
3. Purpose & Legal Grounds for Processing Data
Sashkey processes your personal information for specific, lawful purposes:
-
Order Processing & Fulfillment: To process transactions, manage payments, package items, issue invoices, and dispatch orders via our shipping partners.
-
Customer Communication: To send order confirmations, tracking details, delivery updates, and respond to inquiries, feedback, or complaints.
-
Marketing & Promotions: To inform you about new collection launches, seasonal sales, exclusive offers, and tailored product recommendations (you can opt out of marketing messages at any time).
-
Website Optimization: To diagnose technical issues, analyze user behavior, measure the effectiveness of marketing campaigns, and enhance site architecture and design.
-
Fraud Prevention & Security: To protect our platform, customers, and business operations against unauthorized transactions, security threats, or fraudulent activity.
4. Data Sharing & Disclosure
Sashkey does not sell, rent, or trade your personal information to third parties for their independent marketing purposes. We share data only with trusted service providers necessary to operate our business:
-
Logistics & Courier Partners: Third-party courier companies require your name, shipping address, and phone number to execute doorstep delivery and process Cash on Delivery (COD) transactions.
-
Payment Processors: Financial institutions and online payment gateways process payment transactions securely.
-
IT & Hosting Providers: Companies providing website hosting, cloud storage, database management, and platform maintenance under strict confidentiality agreements.
-
Legal Compliance: We may disclose your information if required to do so by Pakistani law, regulatory bodies, court orders, or to protect the rights, property, and safety of Sashkey, our customers, or the public.
5. Data Security & Storage
We implement strict technical, physical, and administrative security measures to prevent your personal data from being accidentally lost, accessed, altered, or disclosed without authorization.
-
Data transmission across our website is encrypted using Secure Sockets Layer (SSL) technology.
-
Access to personal data is restricted to authorized personnel, contractors, and processors who require it for operational duties and are bound by confidentiality obligations.
-
While we implement industry-standard practices, no internet transmission or electronic storage method is 100% secure. You are responsible for keeping your account password confidential.
6. Data Retention & User Rights
-
Retention: We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, tax, or reporting obligations.
-
Your Rights: Depending on applicable privacy regulations, you have the right to access, review, update, or correct your personal data stored with us. You can also request the deletion of your account and personal details, subject to outstanding order completions and legal retention mandates.
-
Opting Out: You may opt out of receiving promotional marketing communications at any time by clicking the "unsubscribe" link at the bottom of our emails or following SMS opt-out instructions.
