Privacy policy.

When you shop with us, we collect information that is necessary to fulfil your order and to run the account you create:

• Contact details — first and last name, email address, phone number (required for courier delivery).
• Shipping details — one or more delivery addresses in Pakistan.
• Order history — the products you have purchased, your order status, tracking events and any notes you add at checkout.
• Account information — a hashed password if you sign up with email and password (we never see the plain password), or an email-based magic link if you prefer that route.
• Device information — a minimal set of technical details (browser, IP address, referrer) used to serve pages, prevent abuse and diagnose bugs. We do not build behavioural profiles from this.

• Fulfilling orders — passing your name, phone and address to our courier partner (PostEx) so a parcel can reach you.
• Order communication — order confirmation, dispatch, delivery and tracking updates by email and in-app notifications.
• Account management — letting you sign in, update your profile, view past orders and manage saved addresses.
• Customer support — replying to your emails and solving issues with an order.
• Product and service improvements — anonymised aggregates to understand which pages load slowly, which products are running out, where checkout drops off.

We only share your data with third parties when it is necessary to run the shop. We do not sell your data.

• Supabase — our hosting and database provider, who stores your account and order data securely on our behalf.
• PostEx — our courier partner. We pass your name, phone number and delivery address so they can deliver your parcel and push tracking updates.
• Meta (Facebook / Instagram) and Google — if you arrived from one of their ads, anonymised conversion signals (purchase amount, currency) may be attributed back so we know our marketing is working. You can opt out of this at the platform level in your ad preferences on each service.
• Law enforcement — only when we are legally required to by a valid Pakistani court order or equivalent.

We keep order and account data for as long as your account is active, and for a reasonable period after that to satisfy tax, accounting and dispute-resolution obligations (typically up to seven years).

Device-level technical logs are kept for a much shorter window — usually 30 to 90 days — and are then discarded or aggregated.

You have the right to access the personal data we hold on you, to correct anything inaccurate, and to ask us to delete your account and associated data.

To exercise any of these rights, email us from the address on your account and we will action the request within a reasonable time (usually under 14 days). Deleting your account removes your profile, addresses and saved preferences; we retain an anonymised record of past orders where required for tax and dispute purposes.

Your data is stored with Supabase on encrypted storage, accessed over TLS, and protected by row-level security so only you (and our staff, where required) can read your own rows. Passwords are never stored in plain text.

No internet service can guarantee absolute security, but we take reasonable and proportionate measures to protect your information.

We use a small number of first-party cookies for essential functions: keeping you signed in, remembering your cart, and preventing cross-site request forgery on checkout. These cookies are strictly necessary and cannot be switched off without breaking the site.

We do not set third-party advertising cookies on this domain. If we add optional analytics in the future, we will ask your consent first.

The shop is not intended for people under the age of 13, and we do not knowingly collect data from children. If you believe a child has shared personal data with us, contact us and we will delete it.

If we change how we handle your data in a material way, we will update this page and the date at the top. For significant changes, we will also email registered users.

Questions, concerns, or a request to exercise your rights? Email us at hello@fattysstore.pk and we will respond from the same address.