Privacy Policy

We collect the minimum we need to send you fabric and answer your questions. This page says exactly what that is.

What we collect

Order details — name, email, phone, delivery address and the fabric you ordered.
Account details — if you create an account, your name, email and password (stored as a one-way hash, never as readable text).
Saved addresses — so checkout is quick next time.
Wishlist — stored on your account, or in your browser if you are not signed in.
Messages — anything you send us through the contact form.
Newsletter email — only if you opt in.

Why we collect it

To take payment, deliver the parcel, handle returns, and reply when you contact us. If you opt into the newsletter we also send new arrivals and restocks. We do not sell or rent your data, ever.

Guest checkout

You can order without an account. To make sure you can still track and reorder, we create an account for you automatically using the email address at checkout and show you a temporary password once. Nothing else is changed and you are free to leave.

Who else sees your data

Our courier partners (TCS, Leopards) receive the name, phone and address needed to deliver.
Our payment is cash on delivery, so no card or bank details ever reach us. Bank transfers are made by you to our account directly.
Our hosting provider, which stores the database.

Nobody else.

Cookies

Session cookie — keeps you signed in and holds your cart.
Wishlist cookie — remembers saved fabrics when you are not signed in.

No advertising or cross-site tracking cookies. Nothing is sold to third parties.

Your rights

Email support@hajverylibas.pk and we will, within 3 working days: tell you everything we hold about you, correct it, or delete it. We keep order records for as long as tax law requires, but we remove them from the customer-facing account the moment you ask.

Security

Passwords are hashed, every form submission is CSRF-protected, and prices are recalculated on the server from the database — never from what the browser sends.