Privicy Policy

PRIVACY POLICY

Bagbasta Industries
Effective Date: October 5, 2026 | Last Updated: October 5, 2026

1. Introduction

Bagbasta Industries we operates the website www.bagbastaindustries.shop . We are committed to protecting the privacy and security of your personal information.

This Privacy Policy describes how we collect, use, disclose, store and protect your personal information when you visit the Website, make a purchase, create an account, subscribe to our communications or otherwise interact with us . It also explains your rights and how to exercise them.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described here. If you do not agree, please discontinue use of the Website.

2. Information We Collect

2.1 Information You Provide Directly

Identity and contact details: full name, email address, phone number, WhatsApp number
Delivery and billing details: shipping address, billing address, city, postal code
Personal details: date of birth, where voluntarily provided
Account information: login credentials and saved preferences
Order information: products purchased, order value, order history and delivery instructions
Communications: enquiries, feedback, complaints, reviews and correspondence with us

2.2 Payment Information

We accept Cash on Delivery (COD), mobile wallets (JazzCash and Easypaisa), bank transfer and card payments. Card transactions are processed by third-party payment gateways. We do not store full card numbers or card security codes. For bank transfers and wallet payments, we may retain transaction references, payment screenshots and account names solely to verify and reconcile payments.

2.3 Information Collected Automatically

When you use the Website, we and our service providers automatically collect technical data, including IP address, device type, operating system, browser type, pages viewed, products browsed, time spent, referring URLs and approximate geographic location, through cookies and similar technologies described in Section 8.

3. Purposes and Legal Basis for Processing

We process personal information only for legitimate business purposes, namely:

Purpose	Basis
Processing, fulfilling, delivering and supporting your orders, including returns and refunds	Performance of a contract
Creating and managing your account	Performance of a contract
Communicating order updates by email, SMS, call or WhatsApp	Performance of a contract / legitimate interest
Sending promotional offers and marketing communications	Your consent (withdrawable at any time)
Analysing Website usage, personalising content and improving the Services	Legitimate interest
Advertising, remarketing and measuring campaign performance	Consent / legitimate interest
Detecting and preventing fraud, enforcing our terms and securing the Website	Legitimate interest
Complying with legal, tax and regulatory obligations	Legal obligation

4. Disclosure of Personal Information

We do not sell your personal information. We disclose it only as described below, and only to the extent necessary:

E-commerce platform: Shopify, which hosts the Website and processes order and customer data on our behalf.
Payment processors and financial institutions: JazzCash, Easypaisa, banks and card payment gateways, to process and verify payments.
Logistics and courier partners: including TCS, Leopards, Trax, PostEx and similar providers, who receive your name, phone number and delivery address to fulfil deliveries.
Marketing and analytics providers: including Google Analytics, Meta (Facebook and Instagram) Pixel, TikTok Pixel, email marketing platforms and WhatsApp.
Application and technology providers: such as review, customer support and other tools that operate Website features.
Legal and regulatory authorities: where disclosure is required by law, court order or lawful governmental request, or is necessary to protect our rights, property or safety, or those of our customers or the public.
Business transfers: in the event of a merger, acquisition or sale of assets, your information may be transferred to the successor entity, subject to this Privacy Policy.

All service providers are authorised to use your information solely to perform services for us and are required to maintain appropriate confidentiality and security.

5. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this Policy or as required by law.

Category	Retention Period
Order and transaction records	6 years from the date of transaction
Account information	Until account closure or deletion request
Marketing contact details	Until you unsubscribe or request deletion
Customer support correspondence	Up to 2 years
Analytics and advertising data	Up to 24 months

Upon expiry of the applicable period, information is securely deleted or anonymised unless further retention is legally required.

6. Your Rights

Subject to applicable law, you have the right to:

Access the personal information we hold about you
Rectify inaccurate or incomplete information
Erase your personal information, subject to our legal retention obligations
Withdraw consent to marketing communications at any time
Object to or restrict certain processing activities

To exercise these rights, please contact us using the details in Section 14. We may need to verify your identity before processing your request, and we aim to respond within thirty (30) days.

7. Marketing Communications

With your consent, we may send promotional offers, product updates and news by email, SMS and WhatsApp. You may opt out at any time by using the "unsubscribe" link in any email, replying "STOP" to any message, or contacting us directly. Opting out of marketing will not affect transactional messages relating to your orders.

8. Cookies and Tracking Technologies

Cookies are small text files stored on your device when you visit a website. We use the following categories:

Type	Purpose	Duration
Strictly necessary	Cart functionality, secure login, checkout, product filtering	Session
Preference	Remembering your settings and details for future visits	Up to 12 months
Analytics	Understanding Website usage in aggregated form (Google Analytics)	Up to 24 months
Advertising	Personalised advertising and remarketing (Meta Pixel, TikTok Pixel)	Up to 24 months

You may manage or delete cookies through your browser settings or our cookie banner. Disabling strictly necessary cookies may impair Website functionality, including the cart and checkout. You may opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on, and manage advertising preferences through your Meta and TikTok account settings.

9. Data Security

We implement reasonable administrative, technical and organisational safeguards to protect your information against unauthorised access, loss, misuse or alteration, including encrypted (HTTPS/SSL) connections and secure third-party payment processing. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

10. International Data Transfers

Some of our service providers, including Shopify and Google, may store or process information on servers located outside Pakistan. By using the Services, you acknowledge that your information may be transferred to, and processed in, jurisdictions that may have different data protection laws. We take reasonable steps to ensure such providers maintain appropriate safeguards.

11. Children's Privacy

The Services are not directed at individuals under the age of thirteen (13), and we do not knowingly collect their personal information. If we become aware that such information has been collected, we will take steps to delete it promptly. Parents or guardians who believe a child has provided us with personal information should contact us immediately.

12. Third-Party Websites

The Website may contain links to third-party websites or services. We do not control and are not responsible for their content or privacy practices. We encourage you to review their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. Updates will be posted on this page with a revised "Last Updated" date. Your continued use of the Services after any changes constitutes acceptance of the updated Policy.

14. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Islamic Republic of Pakistan, including applicable electronic transactions and cybercrime legislation. Any disputes arising from it shall be subject to the jurisdiction of the competent courts of Pakistan.