Privacy Policy

QUMRASH ("we", "our", "us") operates the e-commerce store at qumrash.com. We are responsible for your personal data as described in this policy.

We collect information you provide directly when you:

• Place an order (name, phone number, delivery address, email address)
• Contact us via the contact form or WhatsApp
• Submit a product review
• Subscribe to our mailing list or loyalty programme

We also collect limited technical data automatically: IP address, browser type, pages visited, and session identifiers. This data is anonymised and used solely for site performance and analytics. We do not sell it, share it with third parties for advertising, or use it to build individual profiles.

We use your personal data to:

• Process and fulfil your orders
• Send order confirmations and shipping updates
• Respond to customer service enquiries
• Prevent fraud and protect the security of our platform
• Improve our products and website experience (anonymised analytics only)

We will only contact you for marketing purposes if you have explicitly opted in (e.g., by joining the QUMRASH Circle loyalty programme). You may opt out at any time by contacting us.

All payment transactions are handled by our payment processors (Stripe for card payments). We do not store, see, or process your card details at any point. Cash-on-delivery orders require no card data. Your order amount and payment status are stored on our servers for order management and accounting purposes.

We use a minimal set of cookies strictly necessary to operate the store: session identifiers, cart persistence, and analytics session tokens. We do not use third-party advertising cookies. You may clear cookies via your browser settings at any time.

Order data is retained for seven years to comply with Pakistani financial regulations. Analytics events are pruned after 90 days. Abandoned cart drafts are deleted after 60 days. You may request deletion of your personal data by emailing us at support@qumrash.com; we will action this within 30 days except where retention is legally required.

We do not sell your personal data. We share data only with service providers necessary to operate our business: courier companies (name and delivery address only), Stripe (payment processing), and our hosting provider. All providers are bound by confidentiality obligations.

You have the right to:

• Request a copy of the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Opt out of marketing communications at any time

To exercise any of these rights, email us at support@qumrash.com.

We may update this policy from time to time. Material changes will be announced on our website. Your continued use of QUMRASH after a change constitutes acceptance of the updated policy.

For privacy-related questions, email us at support@qumrash.com or use the contact form.