Privacy Policy

Last updated: October 2026

How we collect, use, and protect your personal information at Zarbafti.

Who we are

Zarbafti (“we”, “us”) operates zarbafti.com and related shopping experiences in Pakistan. This Privacy Policy explains what personal data we collect, why we use it, and the choices you have.

What we collect

Depending on how you use the site, we may collect:

  • Order & contact details — name, billing/shipping address, phone number, email, order contents, and notes you provide at checkout.
  • Communications — messages you send us by WhatsApp, email, contact forms, or social media.
  • Account or signup data — if you join our email list or create an account (email address and any preferences you share).
  • Technical data — IP address, browser type, device type, approximate location derived from IP, pages viewed, and similar diagnostics via cookies or analytics tools.
  • Payment-related data — for COD, confirmation of delivery payment status; if online payments are added later, limited payment metadata from the payment provider (we do not store full card numbers on our own servers).

Why we use data

  • To process, confirm, pack, and deliver your orders (including COD confirmation calls or WhatsApp messages)
  • To provide customer support and handle returns, exchanges, and refunds
  • To send transactional updates (order status, dispatch, policy changes that affect you)
  • To send marketing messages only where you have opted in or where permitted, with an easy opt-out
  • To improve the website, prevent fraud or abuse, and keep the shop secure
  • To comply with legal or accounting obligations

Who we share with

We do not sell your personal data. We share it only as needed with:

  • Courier partners — name, address, and phone number to deliver your parcel
  • Payment partners — if/when online payments are enabled (e.g. bank, JazzCash, Easypaisa, or a payment gateway)
  • Hosting, email, and shop platforms — such as our website host and WooCommerce-related services that process store data
  • Analytics & advertising tools — such as Google Analytics and Meta (Facebook/Instagram) Pixel, which may receive pseudonymous technical data
  • Professional advisers or authorities — where required by law or to protect our rights

Service providers are expected to use personal data only to perform services for us or as required by law.

Cookies & analytics

We use cookies and similar technologies to run the cart and checkout, remember preferences, understand site traffic, and measure marketing (including tools such as Google Analytics and the Meta Pixel).

You can control cookies through your browser settings. Blocking some cookies may affect checkout or site features. Where a consent banner or preference tool is available on the site, please use it to manage non-essential cookies.

Marketing & communications

If you join our list for offers (including the 15% first-order welcome privilege when live), we use your email to send news and promotions. You can unsubscribe via the link in any marketing email or by contacting us. Transactional messages about an order you placed are not marketing and may still be sent.

By providing your phone number at checkout, you consent to receiving transactional messages — including order verification, dispatch and tracking updates — via WhatsApp and SMS. Marketing messages are sent only if you opt in, and you can opt out at any time.

How long we keep data

We keep order and customer records for as long as needed to fulfil orders, handle returns, meet accounting or legal requirements, and resolve disputes — typically for a period aligned with ordinary business and tax record-keeping in Pakistan, then delete or anonymise when no longer needed. Analytics data is retained according to the tool’s settings and our configuration.

Your choices & rights

Subject to applicable law, you may ask us to:

  • Access the personal data we hold about you
  • Correct inaccurate information
  • Delete data we no longer need to keep
  • Opt out of marketing communications

Contact contact@zarbafti.com or WhatsApp [WhatsApp number] with your request. We may need to verify your identity before responding. Unlawful access to or misuse of computer systems and data may also engage Pakistan’s cybercrime framework (including the Prevention of Electronic Crimes Act, 2016); we take reasonable steps to protect systems and investigate abuse.

Security

We use reasonable technical and organisational measures to protect personal data (such as HTTPS on the website and restricted access to order information). No method of transmission or storage is perfectly secure; please protect your own devices and any account credentials.

Children

Zarbafti products and marketing are aimed at adults. We do not knowingly collect personal data from children under 16 for marketing. Parents or guardians who believe a child has provided data should contact us so we can delete it. Keep perfume bottles out of reach of children.

Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top of the page will change when we do. Significant changes may also be highlighted on the website or by email where appropriate.

Contact

Privacy questions: contact@zarbafti.com · WhatsApp [WhatsApp number] · Islamabad, Pakistan.

These pages describe how Zarbafti currently operates. Policies may be updated from time to time; the “Last updated” date above will change when they do.