This Privacy Policy applies to all personal data collected by Khalis through our website, online store, WhatsApp ordering channel, social media platforms, and any other point of contact between you and our brand.

The data controller responsible for your information is Khalis, operating and registered in Pakistan. We are committed to handling your data in a manner consistent with the Prevention of Electronic Crimes Act (PECA) 2016 and all applicable data protection provisions under Pakistani law.

We collect only the information necessary to provide you with a seamless and personalised experience. Below is a transparent summary of what we collect and why.

We do not collect sensitive categories of personal data such as national ID numbers, health information, political opinions, or biometric data.

Every piece of data we collect serves a defined and legitimate purpose. We do not use your information for any purpose beyond what is described below.

• Order Fulfilment: Processing, packing, and dispatching your orders accurately and on time
• Customer Communication: Sending order confirmations, dispatch notifications, and delivery updates via email or WhatsApp
• Customer Support: Addressing queries, return requests, complaints, and feedback in a timely manner
• Account Management: Maintaining your account, order history, and saved preferences on our platform
• Marketing & Promotions: Sending newsletters, product launches, or exclusive offers — only to customers who have explicitly opted in
• Website Improvement: Analysing browsing patterns, traffic sources, and user behaviour to enhance site performance and experience
• Legal Compliance: Maintaining transaction records as required by Pakistani tax, business, and consumer protection law
• Fraud Prevention: Detecting and preventing fraudulent orders, chargebacks, and abuse of our services

Our website uses cookies and similar tracking technologies to improve your browsing experience, analyse site performance, and (where consented) deliver relevant marketing. A cookie is a small text file placed on your device when you visit our site.

Types of cookies we use:

• Essential Cookies: Required for the website to function — these enable your shopping cart, checkout process, and account login. They cannot be disabled.
• Analytics Cookies: Used to understand how visitors interact with our website (e.g. Google Analytics). Data collected is aggregated and anonymised.
• Preference Cookies: Remember your settings such as language, currency, and previously viewed products to personalise your experience.
• Marketing Cookies: Used by third-party platforms (such as Meta or Google) to serve you relevant advertisements. These are only active if you have consented.

We do not use cookies to collect your financial details, passwords, or any sensitive personal data.

Khalis does not sell, rent, trade, or otherwise disclose your personal data to third parties for their own commercial purposes. We share your data only where it is strictly necessary to fulfil your order or comply with legal obligations.

Authorised third-party partners:

• Courier & Logistics Partners: Your name, contact number, and delivery address are shared with our courier partners solely to enable delivery of your order
• Payment Processors: Payment gateway providers (e.g. JazzCash, EasyPaisa, card processors) receive only the transaction data required to process your payment. Khalis does not store card details.
• Website & Technology Platform: Our e-commerce platform (WordPress/WooCommerce) stores order and account data on secured servers
• Analytics Providers: Anonymised, aggregated data may be shared with tools such as Google Analytics to help us improve the website
• Legal & Regulatory Authorities: We may disclose your information when required to do so by law, court order, or government authority in Pakistan

All third-party partners with whom we share data are required to maintain appropriate data security standards and are prohibited from using your information for any other purpose.

We retain your personal data only for as long as is necessary for the purpose it was collected, or as required by applicable law. Below are our standard retention periods:

• Order & transaction records: Retained for up to 5 years in accordance with Pakistani tax and business compliance requirements
• Customer account data: Retained for as long as your account remains active; deleted within 30 days of a verified account deletion request
• Marketing opt-in records: Retained until you withdraw consent, plus 1 year for compliance documentation
• Support communications: Retained for up to 2 years to facilitate future queries and dispute resolution
• Technical & analytics data: Anonymised after 26 months and retained in aggregate form only

We approach the security of your data with the same rigour and care we apply to the quality of our products. Khalis has implemented a layered set of technical and operational safeguards to protect your information against unauthorised access, loss, alteration, or disclosure.

Our security infrastructure includes:

• SSL/TLS encryption across all pages of our website (HTTPS)
• Secure, encrypted storage for all customer data on our platform servers
• Payment processing handled exclusively by PCI-DSS compliant third-party gateways — Khalis never stores card numbers
• Restricted internal access to personal data on a strict need-to-know basis
• Regular security audits and software updates for our website and store platform
• Two-factor authentication on administrative accounts

While we maintain robust security measures, no system is entirely immune to risk. We therefore encourage customers to use strong, unique passwords for their accounts and to contact us immediately at hello@khalis.pk if they suspect any unauthorised access.

You have meaningful rights over your personal data. Khalis is committed to honouring these rights promptly and without friction. Below is a clear summary of what you are entitled to:

To exercise any of these rights, contact us at hello@khalis.pk with your full name and the specific request. We will acknowledge your request within 3 business days and fulfil it within 30 days. Identity verification may be required before we can process your request.

The Khalis website and online store are intended for use by individuals aged 18 and above. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe that a child under the age of 18 has provided us with personal information, please contact us immediately at hello@khalis.pk and we will take prompt steps to delete that data from our records.

Khalis reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable legal requirements. When we make material changes, we will update the "Effective Date" at the top of this page and, where appropriate, notify registered customers via email.

We encourage you to review this policy periodically. Your continued use of the Khalis website following any updates constitutes acceptance of the revised policy.

All privacy-related enquiries will be handled with the same care and attention we bring to every aspect of the Khalis experience. Your trust means everything to us.