Premium Pakistani Dressesoperates this website and is responsible for the personal information described in this policy. In this page, “we”, “us” and “our” refer to that business.
This policy covers information collected when you browse, create an account, place an order, save measurements or contact us. For a privacy question or request, use our contact form.
Information we collect
Orders and delivery
Your name, email address, phone number, billing and delivery addresses.
The products and options selected, amount, currency, payment status, delivery method and order history.
Custom stitching measurements
The height, measurements, fit preferences and tailoring notes you submit for a custom garment, and any reference image you choose to attach.
Reference images are kept in private storage that only you (when signed in) and our staff can open. They are never published.
Your account
Your email address and authentication details. Passwords are handled by our authentication provider and stored as a cryptographic hash; we cannot read them.
Addresses and measurement sets you choose to save. You can remove these from your account.
Contact, reviews and support
Your name, email, optional phone number and the content of your message.
A one-way hashed version of your IP address to limit spam and abuse. The contact form stores the hash, not the readable IP address.
A review stores the rating, text, any photographs and the name you choose to show (or none, if you post anonymously). A guest reviewer’s contact detail is kept only as a one-way fingerprint that stops the same piece being reviewed twice.
Browsing the website
A random guest-cart identifier in a cookie your browser cannot read from scripts, so your bag survives a page reload without identifying you by name.
Basic server request records, such as the page requested and the time of the request, and short-lived, hashed rate-limit counters that keep public forms working.
The country and display currency you choose, so prices stay in your currency.
Analytics and advertising information only when you have given consent.
Why we collect it
To provide your order: confirm payment, make or stitch the outfit, arrange delivery, handle returns and answer support questions.
To meet legal requirements: maintain transaction, accounting and tax records for as long as applicable law requires.
To keep the service safe: prevent fraud and abuse, protect customer accounts, rate-limit public forms and maintain administrative audit records.
With your consent: run analytics, measure advertising or send marketing email. You can withdraw any of these choices at any time.
We may show an anonymous recent-purchase notice using the product name from a genuine paid or delivered order. It does not include the customer’s name, location, order number, contact details or purchase time.
We do not sell personal information, share it with data brokers or use it to build a profile for automated decision-making.
Payments and service providers
Card payments
Stripe processes card payments. Your card number, expiry date and security code are entered on Stripe’s payment page and never reach our servers. We keep only the payment status, amount, currency and provider reference needed to manage the order. Bank transfer and cash-on-delivery orders involve no card data at all.
Who helps us provide the service
We share only the information each provider needs for its part of the service:
Supabase provides the database, account authentication and private file storage used for orders, addresses and measurements.
Stripe processes card payments and reports the payment status.
Our transactional email provider sends order confirmations, dispatch updates and password-reset messages.
Delivery couriers receive the name, address and phone number needed to deliver and contact you about the parcel.
Google Customer Reviews receives the order number, confirmation email, delivery country and estimated delivery date when the order-confirmation page displays its survey invitation. Google sends a review request only if you choose to opt in.
Analytics and advertising providers receive usage data only after you consent — see the next two sections.
A provider may also have legal duties of its own. Its privacy notice explains how it handles information in that role.
Cookies and local storage
Essential cookies keep sign-in, the shopping bag and your price display working. They are required for the service and are not used for advertising.
Session cookies keep you signed in and refresh the session securely.
Guest cart token keeps a guest shopping bag available between pages.
Country and currency cookies remember the market and display currency you chose, and whether you chose it yourself or we suggested it.
Guest reviewer token lets a guest like or reply to a review once without an account; it identifies a browser, not a person.
Checkout receipt — a short-lived cookie that lets the confirmation page show the order you just placed.
Your browser’s local storage — which stays on your device and is not sent to us — holds your consent choice, your wishlist, recently viewed pieces, recent searches, whether a notice has been dismissed, and a note that an analytics event has already been sent so it is not counted twice.
Analytics and advertising
When you first visit, a banner offers two choices of equal weight: “Accept analytics” or “Essential only”. Until you choose “Accept analytics”, no analytics or advertising script is loaded at all — not Vercel Analytics, not Google Analytics and not the Meta Pixel.
The Google Customer Reviews store-quality widget is a review-service feature, not an advertising pixel. It may collect aggregated widget views and clicks under Google’s privacy terms. On the order-confirmation page, its separate invitation lets you decide whether Google may email you for a review.
Choosing “Essential only” sends nothing to the analytics or advertising providers described in the callout above. The separate Google Customer Reviews service remains limited to the review uses described here. You can change your analytics choice at any time; because a script that has already loaded cannot be removed from the open page, withdrawing consent takes full effect from your next page load.
How long we keep information and how we protect it
Retention
Orders and invoices: for the period required by applicable tax and accounting rules.
Account information: until you request account deletion. Information we must keep for legal or order-record purposes may remain, with the account link removed where possible.
Saved addresses and measurements: until you delete them or the account is deleted.
Support messages and abuse-prevention hashes: only as long as they are reasonably needed for support, security or a legal record. Rate-limit counters expire within hours.
Marketing subscription: until you unsubscribe, followed by a minimal suppression record so we respect that choice.
Security
We use HTTPS, role-restricted administration, database row-level security, private file storage, rate limits and audit records. These controls are designed so signed-in customers can access only their own account information.
No online service can promise perfect security. If a breach affects your information, we will notify you and any relevant authority where the law requires it.
Your privacy rights
Depending on the law where you live, you may ask us to:
provide a copy of the personal information we hold about you;
correct information that is inaccurate;
delete information we no longer need or are not legally required to keep;
restrict or object to a particular use;
provide information in a portable format; or
withdraw consent, without affecting earlier lawful use.
Send the request through our contact form. We may ask you to verify your identity, usually through the email address connected to the order or account. We will respond within the period required by the law that applies to you. You may also complain to your local data-protection authority.
International transfers and children
International processing
We sell worldwide and use providers that operate internationally. Your information may therefore be processed outside your country. Where required, we rely on safeguards made available by those providers, such as approved contractual protections.
Children
This store is intended for adults. We do not knowingly collect personal information from children. If you believe a child has sent us information, contact us so we can review and remove it where appropriate.
Changes and contact
If our handling of personal information changes, we will update this page and the “last updated” date above. Where appropriate, we will also notify account holders of a material change.
For any privacy question, request or complaint, use our contact form. Contact form, email and WhatsApp support for orders and styling questions.
