Khalis Herb Privacy Policy

1. Who Is Responsible for Your Information

Khalis Herb is responsible for the personal information described in this policy.

Business details: Khalis Herb, 180, Block A, Gulistan Colony 2, Faisalabad, Pakistan.

For privacy questions or requests, email info@khalisherb.com or use the WhatsApp contact option on our website.

2. Information We Collect

Depending on how you use the website, we may collect:

• your name, email address, and phone number;
• delivery and billing addresses;
• account details, including a securely protected version of your password;
• order details, order history, product selections, quantities, prices, delivery charges, discounts, and order status;
• communications you send to customer support, including messages about products, delivery, returns, or refunds;
• information needed to verify or track an order, such as an order number and the email used at checkout;
• technical information such as IP address, browser type, device information, pages viewed, timestamps, and security logs; and
• cookie or local-storage data used for functions such as keeping products in your cart.

Please do not send unnecessary sensitive personal information through the website or support channels.

3. How We Collect Information

We collect information when you:

• create or update an account;
• place or track an order;
• save or update an address;
• contact us by email, website form, or WhatsApp;
• request account or email verification support; or
• browse and interact with the website.

We may also receive delivery updates from courier or fulfilment providers involved in your order.

4. Why We Use Your Information

We use personal information to:

• create and manage customer accounts;
• process, confirm, prepare, deliver, and track orders;
• contact you about an order or delivery;
• provide product and customer support;
• manage cancellations, replacements, returns, exchanges, and refunds;
• retain saved addresses and order history for account features;
• maintain the cart and other requested website functions;
• prevent fraud, misuse, and security incidents;
• diagnose technical problems and improve the website; and
• keep records required for business, tax, accounting, dispute, or legal purposes.

We currently use your contact details only to communicate about your orders, account, and support questions. We do not send promotional marketing messages. If this changes in the future, we will only send marketing messages to customers who have opted in, and every message will include a way to opt out.

5. Cookies and Local Storage

The website may use cookies or browser local storage to operate essential features, such as remembering cart contents, maintaining a session, protecting forms, or keeping account preferences. Some data may remain on your device until it expires or you clear it through browser settings.

We do not currently use analytics, advertising, or other non-essential tracking tools on this website. If that changes, this policy will be updated to name the tool, its purpose, and how you can control it before it is used.

Blocking essential cookies or local storage may prevent some website features from working correctly.

6. When We Share Information

We may share only the information reasonably needed with service providers that help us operate the store, such as:

• courier and delivery providers;
• website hosting, database, email, communications, and security providers;
• payment providers if additional payment methods are introduced;
• professional advisers such as accountants or legal advisers; and
• public authorities where disclosure is legally required or necessary to protect rights, safety, or security.

These providers may use information only for the services they perform or as required by law. We do not sell customers' personal information to third parties.

7. Cash on Delivery and Future Payment Methods

For Cash on Delivery orders, we use order and contact details to arrange delivery and confirm the amount due. We do not collect online card details for a COD payment.

Advance payment orders are currently supported through JazzCash and Easypaisa. When you choose one of these options, you complete the payment directly with that provider and share the transaction reference with us for verification; we do not receive or store your JazzCash or Easypaisa login details or full payment-card information. If other payment methods are added later, the checkout will explain which provider handles the payment and what information is shared.

8. How Long We Keep Information

We keep personal information only as long as reasonably needed for the purposes described in this policy, including account use, order support, business records, disputes, fraud prevention, and legal obligations.

We keep account, order, and support-message information for as long as your account remains active, and for a reasonable period afterward to meet business, accounting, and legal record-keeping needs. If you delete your account, we remove or anonymise personal information from active systems within a reasonable period, except where retention is required for legal, tax, or dispute-resolution purposes.

When information is no longer needed, we will delete it or make it anonymous where reasonably possible.

9. Security

We use reasonable administrative, technical, and organisational measures intended to protect personal information against unauthorised access, loss, misuse, or alteration. No website or storage system can guarantee absolute security.

You should use a strong, unique password and keep access to your email and devices secure. Contact us promptly if you believe your account has been compromised.

10. Your Choices and Rights

Subject to applicable law and reasonable identity verification, you may ask us to:

• tell you what personal information we hold about you;
• correct or update inaccurate information;
• delete your account or personal information;
• provide a copy of certain information;
• object to or restrict certain uses; or
• withdraw consent where our use depends on consent.

You can review or update certain account and saved-address information through the account page. For other requests, email info@khalisherb.com. Some records may need to be retained for completed orders, fraud prevention, disputes, accounting, tax, or other legal obligations.

To request access to, correction of, or deletion of your personal information, email info@khalisherb.com or use the WhatsApp contact option on our website. We will take reasonable steps to verify your identity before acting on the request, and we aim to respond within 30 days.

11. Children's Privacy

The storefront is intended for customers who can legally place an order. We do not knowingly seek personal information from children. Customers must be at least 18 years old to create an account or place an order. If we learn that we have collected personal information from someone under 18 without appropriate consent, we will delete it.

12. International Processing

Some service providers we rely on, such as website hosting and email delivery, may process information on servers located outside Pakistan. Where this happens, we work with providers that apply appropriate security safeguards to protect your information.

13. Third-Party Links and Services

Links to external websites or services are governed by those parties' own privacy policies. This policy does not control their independent practices.

14. Changes to This Policy

We may update this policy as our services, providers, or legal obligations change. We will post the revised policy with a new effective date. Where appropriate, we may provide an additional notice about a significant change.

15. Contact Us

For privacy questions or requests:

• Email: info@khalisherb.com
• WhatsApp: use the contact button on the Khalis Herb website
• Business address: 180, Block A, Gulistan Colony 2, Faisalabad, Pakistan