Legal

Privacy & Data Protection Policy

Effective: 25 March 2025 · Last Updated: 25 March 2026

Kragrance ("we," "our," or "us") is committed to safeguarding the privacy and personal data of every individual who interacts with our digital and physical channels. This Privacy & Data Protection Policy governs how we collect, process, store, and protect your information when you visit kragrance.pk, place an order, or engage with our customer concierge. We operate under the principles of minimal data collection, purpose limitation, and absolute transparency.

Scope & Applicability

This policy applies to all personal data collected through kragrance.pk, our WhatsApp business channel, email correspondence, and any in-person interactions at our Karachi atelier. It covers residents of Pakistan and all international visitors who access our services. By using our platform, you acknowledge that you have read, understood, and agree to the practices described herein.

We align our data-handling practices with the Prevention of Electronic Crimes Act (PECA) 2016 and the Personal Data Protection Bill of Pakistan, alongside internationally recognised frameworks such as the EU General Data Protection Regulation (GDPR) as a benchmark for best practice.

Information We Collect

Transaction & Logistics Synchrony

We capture data strictly necessary to fulfil your luxury shipment and maintain our service commitment:

  • ◆ Full name as provided during checkout
  • ◆ Verified Pakistani or international contact number
  • ◆ Email address for order confirmations and dispatch notifications
  • ◆ Delivery address including city, area, and postal code
  • ◆ Order history and product preferences for personalised recommendations

Automatic Technical Data

When you browse kragrance.pk, our servers automatically log standard technical metadata: IP address, browser type, device identifier, referring URL, pages visited, and session duration. This data is anonymised and used solely for analytics, security monitoring, and website performance optimisation.

How We Use Your Data

Your personal information is processed under strict purpose limitation. We use it exclusively for:

  • ◆ Processing, dispatching, and tracking your orders across Pakistan
  • ◆ Communicating order status updates via email, SMS, or WhatsApp
  • ◆ Providing personalised scent profiling and product recommendations
  • ◆ Administering returns, exchanges, and quality-related inquiries
  • ◆ Preventing fraud, verifying identities, and maintaining platform security
  • ◆ Enhancing website performance and user experience through anonymised analytics
  • ◆ Sending curated promotional communications (only with your explicit opt-in consent)

We will never use your data for purposes beyond those listed above without obtaining your prior, informed, and freely given consent.

Financial & Checkout Security

🔒

Zero Banking Payloads. Kragrance servers never see, store, or have access to your credit card numbers, debit card details, or bank account credentials — under any circumstances.

End-to-End SSL Financial Encryption. All monetary transactions are isolated using 256-bit encrypted secure socket layers and processed exclusively through verified, PCI-DSS-compliant third-party payment gateways:

  • ◆ JazzCash — Mobile wallet payments
  • ◆ EasyPaisa — Mobile wallet payments
  • ◆ Direct Bank Transfer — Manual verification
  • ◆ Cash on Delivery (COD) — Available nationwide

Your financial data is transmitted directly to the payment processor via their own encrypted channels. At no point does this data pass through or reside on Kragrance infrastructure.

Third-Party Data Sharing

🛡️

We never sell your data. Your personal information is not sold, leased, rented, or traded to any third party — for marketing, analytics, or any other purpose — under any circumstances.

We share limited, operationally necessary data only with the following categories of trusted service partners:

  • ◆ Logistics & courier partners (TCS, Leopards, Rider) — name, phone, and delivery address exclusively for shipment fulfilment
  • ◆ Payment gateways (JazzCash, EasyPaisa) — transaction processing only, under their own privacy policies
  • ◆ Analytics platforms (Google Analytics) — anonymised, non-identifying browsing data for website performance
  • ◆ Hosting infrastructure (secured servers with encrypted storage and access controls)

Cookies & Tracking Technologies

kragrance.pk uses a minimal set of cookies to maintain core functionality:

Essential

Cart state, session authentication, CSRF protection

Duration: Session
Analytics

Anonymised page views and traffic sources (Google Analytics)

Duration: 26 months
Preference

Currency, language, and recently viewed products

Duration: 12 months

You may disable non-essential cookies at any time through your browser settings. Disabling essential cookies may impair checkout and cart functionality.

Data Retention

We retain your personal data only for as long as it is necessary to fulfil the purpose for which it was collected:

  • ◆ Order and transaction records: 6 years (Pakistani tax and commercial law requirement)
  • ◆ Customer account data: retained until you request deletion
  • ◆ Analytics data: anonymised and aggregated; retained indefinitely in non-identifying form
  • ◆ Marketing consent records: retained for the duration of your subscription plus 12 months

Your Legal Autonomy

You retain full sovereignty over your personal information. At any time, you may exercise the following rights by contacting kragrance.pk@gmail.com:

◆
Right of Access Request a complete copy of all personal data we hold about you.
◆
Right of Rectification Correct any inaccurate or outdated personal information in our records.
◆
Right of Erasure Request permanent deletion of your personal data from our systems (subject to legal retention obligations).
◆
Right to Restrict Processing Limit how we use your data while a dispute or inquiry is pending.
◆
Right to Withdraw Consent Revoke any previously granted marketing or communication consent at any time.
◆
Right to Object Object to data processing that you believe is not in your legitimate interest.

We will respond to all data rights requests within 14 business days. No fees are charged for exercising your rights.

Children's Privacy

Kragrance does not knowingly collect personal information from individuals under the age of 18. Our products and services are intended for adults. If we become aware that data has been inadvertently collected from a minor, we will delete it immediately and notify the relevant guardian where possible.

Policy Updates

We may revise this policy periodically to reflect changes in legal requirements, business practices, or platform functionality. Any material changes will be communicated via a prominent notice on kragrance.pk and, where applicable, via email to registered customers. The "Last Updated" date at the top of this document will always reflect the most recent revision. Continued use of our services after an update constitutes acceptance of the revised terms.

Contact the Data Protection Officer

For any privacy-related inquiries, data requests, or concerns regarding how your information is handled, please contact:

Data Protection Officer Kragrance
Address Karachi, Pakistan

Frequently Asked Questions

Kragrance is committed to transparent data practices for customers who buy authentic perfumes in Karachi and across Pakistan. As a trusted original attar store in Pakistan, we protect every transaction with enterprise-grade encryption and never share your personal information. For questions about perfume returns and exchanges, data requests, or our Kragrance contact number, reach us at kragrance.pk@gmail.com.