Privacy Policy

Who we are

Grahak.pk is an online store based in Pakistan, offering quality-checked kitchen, home and lifestyle products with Cash on Delivery (COD) across the country. This policy explains what personal information we collect, why we collect it, and how we protect it.

Information we collect

When you place an order or use our website, we may collect:

• Contact details — your name, phone number and delivery address, so we can deliver your order and reach you about it.
• Order information — the products you buy, order history and delivery preferences.
• Account details — if you create an account, your login email or mobile number (used as your identifier), and one-time verification codes sent to confirm your identity. The standard storefront sign-in uses these codes and does not ask for a customer password. After verification, we issue a random access token that is stored in browser storage (local storage where available) and sent with authenticated requests as a Bearer token to keep you signed in. If the optional legacy password sign-up or login mode is enabled, we collect a password for authentication and store only a salted, one-way password hash, not the plaintext password.
• Usage information — basic technical data such as pages visited and device type, used to keep the site working well.

We do not collect payment card details — orders are paid by Cash on Delivery.

How we use your information

• To process, confirm and deliver your orders.
• To contact you about your order, including confirmation calls and delivery updates.
• To respond to your questions and support requests.
• To improve our products, website and customer experience.
• To prevent fraud and misuse of our services.

We never sell your personal information to third parties. We share order delivery details (name, phone number and address) with courier partners as needed for order fulfilment. We also use Google Analytics, Microsoft Clarity, Meta Pixel and TikTok Pixel for analytics and advertising measurement. These services may receive limited technical and browsing information, including your IP address, device and browser information, cookies or similar identifiers, pages viewed, product IDs and shopping events.

Customer names, phone numbers, email addresses, delivery addresses and payment information are not sent through TikTok Pixel. TikTok Advanced Matching is not enabled.

Browser storage, cookies and sessions

We use browser storage to keep your shopping cart and customer access token available on your device. If persistent browser storage is blocked, this information may be held only in memory for the current visit. We may also use cookies and similar technologies to understand how the site is used. Logging out removes the stored sign-in token; clearing this site's data removes locally stored information.

How we protect your information

Your data is stored securely and access is limited to staff who need it to fulfil your orders. One-time verification codes and access tokens expire, and logging out revokes the active access token. The standard storefront sign-in does not use a customer password. If the optional legacy password mode is enabled, customer passwords are stored only as salted, one-way hashes and never as plaintext.

Your choices

• You can ask us what personal information we hold about you.
• You can ask us to correct or delete your information.
• You can opt out of promotional messages at any time.

Children's privacy

Our services are intended for adults. We do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated date at the top.

Contact us

If you have any questions about this policy or your personal information, contact us at admin@grahak.pk.