Legal
Privacy Policy
Last updated 11 August 2026
This policy explains what personal information Zebekhas collects when you shop with us, why we collect it, who we share it with, and what you can ask us to do with it.
Information we collect
We only collect what we need to take an order, deliver it, and answer questions about it.
| What we collect | Why |
|---|---|
| Name | To address your order and confirm delivery. |
| Email address | To send order confirmations and to contact you about an order. |
| Phone number | Required, because our couriers call ahead and cash-on-delivery cannot be completed without a reachable number. |
| Delivery and billing address | To deliver your order and to issue an invoice. |
| Order history | So you and we can see what you bought, and to handle returns or queries. |
| Bank transfer receipt, if you pay that way | To confirm your payment has arrived before we dispatch. You choose whether to upload this. |
| Account password | Stored only as a cryptographic hash. We cannot read it. |
| IP address and approximate country | Used by our network provider to protect the site and to show you the right currency and region. |
We do not ask for, and do not want, your national identity card number, date of birth, or any information about your health, religion, or political views.
Payment information
We currently accept cash on delivery and bank transfer. We do not take card payments on this website, so we never receive or store card numbers.
If you pay by bank transfer, you may upload a receipt so we can match your payment to your order. That file is stored on our own server and is used only to verify your payment.
Cookies
We use a small number of first-party cookies that are necessary for the shop to work. We do not use advertising cookies, and we do not run analytics or tracking tools on this site.
| Cookie | Purpose |
|---|---|
| _medusa_cart_id | Remembers your basket between visits. |
| _medusa_jwt | Keeps you signed in to your account. |
| _medusa_pending_customer | Holds your name and phone briefly during sign-up, until your account is created. |
| _medusa_cache_id | Keeps the pages you are served consistent with your basket. |
| Region and language preference | Remembers the country and language you chose. |
Who we share information with
We share your information only where it is needed to serve you:
- Delivery couriers receive your name, address and phone number so they can deliver your order and, for cash on delivery, collect payment.
- Our bank is involved if you pay by transfer, so we can confirm the payment reached us.
- Our hosting and network providers operate the servers and content network that run this website. They process data on our behalf and under our instructions.
We do not sell your personal information, and we do not share it for anyone else's advertising.
Where your information is processed
Our website is served through a global content network, which means requests may be handled by servers outside Pakistan. If you order from the European Union or the United Kingdom, your information may be transferred outside your country in order to fulfil your order.
How long we keep it
We keep order records, including the address and phone number attached to them, for as long as we need them to handle returns, answer queries, and meet accounting and tax obligations. Bank transfer receipts are kept while the related order is open and for our accounting records afterwards.
If you ask us to delete your account, we will remove your account and contact details, but we may keep the minimum record of past orders that we are required to retain.
Your rights
You can ask us to:
- tell you what information we hold about you
- correct anything that is wrong
- delete your account and contact details
- send you a copy of your information
If you are in the European Union or the United Kingdom, you also have the right to object to how we use your information and to complain to your local data protection authority.
To make any of these requests, email us at privacy@zebekhas.pk. We may need to confirm your identity before we act, so that nobody else can obtain your information.
Security
The site is served over an encrypted connection, passwords are stored only as hashes, and access to order data is limited to people who need it to run the shop. No system is perfectly secure, so if we ever discover a breach affecting your information we will tell you and the relevant authority where we are required to.
Children
This shop is intended for adults. We do not knowingly collect information from children. If you believe a child has given us their information, contact us and we will remove it.
Changes to this policy
If we change how we handle your information, we will update this page and change the date at the top. Where the change is significant, we will make that clear rather than quietly editing the text.
Contact us
Questions about this policy, or about your information, can go to privacy@zebekhas.pk.
You can also track an order without signing in.