Privacy Policy

When you place an order: your name, phone number, delivery address, city and country, your email address (needed for orders from outside Pakistan, optional inside Pakistan), the items you chose, any text you ask us to carve and any note you add.

When you ask for custom cutting: your name, phone number, your email address if you give it, the description of the job, and the design files or photos you upload.

When you open a workshop account on our portal or mobile app: your name, email address, a password (stored only in hashed form, so we cannot read it), and the workshop, machine, tool, material and design details you enter.

When you contact us on WhatsApp, by phone or by email: your number or address and the messages you send.

Automatically: our server records standard technical details such as IP address, browser type and the pages requested. We use them to keep the website secure and to stop abuse, for example to limit repeated form submissions.

Orders inside Pakistan are paid in cash on delivery; we hold no payment details for them.

When you pay by card or digital wallet, the details are entered on the secure page of the bank or payment provider. We never see or store full card numbers, CVV codes or one-time passwords; we only receive confirmation of the payment. For a bank transfer we see the sender's name and the transfer reference.

To confirm, make, pack and deliver your order, and to call, message or email you about it.

To prepare quotes and cut custom designs from the files you send.

To run your workshop account and the services you use in it.

To keep order and payment records, handle returns and disputes, prevent fraud and meet our legal and tax duties.

We do not use your details for advertising, and we do not send marketing messages unless you asked for them.

Courier and shipping companies receive the name, phone number and address needed to deliver your parcel. For an item sent directly from a supplier's warehouse, that supplier receives the delivery details for the parcel.

Banks and payment providers receive what is needed to take or refund a payment.

The companies that host this website and carry our email and messages (including WhatsApp and Telegram, which our staff use to receive order alerts and to talk to you) process information on our behalf.

Authorities, when the law requires it.

We do not sell, rent or trade your personal information.

This website does not use advertising cookies or third-party tracking.

Your browser stores a few things for you: the contents of your cart, the currency you chose and a marker that you have already seen the opening animation. They stay in your browser, and clearing your browser data removes them.

The currency first shown is worked out on your own device from your browser's time zone.

Workshop accounts use login and preference cookies that keep you signed in and remember your workshop. The login cookie is removed when you log out.

Order records are kept for as long as we need them for delivery, after-sales questions, disputes and the accounting and tax records the law asks us to keep.

Design files you send for a custom job are kept so that we can make, repair or repeat the job. Ask us and we will delete them once your order is complete.

Workshop account information is kept while the account is open. You can ask us to close the account and delete it.

The website is served over an encrypted (HTTPS) connection. Order details and customer files can be opened only by our logged-in staff, and passwords are stored hashed.

No system is perfectly secure. If we learn of a breach that affects your information, we will tell you and the authorities as the law requires.

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. We answer within 30 days. Some records must be kept where the law requires it, for example invoices.

If you live in the European Union, the United Kingdom or another place whose law gives you further rights (such as objecting to a use of your information, moving it elsewhere, or complaining to your data-protection authority), you have those rights with us too.

This shop is meant for adults. We do not knowingly collect information from children under 16. If you believe a child has given us personal details, tell us and we will delete them.

We are based in Pakistan. Your information is processed there and in the countries where our hosting and service providers operate. When you order from another country, your details are sent to us in Pakistan so that we can fulfil the order.

We may update this policy as the shop changes. The date at the top shows the latest version, and important changes will be announced on this website.

For any privacy question or request, email support@shophandycraft.com or message us on WhatsApp. Our office addresses are on the Contact page.