Privacy Policy

1. Overview

By placing an order or using our website, you agree to the collection and use of information as described in this policy. We handle personal data in line with applicable Pakistani law.

2. Data We Collect

When you place an order or contact us, we may collect the following information:

• Full name
• Email address
• Phone number / WhatsApp number
• Delivery address (house, area, city, province, postal code)
• Order details and payment receipts
• IP address and browser information (via cookies)
• Any messages or communications you send us

We do not collect or store credit/debit card details. Payments are made via bank transfer, and we only receive a receipt image uploaded by the customer.

3. How We Use Your Data

We use your personal data for the following purposes:

• Processing and fulfilling your orders
• Verifying bank transfer payments
• Sending order confirmations and status updates
• Providing customer support via WhatsApp or email
• Improving our website and services
• Complying with legal obligations

We will not use your data for unsolicited marketing without your consent.

4. Data Sharing

We do not sell, trade, or rent your personal data to third parties. We may share your information only in the following circumstances:

• Delivery partners — your name and address may be shared with our courier service to fulfil your order.
• Legal requirements — we may disclose your data if required by law or in response to a valid legal request.
• Business transfers — in the event of a merger or acquisition, your data may be transferred to the new owner.

5. Cookies

Our website uses cookies to improve your browsing experience. Cookies are small text files stored on your device. We use:

• Essential cookies — required for the website to function (e.g. shopping cart).
• Analytics cookies — to understand how visitors use our site (e.g. Google Analytics).

You can disable cookies in your browser settings, although this may affect website functionality.

6. Data Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. Our website uses HTTPS encryption to secure data in transit.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

You have the following rights regarding your personal data:

• Right to access — request a copy of the data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your data ("right to be forgotten").
• Right to restrict processing — request we limit how we use your data.
• Right to data portability — request your data in a machine-readable format.
• Right to object — object to processing of your data in certain circumstances.

To exercise any of these rights, please contact us at info@sandy.com.pk.

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy. You may request deletion of your data at any time, subject to legal obligations.

9. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

If you believe your data has been mishandled, please contact us and we will look into it.