Privacy policy
Last updated: 5 Nov 2026
This policy explains what we collect when you use this website or order from us, why, and what you can ask us to do with it.
What we collect
- Order details: name, phone, city, delivery address, optional email, items, payment method and order notes.
- Gift orders: the sender's name, phone and country, and the recipient's name, phone and address.
- Uploads: payment receipts and claim photos you send us.
- Waitlist and enquiries: the phone number and details you give.
- Saved bag at checkout: once you type your phone number at checkout, we save your bag with that number so our team can WhatsApp you once if the order is not finished. We never message more than once about the same bag.
- Your account: saved delivery addresses and your referral code, linked to your phone number.
- WhatsApp updates (only if you tick the box): your number, so we can send seasonal news such as new gur, Ramzan and Eid boxes and mango bookings. Reply STOP or ask us, and we remove you.
- Reviews: the name and city you choose to show, your rating and text. Your phone and order number are never shown.
- Technical data: your IP address, kept with orders and forms to prevent fraud and abuse.
Why we use it
To deliver and confirm orders, to verify payments, to handle claims and reviews, to message you on WhatsApp about your order, and to tell waitlist members when mango bookings open. We do not sell or rent your data, and we do not use it for third-party advertising.
Who we share it with
Only the courier delivering your order (name, phone, address) and, when card or wallet gateways are switched on, the payment provider processing your payment. Our website runs on Cloudflare, which processes data on our behalf.
Cookies and storage
We set no advertising or tracking cookies unless you accept them (see the end of this section). Your browser stores your bag and language choice on your own device. Signing in to My orders (with an order number and phone, no password) and staff sign-in each use a secure session cookie; you can sign out at any time. If we enable Cloudflare Web Analytics, it measures visits without cookies. When we advertise on Facebook, Instagram or Google, we may also use their measurement tags (Meta Pixel, Google Analytics, Google Ads) to count visits and purchases that came from an ad. These tags set cookies, so they load only if you choose Accept in the cookie notice; choose No thanks and they never load. You can change your choice from the link at the foot of every page.
How long we keep it
Order records are kept as long as tax and food-safety law requires. Payment receipts and claim photos are deleted when no longer needed for that order. You can ask us to remove waitlist data at any time.
Your choices
Ask us on WhatsApp or by email to see, correct or delete your data. We reply within 7 working days.
Law
We handle data in line with Pakistan's Prevention of Electronic Crimes Act 2016 and will update this policy when Pakistan's personal data protection law comes into force.