Privacy policy

What we collect

We ask for the least we can and still get a parcel to your door. In practice that is:

When you place an order: your name, email address, phone number, delivery address, what you bought, and any note you add for the courier.
When you contact us: your name, your email or phone number, and the message you send.
When you join the mailing list: your email address, and nothing else.
While you browse: your cart, the checkout details you have typed but not yet submitted, and the last few products you looked at. These stay in your own browser and do not reach us until you place the order.
Automatically: our host keeps standard web-server logs, including your IP address and browser, as every web server does. We do not build a profile from them.

What we never collect

We never see, handle or store card numbers. We do not take card payments, and if we add them, payment will happen on the payment provider’s own secure page, with only a yes or a no and a reference number coming back to us.

We do not buy personal data from anyone, and we do not sell, rent or trade yours. There is no circumstance in which we would.

Why we hold it

Each thing above is held for one reason, and used for that reason only:

To fulfil your order: taking payment, booking the parcel with the courier, and telling you where it is.
To confirm a cash-on-delivery order: we email you a short code and ask you to enter it. It stops parcels being sent to people who never ordered them, which is the main way cash on delivery is abused. The code is stored hashed, never in plain text, and expires.
To answer you: if you write to us, we keep the thread, so whoever picks it up next knows what was already said.
To send marketing: only if you asked for it, and every email carries an unsubscribe link that works immediately.
To keep our books: orders are financial records and we keep them as such.

Who else sees it

A short list, and each gets only the part it needs to do its job. Only one is used for advertising, Meta; Google Analytics has its advertising features switched off:

Courier companies: your name, address and phone number, so they can deliver the parcel and call you if they cannot find the house.
Nobody, for payments: if you pay in advance, the money goes from your bank straight to ours. The screenshot, transaction ID and sender name you send us are stored privately and seen only by the staff who check payments.
Brevo: your email address and the contents of the message, to send order emails and any newsletter you signed up for.
Supabase: our database and file storage. Your order lives here.
Hostinger: our web host. It serves the site and keeps the server logs.
Google (Gemini): when we use it to answer our own questions about orders (your order number, items, amounts, status, city and first name) or to help draft a reply to a message you sent us (that message and your first name). Never your email address, phone number or street address.
Meta (Facebook and Instagram): which pages you visited and what you viewed, added to your cart or ordered (the product and the amount). We use it to measure our Instagram and Facebook ads and to show them to people who visited the shop. We do not send it your name, address, phone number or email.
Google Analytics: which pages you looked at and roughly where you came from, and only if you accepted analytics in the cookie banner. It never receives your name, address, email or anything you typed into the checkout.
Law enforcement: only against a lawful order, and only what that order actually requires.

Cookies and browser storage

The Meta pixel sets cookies so we can measure our Instagram and Facebook ads. Nothing else here sets an advertising cookie.

Your browser’s own local storage holds three things: the contents of your cart, the checkout details you have started typing so that a refresh does not lose them, and the handful of products you looked at most recently. All three stay on your device, are readable only by this site, and are what makes the shop work rather than what watches you use it. You can clear them from your browser at any time, and the only consequence is an empty cart.

While a page of the shop is open, it tells our server every 30 seconds which page it is on, whether it reached us from Instagram, WhatsApp, Google or elsewhere, the kind of device and how many pieces are in the cart, under a random number that lives only in that browser tab. That is how we see how many people are in the shop right now. It carries nothing about who you are, sets no cookie, and the server forgets it 30 minutes after you leave.

We use the Meta pixel to measure our Instagram and Facebook ads and to show them to people who have visited the shop. If you accept, we also use Google Analytics to see which pages people visit and roughly where they arrive from (it tells us that a product page was viewed, not who viewed it; its advertising features are off).

Google Analytics is off until you accept: its script is not loaded at all unless you say yes, and choosing "No analytics" keeps it off. The Meta pixel runs for every visitor; to limit what Meta does with it, use your ad settings in Facebook or Instagram, or a browser that blocks trackers. Your answer is remembered in your own browser, and you can change it whenever you like using the button below.

You have not answered the cookie notice yet. Nothing optional is running.

How long we keep it

Orders are kept for as long as tax and accounting rules require, because they are financial records and we are not free to delete them on request.

Everything else goes sooner. Mailing-list addresses are removed the moment you unsubscribe. Contact messages are kept while the matter is open and cleared out afterwards. Abandoned carts and half-filled checkout forms never reach us at all.

Your rights over it

Write to orders@zilix.shop from the address you ordered with, and you can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. We answer within a week, and we will not ask you to explain why.

The one thing we cannot do is delete an order that has been paid and delivered, for the accounting reason above. We can remove your marketing consent and your contact history immediately, and we will tell you plainly what was kept and why.

Pakistan does not yet have a single comprehensive data protection statute in force. This policy is written to the standard we would want applied to us rather than to the minimum currently required, and where a visitor is covered by a stricter regime abroad, we apply the same rights to them.

How it is protected

The site is served over HTTPS everywhere, so what you type on the checkout page is encrypted in transit. Our database enforces access rules row by row rather than trusting the browser, which means the shop’s front end has no way to read another customer’s order even if somebody tampers with it.

Order confirmation links carry a private token rather than a guessable number, so an order page cannot be found by counting up from someone else’s. Cash-on-delivery codes are stored hashed, with a secret that never leaves the server. Staff reach the admin panel through named accounts with permissions set per role.

Children

The shop is not aimed at children and we do not knowingly collect anything from anyone under 18. If you believe a child has sent us personal information, tell us and we will remove it.

Changes to this policy

If we start collecting something new, or hand data to somebody not on the list above, we will update this page and move the date at the top of it before that starts, not after.

The Oversized Block

Wide by default