Privacy policy

What we collect

• Order details: your name, email, mobile number and delivery address, the designs you order and how you pay.
• Bank transfer receipts: if you pay by bank transfer, the receipt you upload so we can match your payment.
• Your account: your email address. We never ask for or keep a password. If you sign in with Google, Google tells us only your name, email address and that the email is verified.
• Your bag: what you add to it, kept with a cookie so it's still there when you come back.
• Visits: pages viewed, searches, and what you add to your bag or buy, with your browser and device type and IP address (see “Advertising” below).

We don't take card payments, so we never see or store card numbers.

Why we use it

• To deliver your order, collect payment and contact you about it.
• To send your order confirmation and your sign-in codes by email.
• To let you see your orders in your account or with Track order.
• To measure our Facebook and Instagram ads and show them to people likely to be interested.
• To keep the site secure and stop abuse, such as too many sign-in attempts.

We don't sell your information to anyone.

Advertising (Meta Pixel)

We use the Meta Pixel and Meta's Conversions API, from Meta Platforms (Facebook and Instagram). They tell Meta when you view a design, search, add to your bag, start checkout, sign up or place an order, so we can see which ads work. When you check out or sign in, we also send Meta your email, mobile number, name and city in scrambled (hashed) form, so Meta can match the visit to your Meta account without us sharing the details themselves. Meta's use of this data is covered by Meta's privacy policy, and you can control the ads you see in your Facebook or Instagram ad settings.

If your browser sends the Global Privacy Control signal, we don't load the Pixel and send Meta nothing about your visit.

Who else sees it

• Courier companies get your name, mobile number and address to deliver your order, and the amount to collect for Cash on Delivery.
• Meta, as described above.
• Google, only if you choose Continue with Google to sign in.
• Our email provider, which delivers our emails to you.
• Authorities, if the law requires it.

Our website and order records are kept on our own server in Pakistan.

How long we keep it

We keep orders and the details on them for as long as we need them for delivery, returns, accounts and tax records. Sign-in codes expire after 10 minutes. Your account stays until you ask us to delete it.

Your choices

You can see your details and orders in your account and change your name, phone and addresses there. To get a copy of what we hold, correct it, or delete your account and personal details, email support@maiorah.pk from the address you use with us. We'll reply within 30 days. We may need to keep some order records where the law requires it.

Children

Our shop is for adults. We don't knowingly collect details from anyone under 18.

Changes

If we change this policy, we'll update it here and change the date at the top. See also our terms and conditions.