Privacy Policy

Naeem Stationery & General Store, D Block, Gulshan Ali Housing Scheme, Sahiwal, Pakistan. This policy covers our website, naeemshop.online, and the Naeem Shop app for Android, which shows the same website.

• When you create an account: your name, email address, phone number, address and a password. The password is stored only in a scrambled form that nobody, including us, can read.
• When you place an order, with an account or as a guest: your name, phone number, delivery address and, if you give it, your email address; the products you order, the delivery time you choose and any note you add for us. When the delivery charge depends on distance, also the delivery pin you place on the map and the road distance to it.
• Your location, only if you tap “Use my current location” to place the delivery pin. Your phone or browser asks your permission first. We don’t follow your location at any other time, and you can always place the pin on the map yourself.
• When you use the contact form: your name, email address, subject and message.
• When you call or message us on WhatsApp: what you tell us there.

We only take cash on delivery, so we never ask for card or bank details.

• Visits and page speed: Vercel Analytics and Speed Insights count the pages visited and how fast they load, without cookies and without identifying you.
• Meta Pixel: to measure our ads on Facebook and Instagram, Meta’s pixel records the shop pages you view and what you do there (viewing or searching for products, adding to the cart, starting checkout, placing an order, contacting us). Meta may set its cookies (_fbp, _fbc). When you place an order, our server also tells Meta about the order (its value and products), with your email address and phone number in a one-way scrambled form (hashed), your IP address and your browser type, so Meta can match the order to an ad.
• Security: to stop password guessing and spam, we count recent attempts to log in, register, order or send a message, by IP address or account. These counters hold the address only in a scrambled form, and are deleted after about a day.

Your cart, wishlist, login session, your details from your last guest order (so you don’t type them again), your last delivery pin, and your choices of light or dark look and of card or list view are kept in your browser or the app on your phone. They don’t reach us until you place an order. Logging out ends your session, “Clear saved details” at checkout forgets your guest details, and clearing the site’s data removes all of them.

• To prepare and deliver your order, and to call or message you about it.
• To run your account, and to email you a link when you ask to reset your password.
• To answer your messages.
• To keep the shop safe from misuse.
• To see which of our ads bring customers to the shop.

• Our delivery rider: your name, phone number, address, delivery pin, order and note, sent on WhatsApp, so they can deliver.
• The services that run the shop for us: Supabase (our database and logins, on servers in Mumbai), Vercel (website hosting), Resend (password reset emails, and contact form messages to us), openrouteservice (only the coordinates of the delivery pin, to work out the road distance) and Meta (as above). Cloudinary stores our product photos and receives none of your details.
• Anyone the law requires us to give them to.

We don’t sell or rent your details to anyone.

Your account details stay while you have an account. Orders stay in our records for our accounts and for returns (see our return policy). Contact messages stay as long as we need them to help you.

• Ask us what we hold about you, to correct it, or to delete your account and details. Records of past orders that we need for our accounts may be kept.
• Change your password from your account, or reset it from the login page.
• Say no to location access: you can place the delivery pin yourself.
• Block or limit Meta’s cookies in your browser settings, and your ad choices in your Facebook settings.

Our shop is meant for adults buying for themselves or their families. We don’t knowingly collect details from children under 13. If you think a child has given us their details, contact us and we will delete them.

When we change what we collect or who we share it with, we update this page and the date at the top.

For any question about your details, call or WhatsApp us on +92 302 5889452, or visit our shop.