Privacy Policy

This Privacy Policy explains how RUFA ("RUFA", "we", "us", or "our") collects, uses, shares, and protects your personal information when you use our website (rufa.pk), our mobile application, or otherwise interact with us as a customer. By creating an account, placing an order, or otherwise using our services, you agree to the collection and use of information in accordance with this policy.

Account information. When you register or log in, we collect your name, email address, phone number, and a password (stored in encrypted/hashed form — we never store your password as plain text).

Order and delivery information. When you place an order — including as a guest, without creating an account — we collect the delivery details you provide: recipient name, phone number, email, delivery address, city, and any order notes. We also keep a record of the items you purchased, order status, and order history.

Cart information.If you're not signed in, the items in your cart are stored locally on your device so you don't lose them between visits. Once you sign in, your cart is stored on our servers and associated with your account.

Session information. To keep you signed in, we use secure, encrypted session cookies (or, in the mobile app, their local equivalent). These identify your session but do not themselves contain your personal details.

Information you choose to share.If you contact us via WhatsApp using an in-app or on-site "Order on WhatsApp" button, the product details and message you send are shared with WhatsApp/Meta as part of that conversation, subject to WhatsApp's own privacy policy. We only initiate this when you tap the button yourself.

We do not collect payment card details. All orders are currently fulfilled on a Cash on Delivery basis, so no card or bank information passes through our systems.

We use the information we collect to:

• Create and manage your account, and keep you signed in
• Process, fulfil, and deliver your orders, and share necessary delivery details (name, phone, address) with our delivery/courier partners for that purpose
• Show you your order history and order status
• Respond to customer support requests and communicate with you about your orders
• Maintain the security of our website and app, and prevent fraud or abuse
• Comply with legal obligations, such as tax and accounting record-keeping

We do not sell your personal information to third parties, and we do not use your data for third-party advertising.

We share personal information only where necessary to run our business:

• Delivery partners — to deliver your order, we share the recipient name, phone number, and delivery address with our courier/delivery partners.
• Service providers — we use third-party infrastructure providers (such as cloud hosting and file storage) to run our website and app. These providers process data on our behalf and are not permitted to use it for their own purposes.
• WhatsApp — only when you choose to contact us through a WhatsApp button, as described above.
• Legal requirements — if required to do so by law, or to protect the rights, property, or safety of RUFA, our customers, or others.

We keep your account and order information for as long as your account is active, and afterwards for as long as needed to fulfil the purposes described in this policy — including resolving disputes, maintaining accurate order and financial records, and complying with our legal obligations.

We use industry-standard measures to protect your information, including encrypted connections (HTTPS), hashed password storage, and access-controlled session cookies. No method of transmission or storage is 100% secure, but we work to protect your information and to promptly address any issues that arise.

You can review and update your account details at any time by signing in. You may also contact us to:

• Request a copy of the personal information we hold about you
• Ask us to correct inaccurate information
• Ask us to delete your account and associated personal information, subject to any records we're required to keep for legal or accounting purposes

To make any of these requests, contact us using the details in Section 10 below.

Our services are not directed at children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We'll update the effective date at the top of this page when we do. We encourage you to review this page periodically.

If you have any questions about this Privacy Policy or how we handle your information, contact us at rufa@gmail.com.