Legal

Privacy Policy

We respect your privacy and are committed to protecting your personal data. This policy explains what we collect, why, and how you can control it.

📅 Last updated: January 2026. This policy applies to all users of www.ygcpl.com and the Taqwa Haya mobile app.

1 Information We Collect

When you shop with us, create an account, or contact our support team, we may collect the following information:

  • Identity data: Full name, date of birth (if provided)
  • Contact data: Email address, phone number, delivery address
  • Order data: Products purchased, order history, preferences
  • Payment data: We do not store card numbers. Payments are processed by JazzCash, Easypaisa, or our PCI DSS-compliant payment gateway — we only receive a transaction reference.
  • Technical data: IP address, browser type, device type, pages visited, time on site (via cookies)
  • Marketing data: Your communication preferences, newsletter subscription status

2 How We Use Your Information

We use your personal data only for legitimate business purposes:

  • Processing and fulfilling your orders, including dispatch and delivery notifications
  • Managing your account and providing customer support
  • Sending transactional emails (order confirmations, shipping updates, receipts)
  • Sending marketing communications — only if you have opted in
  • Improving our website, product selection, and customer experience through analytics
  • Complying with legal obligations (tax records, fraud prevention)

We will never use your data in ways you would not reasonably expect, and we will always give you the option to opt out of marketing communications.

3 Sharing Your Data

We do not sell, rent, or trade your personal data to third parties. We share data only with trusted partners who help us operate our business:

  • Payment processors: JazzCash, Easypaisa, Stripe — only what's needed to complete your transaction
  • Shipping couriers: TCS, Leopards, DHL, FedEx — your name and delivery address only
  • Suppliers: CJDropshipping — order fulfilment data only, no financial information
  • Analytics: Google Analytics (anonymised) for website improvement

All third-party partners are contractually required to keep your data confidential and use it only for the stated purpose.

4 Cookies

We use cookies to make our website work properly and to understand how visitors use it. Types of cookies we use:

  • Essential cookies: Required for the website to function (cart, login session). Cannot be disabled.
  • Analytics cookies: Help us understand traffic and improve the site. Can be declined.
  • Preference cookies: Remember your settings (currency, language). Can be declined.
  • Marketing cookies: Used to show relevant ads on other platforms. Only active with your consent.

You can manage or withdraw cookie consent at any time via your browser settings or our cookie preference panel.

5 Data Retention

We keep your data only as long as necessary:

  • Order records: Retained for 7 years to comply with Pakistani tax law
  • Account data: Kept for as long as your account is active, deleted within 30 days of account closure on request
  • Marketing data: Deleted immediately upon unsubscribe request
  • Analytics data: Anonymised after 14 months

6 Your Rights

Under applicable data protection laws, you have the right to:

  • Access: Request a copy of all personal data we hold about you
  • Correction: Ask us to correct inaccurate or incomplete data
  • Deletion: Request that we delete your personal data ("right to be forgotten")
  • Portability: Receive your data in a machine-readable format
  • Objection: Object to processing of your data for marketing purposes
  • Restriction: Ask us to restrict how we use your data in certain circumstances

To exercise any of these rights, email us at privacy@ygcpl.com. We will respond within 30 days.

7 Security

We take data security seriously and implement industry-standard measures to protect your information:

  • 256-bit SSL/TLS encryption for all data in transit
  • PCI DSS Level 1 compliant payment processing — we never see or store your card details
  • 3D Secure 2.0 authentication for card transactions
  • Regular security audits and penetration testing
  • Staff trained in data protection and GDPR best practices

In the unlikely event of a data breach affecting your information, we will notify you within 72 hours as required by law.

8 Contact & Complaints

For any privacy-related questions, data requests, or complaints:

📧 Privacy Officer: privacy@ygcpl.com
📍 Address: Taqwa Haya, 3rd Floor, Dolmen Mall Clifton, Karachi 75600, Pakistan
📞 Phone: +92-21-3456-7890

If you are unsatisfied with our response, you have the right to lodge a complaint with the Pakistan Telecommunication Authority (PTA) or your local data protection authority.