📅 Last updated: January 2026. This policy applies to all users of www.ygcpl.com and the Taqwa Haya mobile app.
1 Information We Collect
When you shop with us, create an account, or contact our support team, we may collect the following information:
- Identity data: Full name, date of birth (if provided)
- Contact data: Email address, phone number, delivery address
- Order data: Products purchased, order history, preferences
- Payment data: We do not store card numbers. Payments are processed by JazzCash, Easypaisa, or our PCI DSS-compliant payment gateway — we only receive a transaction reference.
- Technical data: IP address, browser type, device type, pages visited, time on site (via cookies)
- Marketing data: Your communication preferences, newsletter subscription status
2 How We Use Your Information
We use your personal data only for legitimate business purposes:
- Processing and fulfilling your orders, including dispatch and delivery notifications
- Managing your account and providing customer support
- Sending transactional emails (order confirmations, shipping updates, receipts)
- Sending marketing communications — only if you have opted in
- Improving our website, product selection, and customer experience through analytics
- Complying with legal obligations (tax records, fraud prevention)
We will never use your data in ways you would not reasonably expect, and we will always give you the option to opt out of marketing communications.
3 Sharing Your Data
We do not sell, rent, or trade your personal data to third parties. We share data only with trusted partners who help us operate our business:
- Payment processors: JazzCash, Easypaisa, Stripe — only what's needed to complete your transaction
- Shipping couriers: TCS, Leopards, DHL, FedEx — your name and delivery address only
- Suppliers: CJDropshipping — order fulfilment data only, no financial information
- Analytics: Google Analytics (anonymised) for website improvement
All third-party partners are contractually required to keep your data confidential and use it only for the stated purpose.
4 Cookies
We use cookies to make our website work properly and to understand how visitors use it. Types of cookies we use:
- Essential cookies: Required for the website to function (cart, login session). Cannot be disabled.
- Analytics cookies: Help us understand traffic and improve the site. Can be declined.
- Preference cookies: Remember your settings (currency, language). Can be declined.
- Marketing cookies: Used to show relevant ads on other platforms. Only active with your consent.
You can manage or withdraw cookie consent at any time via your browser settings or our cookie preference panel.
5 Data Retention
We keep your data only as long as necessary:
- Order records: Retained for 7 years to comply with Pakistani tax law
- Account data: Kept for as long as your account is active, deleted within 30 days of account closure on request
- Marketing data: Deleted immediately upon unsubscribe request
- Analytics data: Anonymised after 14 months
6 Your Rights
Under applicable data protection laws, you have the right to:
- Access: Request a copy of all personal data we hold about you
- Correction: Ask us to correct inaccurate or incomplete data
- Deletion: Request that we delete your personal data ("right to be forgotten")
- Portability: Receive your data in a machine-readable format
- Objection: Object to processing of your data for marketing purposes
- Restriction: Ask us to restrict how we use your data in certain circumstances
To exercise any of these rights, email us at privacy@ygcpl.com. We will respond within 30 days.
7 Security
We take data security seriously and implement industry-standard measures to protect your information:
- 256-bit SSL/TLS encryption for all data in transit
- PCI DSS Level 1 compliant payment processing — we never see or store your card details
- 3D Secure 2.0 authentication for card transactions
- Regular security audits and penetration testing
- Staff trained in data protection and GDPR best practices
In the unlikely event of a data breach affecting your information, we will notify you within 72 hours as required by law.
8 Contact & Complaints
For any privacy-related questions, data requests, or complaints:
📧 Privacy Officer: privacy@ygcpl.com
📍 Address: Taqwa Haya, 3rd Floor, Dolmen Mall Clifton, Karachi 75600, Pakistan
📞 Phone: +92-21-3456-7890
If you are unsatisfied with our response, you have the right to lodge a complaint with the Pakistan Telecommunication Authority (PTA) or your local data protection authority.