Privacy Policy

Last updated: July 23, 2026

Your privacy is not a feature at Alhaya Secrets — it is the foundation of our business. We sell intimate apparel, and we understand that discretion matters deeply to our customers in Pakistan. This policy explains exactly what we collect, why, and how we protect it.

1. What we collect

• Order details: name, phone number, email, delivery address and city — required to deliver your order.
• Account details (optional): name, email, phone and an encrypted password if you create an account.
• Messages: anything you send us via the contact form or WhatsApp.
• Technical data: basic logs (IP address, browser type) used for security and preventing abuse — for example, blocking repeated failed login attempts.

2. What we do NOT collect

• We never see or store card numbers, JazzCash/Easypaisa PINs or wallet credentials — online payments are handled entirely by licensed payment providers.
• We do not buy, rent or sell customer lists, and we never share your purchase history with anyone.

3. How we use your information

• To process and deliver your orders, and send order confirmation and status emails.
• To respond to your questions and provide sizing help when you ask for it.
• To send our newsletter — only if you subscribed, and every email includes a way to opt out.
• To protect the website against fraud and abuse (rate limiting, security logs).

4. Discreet delivery

Every parcel ships in plain, unbranded packaging. The courier waybill describes the contents only as "clothing" and shows the sender name in a neutral format. The courier never knows what is inside your parcel.

5. Who we share data with

• Courier partners: your name, phone and address — the minimum needed to deliver.
• Payment providers: the order amount and reference — only when you choose online payment.
• Nobody else. We do not share data with advertisers or data brokers. We disclose information only if required by Pakistani law enforcement with lawful authority.

6. How we protect your data

• The entire website runs over an encrypted HTTPS connection.
• Passwords are stored using strong one-way hashing — even we cannot read them.
• Access to order data is limited to authorised staff only.
• Login and password-reset systems are protected against brute-force attempts.

7. Cookies

We use only essential cookies: one to keep your session and cart working, and one to remember recently-viewed products on your own device. We do not use third-party advertising or tracking cookies.

8. Your rights

• You may request a copy of the personal data we hold about you.
• You may ask us to correct or delete your account and personal data (we may retain minimal order records required for accounting).
• You may unsubscribe from marketing emails at any time.

To exercise any of these rights, email [email protected].

9. Changes to this policy

If we make material changes we will post the new version here with an updated date. Continued use of the site after changes means you accept the updated policy.