Privacy Policy

EasyStore is operated by [Company legal name], [Registered address], Pakistan. Contact: [Support email]. This policy explains how we handle personal information on our website, in the store owner's dashboard, and for shoppers who buy from stores built with EasyStore.

This is a general description for people who use our service. It is not legal advice, and we are not claiming compliance with any particular data protection law. [Lawyer to align this with Pakistan's data protection law once in force and with any other law that applies.]

For store owners' own account information (email, password, store details, billing), EasyStore decides why and how the data is used. In legal terms we act as the controller.

For shoppers' information (name, phone, address, order details) that a store owner collects through their store, the store owner decides why it is collected. EasyStore only stores and processes it on the store owner's behalf, to run the store. In legal terms we act as a processor, and the store owner is the controller. Shoppers should contact the store about their orders and data, and may also contact us.

From store owners:

• Account details: email address, password (stored only in scrambled form), store name and address;
• Store content: products, photos, prices, pages, settings, and the tracking IDs you choose to add;
• Billing details when paid plans start: [Billing information collected];
• Messages you send us, and technical data such as IP address, browser type and the time of login attempts, used for security.

From shoppers, on behalf of stores:

• Name, phone number, delivery address and city;
• Email address, if given;
• Order details: items, amounts, delivery charge, payment method and status, notes;
• Technical data sent by the browser, such as device type and pages viewed.

• To provide the service: showing stores, taking and managing orders, and sending order updates;
• To process payments through Safepay and to help stores arrange delivery with couriers;
• To keep the service safe: preventing fraud, abuse and unauthorised access;
• To answer your messages and give support;
• To meet legal obligations, and to improve the service in ways that do not identify individual shoppers [confirm];
• We do not sell personal information.

Only with those who need it to provide the service:

• The store owner whose store you ordered from (their orders and customer list);
• Couriers chosen by the store owner, who receive the delivery name, phone, address and cash-on-delivery amount;
• Safepay, when a shopper pays online;
• Service providers who host our systems or send messages for us [list providers once chosen];
• Authorities, when the law requires it or a valid legal request is made.

Data is stored on servers run for EasyStore at [Hosting provider and country]. We use access controls, encrypted connections (HTTPS) and scrambled password storage, and we separate each store's data from other stores. No system is perfectly secure, so we cannot promise absolute security. If we learn of a serious breach affecting you we will tell you as the law requires. [Lawyer to confirm notice duties.]

We keep store and order data while the store account is active. After an account is closed we delete or anonymise it within [Retention period, e.g. 90 days], except records we must keep for accounting, tax or legal reasons. Security logs are kept for [Log retention, e.g. 12 months]. See the Data policy for a summary.

You can ask us to tell you what we hold about you, to correct it, or to delete it where the law allows. Store owners can change or delete much of their data in the dashboard. Shoppers can contact the store, or write to [Support email]; we may need to confirm who you are first. We will reply within [Response time, e.g. 30 days].

You can also complain to the authority responsible for data protection in Pakistan, if one applies. [Lawyer to name it.]

Our own marketing website does not use advertising or analytics cookies. When you log in we set a cookie that keeps you signed in; it is needed for the service to work.

Store owners may add tracking IDs (Meta Pixel, TikTok Pixel, Google Analytics) to their own stores. Those tools set their own cookies and receive information about shoppers' visits. The store owner is responsible for telling shoppers about this in the store's privacy policy.

EasyStore is for adults. Accounts are for people 18 and over, and we do not knowingly collect personal information from children. If you believe a child has given us information, contact [Support email] and we will delete it.

We may update this policy. The latest version is always on this page with its date, and we will tell store owners about important changes.

[Company legal name], [Registered address]. Email: [Support email].