Your details, and nothing more.

KAVÉ Perfumes is a perfume house based at Karachi, Pakistan, trading online at https://kaveperfumes.com. When you order from us, join our mailing list, or send us a message, we are the ones who decide what happens to that information and we are responsible for it.

This policy covers https://kaveperfumes.com and the email we send you. It does not cover a site we link out to — Instagram, Facebook, TikTok and our payment provider each have their own policy, and once you are on their page you are under their terms.

Questions, corrections or a deletion request: hello@kaveperfumes.com, or WhatsApp +92 302 123 1659.

Only what an order actually needs. There is no profiling, no data broker, and nothing bought in from anywhere else.

• What you type at checkout — your name, email address, phone number and the delivery address, plus any note you leave for the courier.
• What you ordered — the fragrances, sizes, quantities, the price you paid, the payment method, and the order's status over time.
• What you send us — the contact form, an email, or a WhatsApp message, and our reply.
• A review, if you write one — the name you sign it with, the rating and the text are published once approved.
• Your email address on its own, if you joined the mailing list and never ordered.
• Technical detail our server records as any web server does — IP address, browser and device type, which pages were requested and when.

We do not ask for your date of birth, your ID card number, or anything about your finances. If a form ever seems to be asking for more than an order needs, that is a bug — please tell us.

We do not make anyone sign up to buy something. But an order has to belong to somebody, so when you check out we quietly create an account against the email address you entered and attach the order to it. That is what makes order tracking and your order history work.

That account has no password until you set one. If you later register with the same email address, the password attaches to the account that is already there and every order you have placed comes with it.

• To fulfil the order — take payment, hand the parcel to the courier, and tell you when it ships and when it arrives.
• To answer you — a question about an order, a return, or which fragrance to pick.
• To keep the shop working — stock counts, coupon limits, and spotting a fraudulent or duplicated order.
• To keep the records we are required to keep, such as sales and tax records.
• To send you releases and offers, but only if you asked for them, and only until you tell us to stop.

We do not sell your information, rent it, or trade it. Nobody pays us for access to our customer list, and we have no intention of changing that.

We never see your full card number. Choosing to pay by card or wallet hands you over to PayFast Pakistan (Bank Alfalah's payment gateway); you enter the card on their page, and they tell us one thing — whether the payment succeeded.

What we keep is the method you used, the amount, the status, and the reference PayFast gives the transaction: enough to match a payment to an order and to refund it later. Cash on delivery involves no card at all — you pay the courier at your door.

A short, fixed list, and each of them only gets the part they need to do their job:

• The courier — your name, address and phone number, so the parcel can be delivered.
• PayFast Pakistan — the order amount and reference, for a card or wallet payment.
• Our email provider — your email address and the message, so a confirmation can reach you.
• Our hosting provider — which stores the site and its database on our behalf.
• A lawyer, an accountant, or an authority — only where the law requires it, or to defend a legal claim.

Some of these providers run servers outside Pakistan, which means your details may be processed abroad. We use established providers who are contractually bound to handle the data on our instructions and not for their own purposes.

Three things of ours are stored in your browser, and none of them follows you off this site:

• A cart identifier, so your bag survives a refresh. It is httpOnly — script on the page cannot read it.
• A signed session cookie once you are signed in, so the site knows the account is yours.
• Your light or dark theme choice, kept in local storage rather than a cookie.

We also use Google Analytics to see which pages get visited and whether a visit ended in an order. It sets its own cookies. We do not advertise to you and we do not sell your details.

You can clear or block cookies in your browser at any time. Blocking the two essential ones will break the cart and sign-in — the shop cannot work without them.

Order email — confirmation, dispatch, delivery — is part of the purchase and goes out whether or not you are on the mailing list. You cannot unsubscribe from it, because it is the receipt for something you bought.

Marketing email goes only to people who joined the list. Every one of those carries an unsubscribe link that works in one click, with no sign-in and no questions. If you leave something in your cart we may send a single reminder; unsubscribing stops that too.

• Orders and their invoices — for as long as tax and accounting law requires a sales record to be kept, and no longer.
• Your account and the addresses on it — until you ask us to delete it.
• Messages and their replies — around two years, so we still have the history if the same issue comes back.
• Mailing list — until you unsubscribe. We keep the fact that you unsubscribed, so nothing sends to you again by accident.
• Server logs — a short period, then they are overwritten.

The whole site is served over HTTPS, so what you type is encrypted on its way to us. Passwords are never stored as passwords — they go through a one-way hash (scrypt) with a per-account salt, so even we cannot read yours and a reset is the only way back in.

The admin panel checks who you are on the server for every single request rather than merely hiding a link, and access is limited to the people who run the shop.

No system is perfect. If a breach ever affects your details, we will tell the people affected rather than hope nobody notices.

• A copy of what we hold about you.
• A correction — a misspelt name, an old address, the wrong phone number.
• Deletion of your account and your details, apart from the order records the law makes us keep.
• Removal from the mailing list, which is also the one-click link at the bottom of any marketing email.
• Removal of a review, where you are the one who wrote it.

Email hello@kaveperfumes.com from the address the order was placed with, or WhatsApp us on +92 302 123 1659. We reply within a few working days and complete the request within 30 days. There is no charge.

The shop is not aimed at children and we do not knowingly collect anything from a child under 18. If you believe a child has given us their details, write to us and we will delete them.

When our practices change, this page changes with them and the date at the top moves. If a change is significant — a new category of data, a new recipient — we will say so on the site rather than quietly editing the text.