Privacy Policy

Your Data, Your Rights

Privacy Policy

We collect only what we need, we never sell your data, and we are fully transparent about everything we do with your information.


Last updated: 11 April 2026  ·  Applies to: zartajk.com

GDPR-Compliant Policy

If you are based in the United Kingdom or European Union, you are protected by GDPR. This policy has been written to comply with those rights in full. All your rights are clearly listed in Section 8.

Plain-English Summary

We collect your name, address, email, and phone number to fulfil your order and stay in touch. We use cookies to make the website work. We share your data only with couriers and payment processors. You can ask us to delete your data at any time. That is essentially it, but please read the full policy below.

Section 01

Who We Are

Zartajk is an online brand based in Sadiqabad, Punjab, Pakistan. We sell eastern clothing for men, women, and children, kundan jewelry, and traditional khussa footwear, primarily to Overseas Pakistani customers around the world.

For the purposes of this Privacy Policy, Zartajk is the data controller, meaning we determine how and why your personal data is collected and used.

Contact: support@zartajk.com  |  WhatsApp: +92 304 399 6006  |  www.zartajk.com

Section 02

What Data We Collect

We collect personal data only when you interact with us, by browsing, placing an order, contacting us, or subscribing to our newsletter.

Type of data What it includes When collected
Identity data Full name When you place an order or contact us
Contact data Email address, phone / WhatsApp number At checkout or when you contact us
Delivery data Shipping address, city, country, postcode At checkout
Order data Items purchased, order value, payment reference, measurements for custom orders At checkout and during fulfilment
Communications data Messages sent via email, WhatsApp, or contact forms When you contact us
Technical data IP address, browser type, device, pages visited Automatically when you browse
Marketing data Newsletter subscription status, email preferences Only with your explicit consent
What we do not collect: We do not store payment card numbers, bank account credentials, or wallet PINs. Payments are handled directly through your bank or mobile wallet, we only receive a screenshot confirmation from you.
Section 03

Why We Collect Your Data

We use your data only for specific, legitimate purposes. We do not use it for anything we have not told you about.

  • To process and fulfil your order — packaging, dispatch, tracking, and delivery to your address
  • To communicate about your order — confirmation emails, pre-shipment photos, tracking updates, and delivery notifications
  • To respond to your enquiries — messages sent via email, WhatsApp, or our contact form
  • To process custom stitching orders — storing measurements you submit to produce your garment accurately
  • To comply with legal obligations — retaining transaction records for accounting and tax purposes
  • To send marketing emails — only if you have given us explicit consent; opt out at any time
  • To improve our website — using google analytics to understand how visitors use zartajk.com
Section 04

Legal Basis for Processing (GDPR)

If you are in the UK or EU, data protection law requires us to have a valid legal basis each time we process your personal data.

Purpose Legal basis
Fulfilling your order and delivering goods Contract — necessary to perform the agreement you entered into with us
Communicating about your order Contract — necessary to deliver the service you purchased
Keeping financial and transaction records Legal obligation — required by law
Sending marketing emails or promotions Consent — only when you have explicitly opted in; withdraw anytime
Improving our website via analytics Legitimate interests — we have a genuine interest in understanding how our site is used, provided this does not override your rights
Section 05

Who We Share Your Data With

We share your personal data only where strictly necessary. We never sell it, rent it, or share it with advertisers.

  • Courier and logistics services — your name and delivery address are shared with the courier delivering your parcel (e.g. Pakistan Post, TCS, DHL, or an equivalent international carrier)
  • Payment processors — your payment is handled directly through your bank, JazzCash, Easypaisa, or SadaPay. We receive only a payment reference screenshot, not your credentials
  • Shopify (our platform) — our website runs on Shopify, which stores order data on secure, GDPR-compliant servers. Read Shopify's privacy policy at shopify.com/legal/privacy
  • Email marketing platform — if you subscribe to our newsletter, your email is stored with our email provider. You can unsubscribe at any time via any email we send
  • Legal authorities — if required by law, court order, or a regulatory authority. We will notify you if this occurs, unless legally prohibited from doing so
We will never sell your personal data to third parties, share it with advertisers, or use it beyond what is described in this policy.
Section 06

Cookies

Cookies are small text files stored on your device when you visit a website. They help the site remember you and function correctly. We use a minimal number of cookies, only what is genuinely needed.

You can manage or delete cookies at any time through your browser settings. Disabling essential cookies may prevent the shopping cart and checkout from working correctly. We do not use advertising or tracking cookies.

Section 07

How Long We Keep Your Data

We keep data only for as long as necessary for the purpose it was collected, or as required by law.

  • Order and transaction records — retained for up to 7 years to comply with financial and tax obligations
  • Customer account data — kept while your account is active, plus a reasonable period after your last order in case of disputes or returns
  • Custom stitching measurements — retained for up to 2 years in case you reorder, then securely deleted
  • Marketing preferences and email — kept until you unsubscribe or request deletion
  • Support communications — retained for 2 years from the date of your last message
  • Analytics data — anonymised and retained in aggregate; identifiable data deleted within 26 months

When data is no longer needed, it is securely deleted or anonymised so it can no longer be traced back to you.

Section 08

Your Rights

If you are in the UK, EU, or another jurisdiction with data protection laws, you have the following rights. To exercise any of them, email us at hello@zartajk.com. We will respond within 30 days.

Access

Request a copy of all personal data we hold about you.

Rectification

Ask us to correct any inaccurate or incomplete information.

Erasure

Ask us to delete your data — the "right to be forgotten" — subject to legal retention rules.

Object

Object to processing your data for marketing or legitimate interests.

Portability

Receive your data in a machine-readable format to transfer elsewhere.

Restrict

Ask us to pause processing your data while a dispute is being resolved.

Withdraw Consent

Opt out of marketing at any time by unsubscribing or contacting us.

Complain

Lodge a complaint with your national data protection authority.

How to exercise your rights Email hello@zartajk.com with the subject line "Privacy Request" and state which right you are exercising. We respond within 30 days and may ask you to verify your identity first.
Section 09

International Data Transfers

Zartajk is based in Pakistan. If you are located in the UK, EU, or elsewhere, your personal data will be transferred to and processed in Pakistan when you place an order with us.

Pakistan does not currently hold an EU adequacy decision. However, we take the following steps to protect your data:

  • We use Shopify as our platform, which operates under strong contractual data protection safeguards
  • We transfer only the minimum personal data necessary to fulfil your order
  • All team members who handle your data are bound by confidentiality obligations

By placing an order with Zartajk, you acknowledge and consent to this transfer, which is necessary to deliver your purchase.

Section 10

Children's Privacy

Zartajk's website is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16 years old.

We sell children's clothing, but all purchases must be made by a parent or guardian who is at least 18. If you believe a child under 16 has submitted personal data to us without parental consent, please contact us at hello@zartajk.com and we will delete it promptly.

Section 11

Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email (if you have an account) and update the "Last updated" date at the top of this page.

We encourage you to review this page periodically. Continued use of zartajk.com after changes are published constitutes your acceptance of the updated policy.

Section 12

Contact Us & Complaints

For any questions, rights requests, or data concerns — please get in touch:

  • Email: hello@zartajk.com
  • WhatsApp: +92 304 399 6006
  • Website: www.zartajk.com
  • Location: Sadiqabad, Punjab, Pakistan

If you are in the UK and unhappy with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. EU residents may contact their local Data Protection Authority.

We take every privacy request seriously. All requests are handled personally. We will acknowledge receipt within 5 business days and respond in full within 30 days.

Questions About Your Privacy?

We are happy to explain anything in plain language. Just reach out.

Email Us Contact Page
Zartajk — Sadiqabad, Punjab, Pakistan  ·  hello@zartajk.com  ·  Last updated April 2026