Privacy policy

Herbrio is a small herbal hair care business selling in Pakistan through this website, herbrio.pk, and through WhatsApp and social media. We are the party responsible for the information described here.

You can reach us at orders@herbrio.pk or on WhatsApp at +923063330969.

When you place an order we ask for, and store:

• Your name and mobile number.
• Your email address, only if you choose to give one. It is optional.
• Your delivery address: city, area, street, and a nearest landmark if you add one.
• What you ordered, the amount, and the payment method you chose.
• Any note you add to the order.

If you pay in advance by JazzCash, Easypaisa or bank transfer, we also store the transaction reference, the sender name and number you enter, and the receipt image you upload. We need these to match your payment to your order.

If we ever switch on mobile number verification, a one time code is sent to your number. The code itself is stored only in scrambled form and is deleted after it expires.

Your shopping basket is kept in your own browser until you check out. It is not sent to us before you place the order.

We do not use advertising pixels or cross site trackers. There is no Google Analytics and no Facebook pixel. We set no cookies for advertising. The only cookie we use is for staff signing in to our own admin, and it is not set on the shop.

To know how many people visit the shop, we use Cloudflare Web Analytics, chosen because it is built not to identify anyone. It sets no cookies, does not fingerprint your device, does not record the search terms or other details that can appear after a ? in a web address, and does not follow you to other websites. It counts a page being opened, and records the country, the page, the site you arrived from, and the general type of browser and device. None of that is linked to you, to your order, or to anything else we hold. Because it cannot identify you, there is nothing here to ask your consent for and no cookie banner to click.

To take your order, deliver it, take payment for it, answer your questions about it, and keep the business records we are required to keep. We do not build customer profiles and we do not sell anything about you to anyone.

WhatsApp is how most of our customers prefer to reach us, and we use it in two ways.

When you message us first. If you start a conversation, we reply in that conversation. Your number and the messages are visible to us and are handled by WhatsApp, which is operated by Meta.

About an order you placed. When you give us your number at checkout, we may message you on WhatsApp about that order: to confirm it before we dispatch it, to tell you it has shipped, to send a tracking number, or to sort out a payment that did not match. These are messages about a purchase you made, not marketing.

We do not send marketing on WhatsApp unless you ask us to. If we ever do, we will ask for your agreement first and every such message will tell you how to stop.

To stop hearing from us on WhatsApp, reply STOP to any of our messages, or block the number. We will still need to contact you about an order that is already on its way, and we will use your phone or email for that instead.

Messages sent over WhatsApp pass through Meta's systems and are subject to WhatsApp's own privacy policy as well as this one.

We share the minimum needed, with these parties only:

• The courier delivering your parcel. They receive your name, phone number and address, because they cannot deliver without them.
• WhatsApp, operated by Meta, when we message you there.
• Our email provider, when we send you an order email. Email is sent from our own domain.
• Our bank or mobile wallet, if you pay in advance. They see the transfer, as they would for any payment.

We do not sell, rent or trade your information. We do not share it for anyone else's advertising.

We keep order records for as long as we need them for accounting and for handling returns or disputes, and no longer than the law requires us to. Receipt images are kept while the payment is being checked and for the period a dispute could reasonably arise.

Verification codes are deleted once they expire. Baskets left in your browser are yours to clear at any time.

Order information is held in our own database, reachable only by us. Access to the admin requires a password, and passwords are stored scrambled in a way that cannot be reversed. The website is served over an encrypted connection.

No system is perfect. If information is ever exposed in a way that affects you, we will tell you.

You can ask us to:

• Tell you what we hold about you.
• Correct anything that is wrong.
• Delete it, where we are not required to keep it.
• Stop messaging you.

Email orders@herbrio.pk or message +923063330969 and we will deal with it. We may ask you to confirm the mobile number used on the order, so that we do not hand your details to someone else.

This shop is not intended for children, and we do not knowingly collect information from anyone under sixteen. If you believe we have, tell us and we will remove it.

If we change how we handle your information, we will update this page and change the date at the top. Material changes will be described here rather than made quietly.