Privacy Policy

Who we are

Ombrevia hosts online storefronts for direct-to-consumer brands that sell across Pakistan with Cash on Delivery (COD) and optional online payment. This policy explains what personal information is collected when you place an order on any storefront hosted on Ombrevia, why it is collected, who it is shared with, and the choices you have. It applies to every brand storefront and product page served on this platform.

Information we collect

When you place an order, we collect only what is needed to deliver it:

• Order details — your full name, mobile number, delivery address, city, the product ordered, and quantity.
• Payment choice — whether you chose Cash on Delivery or to pay online, and any discount code you applied.
• How you found the page — basic campaign information from the link you arrived on (such as UTM tags or the referring site), used to understand which ads or channels bring customers.
• Technical information — your device's IP address is used briefly to protect the order form from abuse (rate limiting). It is not stored with your order.

What we never collect: card or bank details. If you choose to pay online, payment is completed on the secure page of a licensed payment gateway — card information is entered there and is never seen or stored by Ombrevia or the store.

How your information is used

• To process, confirm, and deliver your order — including the phone or WhatsApp call our team makes to confirm before dispatch.
• To provide customer service, handle returns, and keep an accurate record of your orders with the store.
• To prevent fraud and junk orders (for example, filtering automated submissions).
• To measure advertising performance, as described below.

Who we share it with

Your details are shared only with parties who need them to complete your order:

• Courier and delivery partners — receive your name, phone number, and delivery address so the parcel can reach you.
• Payment gateway — if you pay online, the gateway processes your payment on its own secure systems.
• Hosting and database providers — reputable cloud infrastructure providers store order data securely on our behalf.
• Meta (Facebook) ads measurement — when a store runs Meta ads and has measurement enabled, we send Meta's Conversions API the order value, currency, the address (URL) of the product page you ordered from (which may include ad-campaign parameters), and a one-way hashed (SHA-256) version of your phone number to attribute the sale to an ad. Your name, address, and raw phone number are never sent.

We never sell your personal information, and we never share it for purposes unrelated to your order.

How long we keep it

Order records are kept for as long as they are needed to fulfil your order, handle returns and customer service, and maintain reasonable business records. If you would like your details removed once your order is complete, contact the store and we will remove them unless a legal or accounting obligation requires keeping them.

Your rights and choices

You can ask at any time to:

• See the information the store holds about you;
• Correct anything that is inaccurate (for example, a wrong address or phone number);
• Have your information deleted, subject to any record-keeping obligations.

To make any of these requests, contact the store directly using the phone or WhatsApp number shown on its storefront — the same number our team uses to confirm your order.

Security

The storefront is served over an encrypted connection (HTTPS). Order data is stored in an access-controlled database, prices and totals are calculated on our servers (never taken from your browser), and access to order information is limited to the store team that fulfils your order.

Governing law and changes

This policy is governed by the laws of Pakistan, including the Prevention of Electronic Crimes Act (PECA) 2016 and applicable data-protection regulations. We may update this policy from time to time; the "Last updated" date above shows the current version. Continued use of the storefront after an update means the revised policy applies.