Privacy Policy

Last Updated: March 17, 2026

Welcome to Hair We Go. Your privacy is a fundamental right, protected under Article 14 of the Constitution of Pakistan. This policy outlines how we handle your data in compliance with the Prevention of Electronic Crimes Act (PECA) 2016 and standard e-commerce best practices.

1. Data Collection

We collect only the essential information required to deliver your "Rice to meet you" hair mask and other products:

• Personal Identifiers: Name and gender for order personalization.
• Contact Information: Email address for order confirmations and shipping updates.
• Logistics Data: Physical shipping address for delivery via our courier partners.
• Technical Data: IP address and browser type for fraud prevention and site optimization.

2. Purpose of Processing

We use your data strictly for the following legal purposes:

• Fulfilling orders and processing returns.
• Communicating important updates regarding your purchase.
• Improving our website performance and user experience.
• Complying with Federal Board of Revenue (FBR) record-keeping requirements.

3. Payment Security

Protecting your financial data is our highest priority. All transactions are handled through secure, encrypted third-party payment gateways. Hair We Go does not store or have access to your credit card, debit card, or bank account details.

4. Data Sharing & Third Parties

We never sell your personal data. We only share information with authorized service providers, such as:

• Courier Partners: Name and address shared for package delivery.
• Analytics: Anonymous usage data shared with platforms like Google and Meta to improve our marketing.

5. Your Rights & Control

Under Pakistani law, you have the right to:

• Request access to the personal data we hold about you.
• Ask for the correction of inaccurate data.
• Request the permanent deletion of your data once an order is fulfilled.
• Opt-out of any marketing emails via the "Unsubscribe" link.

6. Data Security

We use industry-standard SSL encryption and secure servers to protect your information from unauthorized access, as required under PECA 2016 regulations.