Privacy Policy

Who is responsible for your data

Elixir Bags, trading as Elixir, at The Central Mall, Marston Rd, Preedy Quarters Karachi, 75600, is responsible for the personal information collected through https://elixirbags.pk. For any question about your data, email info@elixirbags.pk or message us on +92 330 2196322.

What we collect

When you place an order we collect only what we need to get it to you:

• Your name, phone number, delivery address and city
• Your email address, if you choose to give one
• The items you ordered, the total, and any note you added
• Basic technical information such as your browser type and pages visited

Card and payment details

We do not collect, see or store card numbers, expiry dates or CVV codes. Card payments are handled entirely by Safepay, our payment gateway, which is licensed by the State Bank of Pakistan and handles cardholder data under the PCI DSS security standard.

What we receive back from Safepay is limited to whether the payment succeeded, a reference number, and the last few digits of the card so we can match a payment to an order.

Why we use it

Your information is used to process, confirm and deliver your order, to contact you about it, and to handle any return, refund or complaint that follows. We also use it to keep the records a business is required to keep.

We may occasionally email you about new pieces. Every one of those emails carries a one-click unsubscribe link, and using it stops them immediately and permanently. It never affects your orders: you will still receive confirmations for anything you buy, and we will still reach you on WhatsApp about a delivery.

We do not sell or rent your information to anyone, ever.

Who we share it with

We share the minimum necessary with a small number of service providers who help us run the shop:

• Our courier partner, so they can deliver your parcel: your name, address and phone number
• Safepay, our payment gateway, to process a card payment
• Our email provider, to send your order confirmation
• Our hosting and database providers, who store the site and its orders
• Google Analytics, which measures how the site is used. It receives page views and general information such as your country and device type, never your name, address or order details
• Meta (Facebook and Instagram), when we are advertising. It receives the pages you viewed and what you bought, so we can tell which of our adverts actually led to an order. Where we send your email address, phone number or city, they are scrambled into an unreadable code first, so Meta can only match them against records it already holds and can never read them
• The authorities, where the law requires us to

How long we keep it

We keep order records for as long as we need them to handle returns, refunds and disputes, and to meet our tax and accounting obligations. After that they are deleted. If you ask us to delete your details sooner, we will do so wherever we are not legally required to keep them.

How we protect it

The site is served entirely over an encrypted HTTPS connection. Order data is held in an access-controlled database, and only people who need it to fulfil your order can reach it. No system is perfect, but we do not hold the category of data that matters most, because card details never reach us at all.

Cookies

We use a small number of cookies and similar browser storage. Some keep the site working and remember what is in your cart. Others are set by Google Analytics, which tells us how many people visit and which pages they read, so we can see what is worth writing more of.

When we are advertising, Meta also sets a cookie so we can tell which of our adverts led to an order, and show our bags again to someone who looked at them and left. We never sell your browsing data to anyone. Your browser settings let you clear or block cookies, and browsers offer tracking protection that blocks the advertising one specifically; the cart will not work without cookies, but everything else on the site will.

Your choices

You can ask us what information we hold about you, ask us to correct it if it is wrong, or ask us to delete it. Message us on WhatsApp or email us and we will respond within 7 working days.

To stop receiving emails about new pieces, use the unsubscribe link at the bottom of any of them. We keep a record that you unsubscribed, and that record is the point: it is what stops you being added back the next time we update our list.

Changes to this policy

If we change how we handle your information, we will update this page and the date shown at the top of it.