Privacy Policy

About this policy

This Privacy Policy explains how Shawlam (“we,” “us,” “our”) collects, uses, shares, and protects your personal information when you visit Shawlam.pk, place an order, or contact us via WhatsApp, email, or social media. By using our site and services, you agree to the practices described here.

If you have questions, contact:

Email: contact@Shawlam.pk

WhatsApp: 0300-3918176

Address: Paras Photo State Opposite National Bank Usta Muhammad

Legal entity:

Who we are (data controller)

Shawlam curates and sells handwoven wool shawls sourced from trusted partners. For data protection, Shawlam (based in Pakistan) is the data controller for data collected on this website and through our customer channels.

What information we collect

We collect information you provide and data collected automatically:

Account and order details: name, email, phone, billing/shipping address, order notes
Payment info: handled by payment providers (we do not store full card details)
COD verification: contact number(s) and delivery address verification
Communication data: WhatsApp messages, emails, and call notes
Marketing preferences: email/SMS opt-ins, shade preferences
Reviews/UGC: ratings, photos, Q&A
Technical data: IP address, device/browser info, pages viewed, referral source
Cookies and similar tech: to operate the site, analyze performance, and personalize marketing

How we use your information

To process orders and deliver your purchases
To communicate about your order (confirmations, tracking, support)
To verify COD orders when necessary
To manage your account, wishlists, and reviews
To improve our site, products, and customer experience
For marketing with your consent (email/SMS/WhatsApp)
For fraud prevention, security, and legal compliance

Legal grounds (when required)

Performance of a contract (fulfilling your order)
Legitimate interests (site security, fraud prevention, service improvements)
Consent (email/SMS marketing, cookies beyond essential)
Legal obligations (tax/accounting records)

Payments

We use trusted payment gateways. Your payment details are processed by the provider and not stored on our servers.

Possible providers: Stripe/PayPal (if enabled), PayFast (PK), JazzCash/Easypaisa, bank transfer
For COD, we may confirm your order by call/WhatsApp
Please review your selected provider’s privacy policy.

Shipping and delivery partners

We share only necessary delivery information (name, phone, address, order number) with couriers to complete delivery.

Couriers we commonly use: TCS, Leopards, M&P

Cookies and tracking technologies

We use:

Essential cookies: site functionality, cart, checkout
Analytics: understand site use (e.g., Google Analytics 4)
Marketing: ads performance and personalization (e.g., Meta Pixel), only with consent where required

Your choices:

You can manage cookies in your browser settings
If a cookie banner is shown, use “Manage Cookies” to set preferences

Marketing communications

Email/SMS: sent only if you opt in. You can unsubscribe anytime via the link in our emails or reply “STOP” for SMS (where applicable).
WhatsApp: we may message order updates or support; you can ask to stop at any time.
We do not sell your personal data.

Sharing your information

We share data with service providers who help us operate our business:

Couriers and logistics partners
Payment gateways and fraud-prevention tools
Web hosting, security, and CDN (e.g., Cloudflare)
Email/SMS providers (e.g., Klaviyo, Mailchimp, or local SMS gateways)
Analytics and marketing platforms (e.g., Google Analytics, Meta)

We require these providers to protect your data and use it only for our purposes. We may also share information if required by law or to protect our rights.

User-generated content (reviews/photos)

If you submit a review, Q&A, or photos:

Your first name (or chosen display name) and review may be published on our site and marketing channels
You can request edits or removal at any time

Data retention

Orders, invoices, and related records: up to 6 years (for accounting/legal)
Customer support communications: up to 24 months
Analytics data: typically 14–26 months (per provider settings)
Marketing consent and suppression lists: kept as long as needed to honor your choices
Reviews/UGC: kept until you request removal

When retention periods expire, we securely delete or anonymize data.

Data security

We use SSL, secure hosting, firewall/CDN protection, access controls, and best practices to protect your data. However, no method of transmission or storage is 100% secure.

International transfers

Some service providers or servers may be located outside Pakistan. Where we transfer data internationally, we take reasonable steps to ensure your information is treated securely and in accordance with this policy.

Your rights

Subject to applicable laws, you may:

Access a copy of your personal data
Correct inaccurate or incomplete data
Delete your data (where legally possible)
Object to or restrict processing
Withdraw marketing consent at any time

To make a request, email contact@Shawlam.pk with the subject “Privacy Request” and include your name, contact info, and request details. We’ll respond within a reasonable time.

Children

Our site is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us to remove it.

Third‑party links

Our site may include links to other websites. We are not responsible for their privacy practices. Review their policies before submitting personal data.

Changes to this policy

We may update this Privacy Policy from time to time. The “Effective date” above will indicate the latest version. Material changes will be noted on this page.

Contact us