What we know about you, and why

What you tell us yourself

When you order. Your name, your phone number, the address the parcel goes to, and your email address if you give one. What you bought, what it cost, and how you chose to pay.

If you make an account. Your email address and a password. The password is hashed by our sign-in provider — we never see it, and nobody here can look it up or read it back to you.

If you leave a review. The name you put on it, what you wrote, and any photographs you attached. All three are shown publicly on the piece you reviewed, which is the point of leaving one.

If you ask to be told when something is back. Your phone number, kept against that one piece, used for that one message and nothing else.

If you leave a bag behind. If you reached the checkout and typed a phone number but did not finish, we keep that number and what was in the bag, and we may send one message asking whether you still want it.

What we notice while you browse

We keep our own record of how the shop is used, in our own database rather than somebody else's. For each visit that is which pages you opened, which pieces you looked at, which filters and buttons you tapped, which videos played, and what went into a bag.

Alongside it we store the technical context of the visit: your IP address, your browser's description of itself, the site you arrived from, any campaign tag in the link you followed, and the size of your screen.

Your IP address is turned into a city and then thrown away. After ninety days the IP address, the browser description and the referring site are erased from those rows automatically, and what is left is the city — the part that is actually useful to a shop deciding where to advertise. This is not housekeeping we promise to get round to: it is a scheduled job that runs whether anybody remembers it or not.

Cookies, and what we use instead

This site sets very little of its own. A random id for your visit lives in your browser's session storage and is gone when you close the tab. A second id sits beside your bag so the bag survives a refresh, and it is deleted when the order is placed. If you sign in there is a sign-in cookie, because that is how staying signed in works. We note in the same place that you have already seen a popup, so you are not shown it twice.

None of those identify you by name. The ones that can are the third parties below, which set their own cookies under their own rules, and your browser's settings are the place to refuse them.

Who else sees any of it

Everyone, with the reason:

• The courier who brings your parcel. Your name, phone number and delivery address, because that is what a delivery is. They also handle the cash if you pay at the door.
• Supabase, which holds the database and your account sign-in, and Vercel, which runs this website — so both see what passes through it. Neither uses any of it for their own purposes.
• Cloudflare, which serves the photographs and videos on these pages.
• Resend, which sends the order emails. Your email address and the order it is about, nothing else.
• An SMS gateway, and WhatsApp. Your phone number and the order it is about, so we can tell you the order was taken and the parcel is on its way.

If you bought from us on a marketplace rather than here, that order reached us through them: they collected your details under their own policy and passed us what we need to pack the parcel and send it.

We do not sell your details, to anybody, for anything. There is no list you are on that we rented out, and your phone number goes to the courier delivering to you and the gateway that sends you that one message — not to another shop, ever.

How long we keep it

Orders stay. What was sold, to whom, for how much, and whether it came back. A shop has to be able to answer that about its own trading — for its accounts, and for the next time you tell us something arrived broken.

The technical context of a visit is erased after ninety days, as described above.

An account lasts until you ask us to close it. Ask, and we close it and delete it.

Marketing contact stops the moment you say so. Every email we send carries an unsubscribe link, and it works immediately.

What you can ask us to do

Ask us for a copy of what we hold about you and we will send it. Tell us something is wrong and we will correct it. Ask us to delete you and we will, except for the record of orders we are obliged to keep — and we will say plainly which of the two any particular thing falls under, rather than hiding behind the exception.

A message on WhatsApp is a perfectly good way to ask. There is no form.

Children

This is a shop for adults, and we do not knowingly collect anything from a child. If you think we have, tell us and we will delete it.

If this changes

The date at the top is when this page last changed. If we start doing something materially different with what we hold, this page changes first.

Who to ask

Sedusa is responsible for everything on this page, and is who you are asking when you ask.

• Shop 1, Placeholder Arcade, Gulberg III, Lahore
• hello@sedusa.pk
• +92 300 0000000
• sedusa.pk