Privacy policy.

1. Who we are

Swaad Meem (“Swaad Meem”, “we”, “our”, “us”) is a boutique jewellery brand based in Pakistan, operating this website at swaadmeem.com. We are the data controller responsible for the personal information described in this policy. Questions can be sent to swaadmeem@gmail.com.

2. Information we collect

We collect information you give us directly and information generated automatically when you use the site.

• Account & order details: name, email address, phone number, shipping and billing address, order history, and any notes you add at checkout.
• Payment information: handled directly by our payment processor. We receive a confirmation and the last four digits of the card, never the full card number, CVV, or PIN.
• Communications: messages you send us through contact forms, email, or social channels, including any attachments.
• Device & usage data: IP address, browser type, device type, referring URL, pages viewed, and approximate location, collected via cookies and server logs.
• Marketing preferences: whether you have subscribed to our newsletter and how you interact with the emails we send.

3. How we use your information

We only use personal information for the purposes it was collected, specifically:

• Processing your orders, taking payment, arranging shipment, and handling returns or exchanges.
• Creating and maintaining your account, including saved addresses, order history, and wishlist.
• Sending transactional messages such as order confirmations, shipping updates, and receipts.
• Responding to your enquiries and providing customer support.
• Sending marketing emails and updates about new collections, only where you have opted in.
• Understanding how the site is used so we can improve performance, fix bugs, and refine the shopping experience.
• Detecting and preventing fraud, abuse, and other illegal activity, and complying with our legal obligations.

4. Legal basis

Where applicable, we rely on the following legal bases: performance of a contract (for orders and account management), your consent (for marketing communications and non-essential cookies), our legitimate interests (for analytics, security, and improving our service), and compliance with legal obligations (for tax, accounting, and consumer-protection requirements).

5. Who we share information with

We do not sell your personal information. We share it only with the service providers that help us run the shop, and only for the specific purpose they support:

• Supabase — database, authentication, and file storage.
• Vercel — hosting, edge delivery, and privacy-friendly analytics (Vercel Analytics and Speed Insights).
• Resend — transactional and marketing email delivery.
• Payment processors and banks — to charge your card and settle funds.
• Courier and logistics partners — to deliver your parcel and keep you updated on its status.
• Government authorities — where required by law, court order, or a valid legal request.

Each provider is bound by contract to protect your data and use it only for the services they perform for us.

6. International transfers

Some of our service providers are based outside Pakistan and may process your information in other countries. Where this happens, we ensure appropriate safeguards are in place through the provider’s own data-protection commitments.

7. Cookies & similar technologies

We use a small number of cookies and similar technologies. Essential cookies keep you signed in, remember your cart, and secure the checkout. Analytics cookies help us understand how the site is used in aggregate. You can control cookies through your browser settings; disabling essential cookies may prevent parts of the site from working correctly.

8. How long we keep your data

We retain personal information for as long as your account is active or as needed to provide our services. Order records are kept for at least seven years to satisfy tax and accounting obligations. Marketing preferences are kept until you unsubscribe. When retention is no longer required, data is deleted or anonymised.

9. How we protect your data

Traffic is encrypted in transit with TLS. Access to production systems is restricted, authenticated, and logged. Payment card details never touch our servers. No online service can guarantee absolute security, so we encourage you to use a strong, unique password for your account.

10. Your rights

Subject to applicable law, you can ask us to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Delete your account and personal information, subject to records we must retain by law.
• Restrict or object to certain processing, including marketing.
• Receive a copy of your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email swaadmeem@gmail.com. We will respond within 30 days.

11. Marketing emails

We only send marketing emails to people who have opted in. Every email includes a one-click unsubscribe link, and you can also email us to be removed. Unsubscribing from marketing does not affect transactional messages about your orders.

12. Children

Swaad Meem is intended for customers aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of the page will always reflect the most recent version. Material changes will be highlighted on the site or communicated by email where appropriate.

14. Contact us

For any question about this policy or how your data is handled, write to swaadmeem@gmail.com. We aim to respond within two working days.