Privacy policy

Effective Date: 29th July, 2026

Himaya values customer privacy. This Privacy Policy explains how Himaya collects, uses, shares, protects, and manages personal information for online orders, customer support, shipping, payments, appointments, boutique inquiries, custom-sizing discussions, and website services.

This Privacy Policy applies to Himaya customers, website visitors, boutique visitors who contact Himaya, and customers who communicate with Himaya through WhatsApp, call, email, contact forms, Shopify checkout, or other official support channels.

At a Glance

  • Himaya collects customer information to process orders, provide support, arrange shipping, manage payments, respond to inquiries, help with sizing, and improve the website experience.

  • Himaya may collect name, phone number, WhatsApp number, email address, billing and shipping address, order details, payment status, support messages, appointment details, and sizing information where required for selected articles.

  • Payments are processed through PayFast and any other payment options enabled in Shopify checkout from time to time.

  • Himaya may share necessary order and delivery details with courier partners selected according to availability, destination, customer request, service testing, or delivery requirements.

  • Himaya may use Shopify, Shopify apps, WhatsApp tools, analytics tools, advertising tools, and support tools where enabled to operate the website and provide services.

  • Some tools, apps, analytics settings, advertising pixels, and Shopify privacy settings still need to be confirmed by the Shopify implementation team before publishing the final policy.

  • Customers may contact Himaya about privacy questions through WhatsApp / Call: +92 325 8995035 or Email: himaya@email.com.

What Personal Information Himaya Collects

Depending on how a customer uses Himaya’s website or support channels, Himaya may collect the following types of personal information:

  • Identity and contact details, such as full name, phone number, WhatsApp number, email address, city, country, and delivery address.

  • Order information, such as product names, article links, sizes selected, order number, order history, payment status, shipping status, and customer support notes.

  • Payment-related information, such as payment method, transaction status, and checkout confirmation details. Himaya does not intentionally store full card details; payments are processed through PayFast and relevant payment providers enabled in Shopify checkout.

  • Shipping and delivery information, such as recipient name, address, phone number, courier tracking information, delivery preferences, and customs-related details for international orders where required.

  • Support information, such as WhatsApp messages, emails, call-related notes, contact form submissions, product questions, complaints, return/exchange queries, and appointment requests.

  • Sizing and custom-order information, such as bust, waist, hips, shoulders, armhole, sleeve length, shirt length, trouser length, overall outfit length, fit preferences, reference images or photos voluntarily shared by the customer, and other measurements required for the selected article.

  • Appointment information, such as name, phone or WhatsApp number, email address, preferred date, preferred time, article interest, consultation type, custom-size request, and message details.

  • Website and device information, such as IP address, browser type, device type, pages viewed, products viewed, cookies, and other analytics or tracking information where such tools are enabled.

How Himaya Collects Personal Information

Himaya may collect personal information when customers:

  • Visit the Himaya website or interact with Shopify storefront features.

  • Place an order through Shopify checkout.

  • Create or use a customer account if customer accounts are enabled.

  • Contact Himaya through WhatsApp, call, email, or contact form.

  • Request size help, custom sizing, article information, or appointment support.

  • Share measurements, reference images, or custom-order details voluntarily.

  • Interact with cookies, analytics tools, advertising tools, or Shopify apps where enabled.

Why Himaya Uses Personal Information

Himaya may use personal information for the following purposes:

  • To process, confirm, prepare, fulfill, and deliver orders.

  • To process payments and verify payment status through PayFast and other enabled checkout methods.

  • To communicate with customers about orders, shipping, delivery, returns, exchanges, size help, appointments, and support inquiries.

  • To provide sizing guidance, custom-size support, made-to-order discussion, and article-specific assistance.

  • To arrange courier delivery, tracking, customs-related documentation where required, and delivery support.

  • To manage customer service through WhatsApp, call, email, contact forms, Shopify tools, and support tools where enabled.

  • To improve website performance, customer experience, product presentation, advertising performance, and store operations.

  • To send marketing communications where the customer has opted in or where permitted by applicable rules and Shopify settings.

  • To prevent fraud, misuse, unauthorized access, payment abuse, delivery disputes, or policy abuse.

  • To comply with legal, accounting, tax, recordkeeping, dispute-resolution, and business requirements.

Who Himaya Shares Personal Information With

Himaya may share only the information reasonably necessary with service providers and partners that help operate the website, process orders, provide support, complete payments, and deliver products. These may include:

  • Shopify and Shopify-related services used to host the store, manage checkout, process orders, provide analytics, and support store operations.

  • Shopify apps and tools used for customer support, reviews, marketing, analytics, WhatsApp support, abandoned cart recovery, upsell features, or website performance where such apps are enabled. 

  • Payment processors and gateways, including PayFast and any other payment methods enabled in Shopify checkout.

  • Courier and shipping partners selected according to availability, destination, customer request, service testing, or delivery requirements.

  • WhatsApp and communication tools used for order support, size help, appointment booking, custom-order discussion, and customer service where enabled.

  • Analytics and advertising providers used to understand website activity, measure campaign performance, improve ads, and support retargeting where enabled. 

  • Professional advisers, legal advisers, accountants, auditors, tax advisers, or authorities where required for compliance, dispute handling, fraud prevention, accounting, or legal obligations.

Himaya does not sell customer personal information as a standalone product. If any third-party tool uses data for analytics, advertising, retargeting, or platform-level purposes, the exact disclosure should be confirmed after Shopify tools, pixels, and apps are finalized.

Shopify Apps, Analytics, Advertising, and Tracking Tools

Himaya operates on Shopify. Shopify and Shopify-related services may process customer information to provide checkout, order management, website functionality, analytics, security, and customer privacy features.

Himaya may use Shopify apps and website tools to support functions such as WhatsApp chat, customer support, reviews, analytics, marketing, advertising, retargeting, website performance, abandoned cart reminders, or checkout improvements where enabled.

Himaya may use analytics and advertising tools to understand website activity, measure marketing performance, and show relevant advertising through search, social media, or other advertising networks where enabled. Specific tools and pixels must be confirmed by the Shopify implementation team before final publishing

Cookies, Pixels, and Similar Technologies

Himaya’s website may use cookies, pixels, tags, and similar technologies to support core website functions, remember preferences, improve performance, measure website activity, understand product interest, support checkout, and measure advertising performance where enabled.

Some cookies may be necessary for the website and checkout to function. Other cookies or pixels may be used for analytics, advertising, retargeting, or personalization only where those tools are enabled and configured.

Marketing Communications and Opt-Out

Himaya may send marketing communications by email, SMS, WhatsApp, or other channels only where the customer has opted in, requested updates, or where communication is permitted by applicable rules and platform settings.

Marketing messages may include new arrivals, collection updates, offers, appointment reminders, or boutique updates. Customers should be able to opt out or unsubscribe using the method provided in the message or by contacting Himaya support.

Specific marketing channels, opt-in process, and opt-out process must be confirmed before publishing.

WhatsApp, Calls, Email, and Customer Support

Himaya may use WhatsApp, calls, email, and contact forms to provide customer support, order support, size help, appointment booking, custom-size discussion, shipping support, return/exchange guidance, and international order assistance.

Customer messages and contact details may be stored in WhatsApp conversation history, email inboxes, Shopify records, contact form submissions, or connected support tools where enabled. Himaya should avoid collecting unnecessary personal information and should use support information only for customer service, order handling, appointment management, and related business purposes unless the customer has opted into marketing.

Appointments, Custom Sizing, and Made-to-Order Discussions

For appointment booking, Himaya may collect the customer’s full name, phone or WhatsApp number, email address, preferred appointment date, preferred time, inquiry type, article name or product link, city or country, consultation purpose, and message details.

For custom sizing, made-to-order, stitched, formal, bridal, heavy party-wear, or requested changes, Himaya may collect the measurements and details required for the specific article. This may include bust, waist, hips, shoulders, armhole, sleeve length, shirt length, trouser length, overall outfit length, fit preferences, reference images, and other article-specific measurements voluntarily provided by the customer.

Customers should share accurate information and avoid sending unnecessary sensitive information. Himaya may contact the customer to confirm measurements, appointment details, article requirements, or custom-size instructions before processing.

Payment Processing

Himaya uses PayFast for payment processing and may use other payment methods enabled in Shopify checkout from time to time. Payment providers may process payment information, transaction details, fraud-prevention data, and checkout-related information according to their own privacy and security practices.

Himaya does not intentionally store full payment-card details. Payment details are processed by the relevant payment provider or payment gateway used at checkout.

Courier Partners and Delivery

To deliver orders, Himaya may share customer name, phone number, shipping address, city, country, order details, and delivery instructions with courier and shipping partners. Courier partners may vary based on availability, destination, customer request, service testing, delivery area, and international shipping requirements.

For international orders, delivery partners, customs authorities, and local delivery providers may require shipping details, contact details, and customs-related information to process delivery, clearance, and import procedures.

Customer Accounts

If Shopify customer accounts are enabled, customers may create an account, log in, save addresses, view order history, or manage account information through Shopify account features. Customer account data may be processed by Shopify and related services according to Shopify platform functionality.

International Transfers and Cross-Border Processing

Himaya is based in Pakistan and sells to customers in Pakistan and internationally. Customer information may be processed or stored in Pakistan and in other countries where Shopify, payment providers, courier partners, analytics providers, advertising providers, communication tools, or other service providers operate.

Data protection laws may differ from country to country. Himaya aims to handle customer information responsibly and to work with service providers that support secure processing and business operations. The exact international legal obligations for each destination country should be reviewed by qualified legal counsel before publishing the final policy.

How Long Himaya Keeps Personal Information

Himaya may keep customer information for as long as reasonably needed to process orders, provide support, manage shipping and returns, maintain order history, resolve disputes, prevent fraud, comply with accounting, tax, legal, and business recordkeeping requirements, and improve services.

How Himaya Protects Personal Information

Himaya aims to use reasonable administrative, technical, and organizational measures to protect customer information against unauthorized access, misuse, loss, alteration, or disclosure. These measures may include Shopify platform security features, access controls, payment gateway security, limited staff access, and careful handling of support and sizing information.

No website, payment system, messaging platform, or online transmission can be guaranteed completely secure. Customers should use secure devices, protect login details, and contact Himaya immediately if they believe their account, order, or communication has been misused.

Customer Rights and Choices

Customers may contact Himaya to request access to, correction of, or deletion of personal information held by Himaya, subject to identity verification and applicable legal, accounting, tax, fraud-prevention, dispute-resolution, or business recordkeeping requirements.

Customers may also contact Himaya to ask privacy questions, update contact details, correct order information before dispatch where possible, or opt out of marketing communications where applicable.

Requests can be sent through WhatsApp / Call: +92 325 8995035 or Email: himaya@email.com.

Children’s Privacy

Himaya’s website and services are not intended for children under 18. Himaya does not knowingly collect personal information from children for marketing or account purposes.

If a custom-size or made-to-order article is requested for a minor, measurement and order details should be provided by a parent, guardian, or responsible adult. If Himaya becomes aware that personal information has been provided by a child without appropriate adult involvement, Himaya may take steps to delete or limit that information where appropriate.

Legal and Compliance Notes

Himaya’s privacy practices may be affected by Pakistani law and by laws in countries where Himaya sells or ships orders. This draft avoids making definitive claims about the applicability of any specific international privacy regime to Himaya. Any GDPR, UK GDPR, CCPA/CPRA-aligned language should be treated as a transparency best practice until reviewed by qualified legal counsel.

This Privacy Policy should not be read as a complete statement of all legal obligations. A qualified lawyer familiar with Pakistani and applicable international privacy law should review and approve the final policy before publication.

Changes to This Privacy Policy

Himaya may update this Privacy Policy from time to time to reflect changes in website features, Shopify apps, payment methods, courier partners, analytics tools, advertising tools, customer support practices, legal requirements, or business operations.

The updated version will be posted on this page with a revised effective date.

How to Contact Himaya About Privacy

For privacy questions, customer data requests, or concerns about how personal information is handled, contact Himaya through the official support channels:

WhatsApp / Call: +92 325 8995035

Email: himaya@email.com

Remaining Open Items

The following items are still unresolved and should be confirmed by Himaya, the Shopify implementation team, and legal counsel before publishing:

  • Specific Shopify apps that will be installed and whether they process customer data.

  • Specific analytics tools, advertising pixels, tags, retargeting tools, and marketing platforms that will be active.

  • Whether Shopify customer accounts will be enabled.

  • Whether Shopify customer privacy settings, cookie banner, automated privacy updates, and data-sharing opt-out page are enabled and configured by region.

  • Specific marketing channels and opt-in/opt-out process for email, SMS, and WhatsApp messages.

  • Specific retention periods for order data, support data, appointment data, account data, marketing data, and custom-sizing data.

  • Final list of payment methods in Shopify checkout in addition to PayFast, if any.

  • Final courier/shipping partners once operational testing and availability are confirmed.

  • Final legal review of Pakistan law, cross-border privacy obligations, GDPR/UK GDPR/CCPA/CPRA exposure, and customer rights language.

Important Legal Note

This document is a drafting aid for Himaya’s Privacy Policy. It does not constitute legal advice. Himaya should have the final Privacy Policy reviewed and approved by a qualified lawyer familiar with Pakistani and applicable international privacy law before publishing it on the website.