Privacy Policy

Last updated: August 2026

At Giftee, accessible from giftee.pk, one of our main priorities is the privacy of our visitors. This Privacy Policy document contains types of information that is collected and recorded by ByGhanwa and how we use it.

1. Information We Collect

We collect information to provide better services to our users. The personal information that you are asked to provide includes:

Contact information (name, email address, phone number).
Shipping and billing addresses.
Payment information (processed securely through our payment gateways).

2. Tracking & Analytics

We use third-party tracking tools to improve your shopping experience and measure the performance of our store:

Google Analytics: We use Google Analytics to understand how visitors interact with our website. This includes data on page views, clicks, and shopping cart interactions.
Meta Pixel: We use the Meta Pixel to measure the effectiveness of our advertising, understand the actions people take on our website, and create audiences for our ad campaigns.

3. How We Use Your Information

We use the information we collect in various ways, including to:

Provide, operate, and maintain our website and process orders.
Improve, personalize, and expand our store offerings.
Communicate with you regarding order updates, customer service, and promotional offers.
Find and prevent fraud.

4. Customer Support Chat & Security Data (Data Minimization & Retention)

We provide customer support through both WhatsApp and our internal verified live chat system. To safeguard your privacy and account integrity, we adhere to rigorous data minimization practices:

Verified Customer Access: Our internal live chat system is restricted exclusively to authenticated, logged-in customers. General visitors can connect directly via WhatsApp.
Approximate Location (No Device GPS): We do not request or track browser GPS coordinates or physical device location. When you contact support, city-level location (such as “Customer in Lahore”) is derived solely from standard network edge headers to help our support team route your inquiry appropriately.
Server-Side Security & Rate Limiting: Client IP addresses are inspected exclusively on the server to enforce rate limits (maximum 20 messages per minute per customer) and prevent automated spam or abuse. We never query your browser for IP details.
Hashed Audit Logs: If logged for an audit trail, IP addresses are cryptographically hashed (SHA-256) alongside the browser user-agent string. We store only the hashed identifier, not the plain IP address.
60-Day Data Retention: All customer support chat transcripts, messages, and associated technical logs are retained for a maximum of 60 days, after which they are permanently deleted from our active database.

5. Contact Us