Privacy notice

This notice explains what SalamMusk does with your personal information. We have tried to write it in plain language rather than legal boilerplate.

Who is responsible

SalamMusk, [ your registered company name ], Karachi, Pakistan. Questions about your data: support@salammusk.com.

What we collect

When you order:

• Your name, delivery address, phone number and email address.
• What you ordered, what you paid, and how you paid.
• Any engraving text or gift message you asked us to put on the order.

When you sign in:

• Your phone number or email address, so we can send you a one-time passcode.

Automatically, when you use the site:

• Your IP address and basic technical information about your browser. We use this to keep the site working and to limit abuse such as repeated sign-in attempts.
• A session cookie, so your bag survives moving between pages.

We do NOT collect or store your card number, PIN or one-time passcode. Digital payments happen on the payment provider's own page and we only ever receive confirmation that a payment succeeded or failed.

Why we use it

• To take, pack, deliver and support your order. Without this we cannot sell you anything.
• To confirm it is really you signing in.
• To keep records we are required to keep, such as tax records.
• To protect the shop against fraudulent orders and abuse.
• To send you marketing, but only if you asked for it.

Marketing

We only send marketing to people who opted in. Every message we send includes a way to stop it, and you can change your preferences in your account at any time.

Order confirmations, dispatch notices and replies to your questions are not marketing. You get those because you bought something, and they cannot be turned off separately.

Who else sees it

Only the people who have to:

• Our delivery couriers, who receive your name, address and phone number so they can deliver the parcel and collect cash on delivery.
• Our payment providers, for digital payments.
• The service that sends our text messages and emails.

We do not sell your personal information, and we do not share it for anyone else's marketing.

Inside our own back office, access is limited by role. Staff who cut engraving plates see the order number and the engraving text only — not your address, phone number or what you paid.

How long we keep it

• Order records: as long as tax and accounting law requires.
• Sign-in passcodes: minutes. They expire quickly and only a hashed form is stored, never the code itself.
• Marketing preferences: until you withdraw them.
• Support conversations: while they are useful for helping you, then deleted.

Your rights

You can ask us to:

• Show you the personal information we hold about you.
• Correct anything wrong.
• Delete your information, where we are not required to keep it.
• Stop sending you marketing.

Email support@salammusk.com and we will respond as quickly as we can. We may need to confirm your identity first — for your protection, not to make it difficult.

Security

Passcodes are stored only as hashes. Payment credentials in our back office are encrypted. Staff access is limited by role, and sensitive actions are recorded in an audit log.

No system is perfect. If a breach affects you, we will tell you.

Cookies

We use a small number of cookies to keep you signed in, keep your bag, and protect forms against cross-site request forgery. These are necessary for the site to work and there is no tracking or advertising cookie.

Changes

If this notice changes materially we will say so on the site.