What we collect, why, and how long we keep it

We sell ten powders online. To get an order to you we need a name, an address and a phone number — and honestly, that is nearly all we hold. This page says exactly what happens to it.

Who we are

PureRoots is a Pakistani food business making single-ingredient dried powders, machine-dried in a closed temperature-controlled chamber. This website is operated by PureRoots from Pakistan. When this policy says “we” it means PureRoots; when it says “you” it means anyone who visits the site, places an order, or messages us.

What we collect

  1. Order details: Your name, delivery address, phone number, email address, what you ordered and in which pack size, and the order total in Rs. Given by you at checkout, or told to us over WhatsApp if you order that way.
  2. Account details: Only if you choose to make an account: your email, a password stored in encrypted form, and your saved addresses. You can order as a guest and never create one.
  3. Messages: What you write to us on WhatsApp, email or the contact form, plus anything you attach — an unboxing video, a photo of a damaged parcel. We keep the thread so we can follow up on a claim.
  4. Technical data: Your IP address, browser and device type, the pages you opened and when. Collected automatically by the website and its host, as it is on any site.

Card and payment information

We never see or store your full card number. If you pay by card or wallet, you are handed to the payment provider’s own secure page and they send us back only a yes or a no, a reference number and the last four digits. If you pay cash on delivery, the courier collects the money and we hold no payment detail at all. If you transfer to our bank account, we see what any bank transfer shows: the sender name and the amount.

Why we use it

  1. To pack your order and get it to your door, which means giving your address to a courier.
  2. To message you when your batch finishes drying, when it ships, and with the tracking number.
  3. To handle a return, a replacement or a refund, and to keep a record of it in case the same claim comes back.
  4. To answer your questions, and to trace a complaint back to the batch it came from.
  5. To keep the sales records a business is required to keep, and to keep the site secure and working.
  6. To send you an offer or a restock note — only if you asked for it, and only until you tell us to stop.

Who else sees it

A short list, and each one gets only the part of your information it needs to do its job.
  1. COURIERS: Your name, address, phone number and the parcel weight — they cannot deliver without them. They do not get your email or your order history.
  2. PAYMENT PROVIDER: Handles the transaction under its own privacy policy. It tells us whether the payment went through, not how you paid for it.
  3. WEB HOST: The site and its database sit on our hosting provider’s servers, which is where your order record physically lives.
  4. WHATSAPP: If you message us there, that conversation also sits with WhatsApp under their terms, not ours.
We have never sold a customer list, and we will not. Nobody buys your details from us.

Changes to this policy

If we start using a new service that touches your information, this page changes first and the date at the top changes with it. Pakistani law governs this policy, and the courts of Pakistan handle any dispute arising from it.