Privacy Policy

1. Who We Are & Our Privacy Covenant

Magic Hair Oil is operated under the executive direction of Babar Dogar, headquartered at Ghous Garden Phase 3, Lahore, Pakistan.

We operate under an absolute zero-spam and zero-data-brokering covenant. We will never sell, lease, monetize, rent, or share your telephone number, delivery address, or personal identifiers with marketing brokers, data aggregators, or third-party telemarketers.

2. Categories of Information We Collect

We only collect data strictly necessary to coordinate courier delivery, provide customer care, and prevent malicious checkout activities:

• Domestic Delivery Coordinates: Full recipient name, street address, nearby landmark, city in Pakistan, and postal code required to print Leopards Courier Service (LCS) consignment labels.
• Contact Telemetry: WhatsApp mobile phone number and email address used to transmit order receipts, LCS tracking updates, and delivery arrival calls.
• Account Credentials: Passwords stored via one-way cryptographic bcrypt hashing algorithms, or ephemeral single-use 6-digit verification codes.
• Payment Verification Receipts: Transaction IDs (TID) or payment screenshots voluntarily submitted by clients to confirm direct bank or mobile wallet remittances.

3. Zero Banking Credential & Zero Card Storage

Our web servers, application files, and MariaDB databases never record, process, intercept, or store sensitive credit card numbers, debit card CVVs, bank account login passwords, or mobile wallet MPINs.

All pre-payment remittances are executed entirely within your own banking app (Meezan Bank, EasyPaisa, JazzCash, SadaPay, NayaPay, or Raast). The only payment records retained by our system are client-uploaded transfer receipts and transaction reference strings required for accounting reconciliation.

4. Statutory Compliance with Pakistan PECA 2016

We comply fully with the statutory mandates of the Pakistan Prevention of Electronic Crimes Act (PECA 2016) and established consumer data protection principles:

• Unauthorized Access Protection: Strict database firewalls and security rules block unauthorized external intrusion.
• Lawful Interception: We will only disclose personal data to law enforcement agencies if presented with a valid, official court order issued by a competent judicial authority in Pakistan.
• Right of Erasure: You have the absolute legal right to request the permanent deletion of your profile and registered contact telemetry from our database by messaging our care desk.

5. Data Protection Desk & Inquiries