Privacy Policy

EL TESSA (Private) Limited, Lahore, Pakistan operates eltessa.com and is the controller of the personal data described here. This policy explains, in plain language, what we collect, why, on what legal basis, who receives it, how long we keep it, and the rights you have. It applies to customers and visitors worldwide, and is written to the standard of the EU and UK GDPR, with the data protection laws of Pakistan, the UAE, Saudi Arabia and US states such as California (CCPA) in mind.

1. What we collect

Order details: your name, delivery address, phone number and email, plus the items you purchase.
Payment details: card payments are handled by our payment provider (Stripe). We do not see or store your full card number. For pay on delivery (COD) orders we record the order and the payment outcome.
Messages: anything you send us by email, phone, chat or our contact page.
Device and usage data: like most websites, we and our service providers receive your IP address, browser type and pages visited, through cookies and similar technologies.

2. Why we use it, and our legal bases

Purpose	Legal basis
Process, deliver and support your order, including confirmation calls or messages for COD	Performing the contract with you
Answer your questions and requests	Our legitimate interest in running the business, or steps you ask us to take before an order
Prevent fraud and repeated refusal of confirmed COD parcels	Our legitimate interest in protecting the business and other customers
Improve our store, products and service	Our legitimate interest
Show relevant advertising and measure our marketing; send marketing emails	Your consent where the law requires it (you can withdraw it at any time), otherwise our legitimate interest
Keep accounting, tax and legal records	Legal obligation

Where a law in your country does not use these exact terms, we rely on the closest equivalent basis, such as your consent or the need to perform your order.

3. Who receives it

We never sell your personal information. We share it only with the partners needed to run the store:

Shopify: hosts our store and processes checkout. See the Shopify Consumer Privacy Policy.
Payment providers: such as Stripe, to take card payments.
Courier companies: your name, address and phone number, so your parcel can reach you.
Advertising and analytics partners: such as Meta (Facebook and Instagram), TikTok and Google, through measurement pixels that help us understand which advertising works. They process data under their own privacy policies, and you can limit ad personalisation in your account settings with them.
Authorities: when the law requires it.

4. International transfers

We are based in Pakistan, and our service providers (for example Shopify, Stripe, Meta, TikTok and Google) may process data in other countries. Where the law of your country restricts sending personal data abroad, we only do so with the safeguards that law requires, such as contractual clauses approved for that purpose, or with your consent where that is the basis the law allows. You can ask us for details using the contact below.

5. Cookies

We use cookies for essential store functions such as your cart and checkout, and for the analytics and advertising measurement described above. Where the law requires consent for non-essential cookies, we ask for it. You can clear or block cookies in your browser settings; essential store features may stop working without them.

6. How long we keep it

Order and payment records: for as long as needed for delivery, returns, and the accounting and tax periods that the law requires.
Messages: as long as needed to resolve your query and keep our service history, then deleted or anonymised.
Marketing preferences: until you unsubscribe or withdraw consent.
Advertising and analytics data: as set by the cookie and the partner concerned.

7. Your rights

Depending on the law that applies to you (for example the EU or UK GDPR, the data protection laws of the UAE and Saudi Arabia, or US state laws such as the CCPA), you may have the right to:

be told what data we hold, and get a copy (access);
have wrong data corrected;
have your data deleted, where the law allows;
restrict or object to some uses, including direct marketing, which you can always refuse;
receive your data in a portable format;
withdraw consent at any time, without affecting what we did before;
complain to the data protection authority in your country.

To use any right, email the address below. We answer within one month, or sooner where the law of your country requires it. We may ask you to confirm who you are first.

8. Children

Our store is intended for adults. We do not knowingly collect information from children.

9. Changes to this policy

We may update this policy as our store evolves, and we will review it before we start delivering to a new country. The version published on this page applies.

Distributor applications

When you apply to become an EL TESSA distributor, we use your details and documents (such as your CNIC, NTN certificate and sales tax certificate) only to review your application. They go only to our management team by private email and messaging, and they are never shown on our website. If we do not appoint you, we delete your application within 90 days. If we appoint you, we keep your business contact details while you are our distributor, and we show on our distributors page only what you allowed: your business name, city or area and business phone. To change or remove a listing, email care@eltessa.com.

Contact

For anything relating to your privacy or personal information:
Email: care@eltessa.com
Phone: +92 311 1555184 (0311 1555184 within Pakistan)
EL TESSA (Private) Limited, Lahore, Pakistan

To limit how your data is shared, see our data sharing opt-out page.