Privacy Policy

Ilaaf Online (“we”, “us”, or “our”) is a Pakistan-based premium e-commerce brand headquartered in Lahore, Punjab, Pakistan. We operate the website ilaaf.online and the Ilaaf mobile application (collectively, the “Service”).

Contact us at support@ilaaf.online or +92 300 117-4460.

• Account information: name, email address, phone number, and password when you register.
• Order information: shipping address, order details, payment method (we do not store card numbers — all payments are COD or handled by third-party payment processors).
• Usage data: pages visited, products viewed, device type, browser, IP address, and referral source via cookies and similar technologies.
• Communications: messages sent to our support team via chat or email.

We use cookies and similar tracking technologies including Google Analytics 4, Google Tag Manager, and Meta Pixel to understand how visitors interact with our website and to measure the effectiveness of our advertising campaigns.

• Essential cookies: required for the website to function (authentication session, cart).
• Analytics cookies: Google Analytics 4 to measure website traffic and user behaviour (anonymous).
• Advertising cookies: Meta Pixel and Google Ads to measure conversions and serve relevant ads. Post-iOS 14.5, we also use server-side conversion tracking.

You can opt out of advertising cookies at any time via aboutads.info or by adjusting your browser settings.

• Processing and delivering your orders.
• Sending order confirmation and shipping updates via email or SMS.
• Providing customer support.
• Personalising your shopping experience and product recommendations.
• Measuring and improving advertising effectiveness (ROAS measurement).
• Detecting fraud and ensuring platform security.
• Complying with legal obligations under Pakistani law.

We do not sell your personal information. We may share data with:

• Logistics partners: courier companies that fulfil your order — they receive only your name, address, and phone number.
• Payment processors: Easypaisa and JazzCash, if you choose a digital payment method.
• Analytics providers: Google and Meta, under their respective data processing agreements.
• Law enforcement: when required by applicable Pakistani law or court order.

We retain your account information for as long as your account is active. Order records are kept for seven (7) years to comply with Pakistani tax regulations. You may request deletion of your account at any time; note that order records required for legal compliance will be retained in anonymised form.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data via your account profile page.
• Request deletion of your account and associated personal data.
• Opt out of marketing communications at any time.

To exercise these rights, email support@ilaaf.online.

We use industry-standard SSL encryption for all data transmitted between your browser and our servers. Access to personal data is restricted to authorised staff only.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our website.

For questions about this Privacy Policy or our handling of your personal information, reach out to our team using the details below.