Privacy Policy

1. Who we are

Baftaan is a handcrafted crochet brand based in Lahore, Pakistan. We collect only what we need to take an order, make a piece, deliver it, and answer you.

2. Information we collect

Depending on how you use the site, that can include:

• Checkout and orders: name, WhatsApp, email, delivery address, order contents, payment method, and the amounts, dates and transfer references of payments we receive (we do not store card numbers).
• Customer accounts: name, email, optional WhatsApp, language preference, marketing opt-in, saved addresses, and profile photo if you upload one.
• Custom-order requests: the brief, measurements you provide, colour and size notes, deadline, gift-wrap choice, uploaded reference images, and reference URLs.
• Contact forms and newsletter sign-up: name and email, plus the message or list you joined.
• Support messages: WhatsApp and email correspondence about an order or account.
• App crash reports: if the Android app crashes or hits an error, it sends Google Firebase Crashlytics a report with the device model, Android version, app version, the error, the screen it happened on, and your account ID if you are signed in. Reports never include your messages, addresses or payment details, and we use them only to fix problems.

3. How we use it

We use this information to fulfil orders, quote and make custom pieces, send order confirmations and shipping updates, answer support questions, operate your account, and — only if you asked — send new-arrival notes. We do not use it for automated marketing profiles or targeted advertising.

4. Reference images and links

Images you upload and URLs you share are used only to understand the piece you want. We do not publish them. Do not send images or links you are not allowed to share.

5. What we do not do

We do not sell or rent your personal information. We do not send promotional mail or WhatsApp without a clear opt-in. We do not store payment-card details.

6. Storage and sharing

Order and account data is stored so we can fulfil and support the order. Couriers receive the delivery details they need. WhatsApp and email providers process messages under their own policies. We take reasonable steps to protect data in transit and at rest. Crash reports from the app are processed by Google Firebase.

7. Analytics

We count visits to the website so we can see which pages are useful. We keep this as simple and private as we can:

• Each visit is counted with an anonymous ID made from a one-way hash of your IP address and browser. The ID resets every day, so it cannot be used to follow you from one day to the next.
• We do not store your IP address, and we use no cookies or tracking IDs to count visits.
• We do not use Google Analytics or any other third-party analytics service.
• If you are signed in, we keep a count of your visits and the date of your last visit on your account.
• If your browser sends Do Not Track or Global Privacy Control, we do not count your visits at all.

8. Payment information

When you pay, we record the amount, the date, the payment method and the transfer reference so we can match payments to orders and handle refunds. Receipts or screenshots you send on WhatsApp are used only to confirm your payment. We do not store card numbers or full bank account numbers. Payment records are kept with the order; some we must keep for completed orders, as explained under Your rights.

9. Your rights

You may ask for a copy of your information, a correction, or deletion. Email support@baftaan.pk. We aim to reply within 7 business days. Some records we must keep for completed orders.

10. Changes

We may update this policy. The date at the top of the page is the current version. Using the site after a change means you accept the updated policy.