Legal
Privacy Policy
At Memonaas, we are committed to protecting your personal information and being transparent about how we use it. This policy explains what data we collect, why, and your rights around it.
Last updated: June 2026
Who We Are
Memonaas is a women's fashion brand based in Lahore, Pakistan, operating online at memonaas.com. References to "we", "us", or "our" in this policy refer to Memonaas and its operators.
If you have any questions about this Privacy Policy or how we handle your data, please contact us at the details provided at the end of this document.
Information We Collect
We collect information in two ways: information you provide directly to us, and information collected automatically.
Information you provide:
- Name, email address, and phone number (when placing an order or creating an account)
- Delivery address — street, city, province, postal code
- Order details: items purchased, quantities, payment method
- Messages you send us via the contact form or WhatsApp
- Newsletter subscription preferences
Information collected automatically:
- Device type, browser, operating system, and IP address
- Pages visited, time spent on site, and referring URLs
- Cookies and similar tracking technologies (see Cookie section below)
We do not collect payment card details. All payments processed via our platform are handled by third-party payment providers and are subject to their own privacy policies.
How We Use Your Information
We use the information we collect for the following purposes:
- To process and fulfil your orders, and send order confirmations and dispatch notifications
- To provide customer support and respond to your enquiries
- To send account-related communications (password resets, important updates)
- To send marketing emails and newsletters — only if you have opted in
- To improve our website, products, and user experience through analytics
- To detect and prevent fraud or misuse of our platform
- To comply with legal obligations under Pakistani law
We will never sell your personal data to third parties. We do not use your data for automated decision-making that significantly affects you.
Third Parties We Share Data With
To operate our website and deliver orders, we share limited data with the following third-party service providers:
Resend
Transactional email delivery (order confirmations, password resets)
Data shared: Name, email address
Cloudinary
Image storage and delivery (product photos)
Data shared: No personal data
TCS / Leopards / BlueEx
Courier services for order delivery
Data shared: Name, phone number, delivery address
Vercel
Website hosting and server infrastructure
Data shared: IP address, request logs
Each of these providers has their own privacy policy governing how they handle data. We only share the minimum data necessary for them to provide their service.
Data Retention
We retain your personal data only for as long as necessary:
- Order and transaction data: 7 years (for legal/accounting compliance under Pakistani law)
- Account data: as long as your account is active, plus 1 year after deletion request
- Marketing preferences and email lists: until you unsubscribe
- Contact form submissions: 2 years
- Server and access logs: 90 days
Your Rights
You have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Correction — ask us to correct inaccurate or incomplete data
- Deletion — request that we delete your personal data (subject to legal retention obligations)
- Unsubscribe — opt out of marketing emails at any time via the unsubscribe link or by contacting us
- Portability — receive your data in a structured, machine-readable format
To exercise any of these rights, contact us at the details below. We will respond within 30 days.
Contact Support
Data Security
We take the security of your personal data seriously. We implement appropriate technical and organisational measures including:
- HTTPS encryption for all data transmitted to and from our website
- Secure, hashed password storage — we never store passwords in plain text
- Access controls limiting who within our team can access customer data
- Regular security reviews of third-party service providers
Despite these measures, no internet transmission is 100% secure. If you believe your data has been compromised, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email (if you have an account) or by displaying a notice on our website.
The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.