Privacy Policy

1. Who We Are

This Privacy Policy applies to Envase by Velcroy ("Envase", "we", "us", or "our"), a curated multibrand gifting store based at 17C, Khayaban-e-Muslim, Phase 6, DHA, Karachi, Pakistan.

We operate the website at envasestore.com (the "Website"). This policy explains how we handle the personal information of visitors and enquirers ("you").

By using our Website or submitting an enquiry, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Website.

2. Information We Collect

2.1 Information You Provide to Us

We collect personal information only when you actively provide it to us:

• Newsletter subscription: Your email address when you sign up for our mailing list.
• Contact and enquiry forms: Your name, email address, phone number, and any message or details you share when making a gifting enquiry, requesting a proposal, or getting in touch with us.
• Direct communications: Information you share when you contact us via email, phone, or social media.

2.2 Information Collected Automatically

When you visit our Website, certain information is collected automatically through cookies and analytics tools:

• Log data: IP address, browser type and version, operating system, referring URLs, pages viewed, and time spent on pages.
• Device information: Device type (mobile, tablet, desktop), screen resolution, and language settings.
• Usage data: How you navigate and interact with our Website, which sections you visit, and which links you click.
• Cookies and tracking: Information collected via cookies and similar technologies — please see our Cookie Policy for full details.

2.3 Information We Do Not Collect

Because Envase is a showcase and enquiry-based website (not a direct e-commerce platform), we do not collect payment card numbers, bank account details, or billing information through the Website. Any financial transactions are handled directly and separately.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Responding to enquiries: To communicate with you about your gifting requirements, provide quotes, and coordinate orders.
• Newsletter communications: To send you gift guides, new arrival announcements, seasonal inspiration, and exclusive offers — but only if you have subscribed.
• Website analytics: To understand how visitors use our Website so we can improve it, using tools such as Google Analytics.
• Marketing: To serve relevant advertisements on social media platforms (such as Meta/Facebook and Instagram) if you have consented to marketing cookies.
• Legal compliance: To comply with applicable laws and regulations in Pakistan and elsewhere.
• Legitimate business interests: To maintain records, prevent fraud, protect the security of the Website, and improve our services.

4. Legal Basis for Processing

We process your personal information on the following grounds:

• Your consent: For newsletter subscriptions and marketing cookies. You may withdraw consent at any time.
• Contractual necessity: To fulfil and manage gift orders and enquiries you have initiated.
• Legitimate interests: For analytics, website security, and improving our services — where those interests are not overridden by your rights.
• Legal obligations: Where we are required by law to process or retain information.

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

5.1 Service Providers

We use trusted third-party service providers who process data on our behalf and are bound by data processing obligations:

• Email marketing platforms (e.g., Mailchimp or Klaviyo) — to send newsletters to subscribers.
• Website hosting providers — to host and serve our Website.
• Analytics providers (Google Analytics) — to analyse website traffic and usage.
• Advertising platforms (Meta / Facebook) — to serve and measure online advertisements.

5.2 Legal Requirements

We may disclose your personal information if required to do so by law, or in response to valid requests by governmental or regulatory authorities in Pakistan or other applicable jurisdictions.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your personal information may be transferred as part of that transaction. We will notify you of any such change and your rights.

6. Analytics & Advertising Technologies

6.1 Google Analytics

We use Google Analytics, provided by Google LLC, to collect and analyse information about how visitors use our Website. Google Analytics uses cookies to collect information such as how often users visit the Website, which pages they visit, and what other sites they used prior to arriving. We use this information to improve our Website and marketing.

Google may transfer and process this data in countries outside Pakistan. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, or by managing your cookie preferences through your browser settings.

6.2 Meta Pixel (Facebook / Instagram)

We may use the Meta Pixel, a tracking tool provided by Meta Platforms, Inc. The Meta Pixel allows us to measure the effectiveness of our advertising, understand actions people take on our Website, and serve relevant advertisements on Facebook and Instagram to people who may be interested in our gifting services.

Data collected through the Meta Pixel is processed by Meta in accordance with their Data Policy. You can manage your ad preferences through your Facebook account settings or opt out at youronlinechoices.com.

7. Cookies

Our Website uses cookies and similar tracking technologies to enhance your experience and for analytics and marketing purposes. A cookie is a small file placed on your device by a website you visit.

For detailed information about the specific cookies we use, their purpose, and how to control or disable them, please read our Cookie Policy.

8. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected:

• Newsletter subscribers: Until you unsubscribe. We honour all unsubscribe requests promptly.
• Enquiry and contact records: Typically up to 3 years, to maintain a record of our communications and for legitimate business purposes. Records related to completed orders may be retained for up to 7 years for accounting and legal compliance.
• Analytics data: As determined by Google Analytics retention settings (typically 26 months by default).
• Marketing data (Meta Pixel): As per Meta's data retention policies.

9. Your Rights & Choices

You have the following rights in relation to your personal information held by us:

• Access: Request a copy of the personal information we hold about you.
• Correction: Ask us to correct any inaccurate or incomplete information.
• Deletion: Request that we delete your personal information (subject to legal retention obligations).
• Restriction: Ask us to restrict the processing of your information in certain circumstances.
• Objection: Object to the processing of your personal information where we rely on legitimate interests as our legal basis.
• Withdrawal of consent: Withdraw consent at any time for activities based on consent (e.g., newsletter subscriptions) without affecting the lawfulness of prior processing.
• Opt out of marketing emails: Every newsletter we send includes an unsubscribe link. You may also contact us directly.

To exercise any of these rights, please contact us using the details in Section 14 below. We will respond within a reasonable timeframe, typically within 30 days.

10. International Data Transfers

Envase by Velcroy is based in Pakistan. Some of our service providers (including Google and Meta) are based in the United States and may process your data in countries outside Pakistan. When your information is transferred internationally, we ensure that appropriate safeguards are in place, including relying on the data privacy frameworks and terms established by those providers.

11. Security of Your Information

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, or misuse. These include using secure HTTPS connections on our Website and limiting access to personal information to those who have a legitimate need to process it.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. If you suspect your information has been compromised, please contact us immediately.

12. Children's Privacy

Our Website is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will take steps to delete it.

13. Third-Party Links

Our Website may contain links to third-party websites, including our social media profiles and partner brands. We are not responsible for the privacy practices or content of those third-party sites. We encourage you to read the privacy policy of any website you visit through links on our Website.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

Your continued use of the Website after any changes constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please reach out to us: