This policy explains what information AIM Store ("we", "us", "our") collects when you browse, create an account, or place an order with us, why we collect it, how long we keep it, who we share it with, and the choices and rights you have over it.
1. Who we are
AIM Store is an online retailer of cosmetics and fine jewellery operating in Pakistan, reachable at support@aimstore.aimsoltech.com and +92 321 9554306. This policy covers the AIM Store website and the checkout, account, order-tracking and review features on it. It does not cover third-party sites we link to (for example our payment providers' own pages), which have their own privacy policies.
2. Information we collect
2.1 Information you give us directly
- Account details — name, email address, and the phone number and delivery address(es) you save to your account.
- Order details — the items you buy, quantities, prices, the delivery address and phone number for that specific order, and, where cash on delivery is used above a threshold, the CNIC number we are required to collect to confirm your identity with our courier.
- Payment information — what you actually give us depends on how you pay:
- Card payments are processed entirely on Stripe's own secure payment page. We never see, receive, or store your card number, expiry date or CVC — Stripe tells us only whether the payment succeeded.
- JazzCash (manual) and bank transfer orders ask you to send payment yourself and then upload a screenshot or photo of your payment receipt/transaction confirmation so our team can verify it. We store that receipt image against your order. It is not a card or account number — it is a proof-of-payment image, and we only use it to confirm and release your order.
- Cash on delivery orders involve no payment data collection at checkout at all; you pay our courier in cash on arrival.
- Communications — anything you send us through the contact form, email, phone, or WhatsApp, including your name, email and message, and (optionally) an order number.
- Reviews — the name, rating and text you submit when reviewing a product you bought, tied to your order so we can confirm it is a genuine ("verified") purchase.
2.2 Information collected automatically
- Local storage / cookies — we use your browser's local storage (not third-party tracking cookies) to keep your shopping cart, wishlist, and light/dark display preference working between visits, and to remember that you've seen our cookie notice. See our Cookie Policy for the full list.
- Technical data — standard web server logs (IP address, browser type, pages visited, timestamps) collected by our hosting and analytics infrastructure for security, fraud prevention and understanding how the site is used. We do not build advertising profiles from this data.
3. Why we collect it
- To create and manage your account, and to let you view your past orders.
- To process, price (including discounts and shipping), fulfil, and deliver your order, and to contact you about it (confirmation, dispatch, delivery issues, cash-on-delivery amount due).
- To verify manual JazzCash/bank-transfer payments before releasing an order for dispatch.
- To verify your identity for higher-value cash-on-delivery orders, as our courier partners require.
- To respond to questions, complaints, and return/refund requests you raise with us.
- To display your product reviews, marked as verified purchases where applicable.
- To keep the site secure, prevent fraudulent orders, and comply with our legal and tax obligations as a business operating in Pakistan.
- To improve the site and our catalogue — for example, understanding which products and pages are most viewed.
4. Who we share your information with
We do not sell your personal information. We share it only where necessary to run the store:
- Courier / delivery partners — your name, delivery address and phone number (and CNIC, for qualifying cash-on-delivery orders) are shared with the courier assigned to your order, so they can deliver it and collect payment where applicable. You can see the tracking number for your courier on your order page.
- Payment providers — card details go directly to Stripe, our card payment processor; we never hold them. JazzCash and bank transfers happen directly between you and JazzCash/your bank; we only receive your uploaded proof-of-payment image, not your JazzCash or bank account credentials.
- Email delivery — order confirmations, receipts and account emails are sent through our transactional email provider, which processes your email address and order details solely to deliver that email.
- Service providers — our website hosting, database and infrastructure providers, who process data on our behalf under confidentiality obligations and only as needed to run the site.
- Legal requirements — if required by law, court order, or a lawful request from a Pakistani government or regulatory authority, or to protect our rights, property or safety, or that of our customers.
We do not use your data for third-party advertising or share it with data brokers.
5. How long we keep your information
- Account data is kept for as long as your account is active, and for a reasonable period afterward in case you return, unless you ask us to delete it sooner (see Section 7).
- Order records (including the items bought, prices paid, and delivery details) are kept for at least six years from the order date, in line with standard Pakistani tax and record-keeping practice for business accounts, even if you later delete your account.
- Payment-proof images (JazzCash/bank-transfer receipts) are kept for as long as needed to resolve any payment dispute for that order, and are deleted on a routine basis after that window closes.
- CNIC numbers collected for cash-on-delivery verification are kept only against the specific order they were required for, for the same record-keeping period as the order itself, and are never reused for marketing or unrelated purposes.
- Contact-form messages are kept for as long as needed to resolve your query, and routinely cleared out after that.
6. How we protect your information
- Connections to the site are encrypted (HTTPS).
- Card payments never touch our servers — they go directly to Stripe's PCI-compliant systems.
- Access to customer and order data inside our systems is limited to staff who need it to do their job (for example, order fulfilment and customer support).
- Account passwords are stored using industry-standard one-way hashing, never in plain text.
- Uploaded payment-proof images and uploaded files are stored in access-controlled storage, not publicly listed.
No system is 100% secure, and we cannot guarantee absolute security of information transmitted over the internet. If you believe your account has been compromised, contact us immediately.
7. Your rights and choices
Whatever country you're writing to us from, you can ask us at any time to:
- Access a copy of the personal information we hold about you.
- Correct information that is inaccurate or out of date (you can also edit most of this yourself in Account settings).
- Delete your account and personal information, subject to our legal obligation to keep order/tax records for the period described in Section 5.
- Object to or restrict a particular use of your data that isn't necessary to fulfil an order you've placed.
- Withdraw consent for anything we rely on your consent for (for example, you can simply not opt in to anything optional — we don't send marketing email unless you ask us to).
To exercise any of these rights, email support@aimstore.aimsoltech.com or call +92 321 9554306 with your name and order number or account email so we can verify it's you. We will respond within a reasonable time, generally within 30 days.
AIM Store is based in, and primarily ships to, Pakistan, and is not specifically directed at customers in the European Union or United Kingdom — so GDPR/UK-GDPR obligations do not formally apply to us. That said, if you contact us from the EU/UK (for example, a diaspora customer sending a gift to Pakistan), we will still honour the access, correction and deletion rights above as a matter of practice.
8. Children's privacy
AIM Store is intended for adults able to form a contract under Pakistani law. We do not knowingly collect personal information from children under 18. If you believe a child has created an account or provided us information, contact us and we will delete it.
9. International/diaspora orders
Our checkout accepts contact numbers with non-Pakistani country codes (UAE, Saudi Arabia, Qatar, UK, US) so customers abroad can order gifts delivered to a Pakistani address, and lets such customers pay by card via Stripe in USD. Delivery addresses themselves are currently fulfilled within Pakistan only — see our Shipping & Delivery Policy. The data practices in this policy apply equally regardless of which country you are ordering from.
10. Changes to this policy
We may update this Privacy Policy from time to time, for example as we add new payment or delivery options. We will update the "Last updated" date above when we do, and for material changes we will give more prominent notice (such as a banner on the site).
