Who we are
Beauty Basket (“we”, “our”, “us”) is an e-commerce store operated by 99 Marketing Studio (Private) Limited, registered in Pakistan.
Website: https://beautybasket.pk
Scope of this policy
This policy describes how we collect, use, share and protect your personal information when you: interact with our social-media accounts, customer-service channels, or marketing campaigns. visit beautybasket.pk or any sub-domain; purchase makeup, skincare or other products from us;
The information we collect
| Category | Examples | How we collect |
|---|---|---|
| Account & Order Data | Name, delivery address, email, phone, order notes | Checkout forms, account-registration forms |
| Payment Data | Card or mobile-wallet details (tokenised; we never store raw card numbers), transaction IDs | Collected by our payment processor (e.g. JazzCash, Easypaisa, Stripe, PayPal) and shared with us via secure tokens |
| Device & Usage Data | IP address, browser type, device identifiers, pages viewed, referring URL, time spent | Automatic collection via cookies, pixels and server logs |
| User-Generated Content | Product reviews, comments, uploaded images | Forms, comment boxes |
| Marketing Preferences | Opt-in/opt-out choices for email, SMS or push notifications | Newsletter sign-up, account settings, checkout tick boxes |
| Customer-Service Records | Emails, chat logs, call recordings, refund requests | Direct communications with our team |
Why we use your information
| Purpose | Typical legal basis* |
|---|---|
| Process and deliver your order (same-day dispatch, free delivery on orders > Rs 2,000, money-back guarantee) | Contract performance |
| Create and manage your Beauty Basket account | Contract performance |
| Provide customer support and handle returns/refunds | Legitimate interests |
| Detect and prevent fraud or spam | Legitimate interests / legal obligation |
| Send service emails (order confirmations, shipping updates, password resets) | Contract performance |
| Send marketing offers, new-product launches, beauty tips (only if you’ve opted in) | Consent / legitimate interests |
| Analyse site traffic, improve product range and user experience | Legitimate interests |
| Comply with tax, accounting and other laws | Legal obligation |
Cookies & similar technologies
We use cookies and local-storage files to:
- keep you logged in;
- remember cart contents and delivery preferences;
- understand how visitors navigate the site (Google Analytics, Meta Pixel, TikTok Pixel);
- show personalised ads after you leave the site (retargeting).
You can control cookies in your browser settings. Blocking them may limit certain features (e.g. “remember me”, quick checkout).
Who we share your data with
| Recipient | Reason |
|---|---|
| Payment gateways (JazzCash, Easypaisa, Stripe, PayPal) | Securely process payments and refunds |
| Courier partners (Leopards, TCS, M&P, etc.) | Deliver your parcel, handle returns pickups |
| Email & SMS providers (Mailgun, Sendinblue, WhatsApp Cloud API) | Send transactional and marketing messages |
| Analytics & ad platforms (Google, Meta/Facebook, TikTok) | Site analytics, personalised advertising |
| Fraud-detection & anti-spam services (reCAPTCHA, Akismet) | Protect our site and customers |
| Government or regulatory authorities | Where required by law, court order or to protect our rights |
How long we retain your data
Orders & invoices: 7 years (tax compliance).
Accounts with no orders: deleted after 24 months of inactivity.
Marketing consents: until you unsubscribe or your account is deleted.
Cookies: 1 day to 2 years, depending on type (see cookie banner for details).
Comments & reviews: retained indefinitely unless you request removal.
Your privacy rights
Depending on your location, you can:
Withdraw consent at any time (this won’t affect past processing).
Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Delete your data (“right to be forgotten”)—subject to legal retention limits.
Object to or restrict certain processing (e.g. direct marketing).
Port your data to another provider.
To exercise these rights, email contact@beautybasket.pk from the address linked to your account. We may ask for ID to verify the request.
Data security
SSL/TLS encryption secures every page of beautybasket.pk.
Card numbers are handled only by PCI-DSS-compliant processors.
Staff access to personal data is restricted by role-based permissions and 2-factor authentication.
We regularly review our hosting, firewalls and backups to guard against unauthorised access or loss.
Prepared for Beauty Basket by 99 Marketing Studio. Last revised 15 May 2025.