Last updated 19 October 2026
1. Who is responsible
Lyrelle runs this website and decides how your personal information is used. This policy applies to the website, to orders and to messages you send us. If you have a question about it, write to us:
Write to us through our contact page.
2. What we collect
- When you order: your name, mobile number, email address if you give one, delivery city, address and landmark, what you ordered and what you paid. We also keep the order’s history: when it was confirmed, shipped, delivered, returned or cancelled.
- When you contact us: your name, mobile number and message, including WhatsApp chats and calls about your order.
- When you visit: our servers record your network (IP) address, browser type and the time of each request. We use these records only to keep the website secure and to stop abuse.
We never ask for your CNIC, card details, bank PIN or a one-time code (OTP). If anyone claiming to be from Lyrelle asks for them, do not share them, and please tell us.
3. Why we use it
- to confirm your order by phone or WhatsApp, then pack and deliver it,
- to handle cancellations, exchanges, refunds and complaints,
- to stop fake and abusive orders. One mobile number can have only three orders waiting for confirmation at a time, we note when a parcel sent to a number came back unpaid, and we may stop cash on delivery to numbers or addresses that keep refusing parcels,
- to keep the website secure and working,
- to keep the accounts and tax records the law requires,
- to send you news and offers, only if you ask for them.
We use your information for these purposes because you asked us to deliver an order or answer a message, because the law requires it, or, for news and offers, because you agreed. You can withdraw that agreement at any time.
4. Who we share it with
We do not sell or rent your information. We share only what each of these needs to do its job:
- Courier companies receive your name, mobile number, address, city and the cash amount to collect, so they can deliver your parcel and call you.
- Hosting providers run the website and store order records for us: Vercel, Supabase and Amazon Web Services.
- WhatsApp carries the messages you exchange with us there. WhatsApp’s own privacy policy also applies to those chats.
- Government authorities, courts or the police, when the law requires it, for example for tax or to investigate a crime.
- A new owner, if the business is ever sold. They must keep the promises in this policy.
Our hosting providers keep data on servers outside Pakistan. We choose providers with strong security and limit what they can do with your information to running the shop for us.
5. How long we keep it
- Order records: as long as we need them for exchanges, refunds and complaints, and to meet our tax and accounting duties, usually six years.
- Messages: until your question is resolved, and afterwards only as long as we need a record of what was agreed.
- Numbers and addresses blocked from cash on delivery: until we remove the block.
- Server records of network addresses: a few weeks, unless we need them to look into abuse.
When we no longer need information, we delete it or remove what links it to you.
6. Cookies and browser storage
The website keeps a few things in your own browser so it works: your shopping bag until you order or empty it, and your display preferences. The shop team also gets a sign-in cookie when they log in to manage the shop. These stay on your device and are not used to track you.
We do not use advertising or tracking cookies. If we add analytics or advertising tools, we will update this policy first. You can clear your browser’s storage at any time; the shop will still work, but your bag will be emptied.
7. Keeping it safe
Your information travels over encrypted connections, and only the people who need it to run the shop can see it. Your order page opens only with the private link we give you when you order. We store only a scrambled copy of that link’s key, so please keep the link to yourself.
No system is perfectly secure. If something goes wrong that puts your information at risk, we will fix it, tell you, and inform the authorities where the law requires it.
8. Your choices
You can ask us to:
- tell you what information we hold about you and give you a copy,
- correct anything that is wrong or out of date,
- delete your information, except what we must keep for tax and accounting or to stop fraud,
- stop sending you news and offers.
Write to us using the contact details above, with your name and the mobile number or email you used, so we can find your records. We may call that number to check it is really you. We reply within 2 working days and complete requests within 30 days. Asking costs nothing.
9. Children
The shop is for adults. Under-18s should order with a parent or guardian, and we do not knowingly collect information from children. If you think a child has given us their details, tell us and we will delete them.
10. Law and changes to this policy
We handle your information in line with the laws of Pakistan, including the Prevention of Electronic Crimes Act, 2016, and will update this policy to follow any personal data protection law that applies to us. The date at the top shows the latest change; if a change matters to you, we will point it out on the website before it applies. How we sell to you is covered by our Terms and conditions.