Who we are
This policy covers Kingway Store, the online shop at kingway.pk, operated by Kingway Industry (registration J028646-7), B, Sarwri street kmha, ledhr road Sarwari St, Chaudhry Colony, Lahore, 43026, Pakistan. We are the party responsible for the personal information described here.
It applies to everything you do on this website — browsing, ordering, creating an account, subscribing to our emails, requesting a quote, leaving a review or contacting support. It does not cover other websites we link to, which have their own policies.
What we collect
Information you give us
- Account details — your name, email address, phone number and password. Passwords are stored only as a one-way hash; nobody at Kingway Store can read yours.
- Delivery and billing addresses — the address, city and postal code you save or enter at checkout@if ($usesMaps), and the map coordinates if you choose to drop a pin@endif.
- Order information — what you bought, when, what you paid, the delivery address and any note you left for the courier.
- Messages you send us — contact form enquiries, quote requests, support chat, and emails or calls about an order.
- Reviews and ratings you submit on products, published under the name you give.
- Newsletter subscriptions — your email address, when you subscribed, and whether you have since unsubscribed.
Information collected automatically
- Your basket and shortlist — items in your cart, wishlist and comparison list, so they survive a page reload or a return visit.
- Technical data — IP address, browser and device type, and the pages you viewed, recorded in our server logs.
- Session and security data — the session cookie that keeps you signed in, and records of failed sign-in attempts used to block brute-force attacks.
- Error reports — when something breaks, we log the technical detail of the failure so it can be fixed. That record can include the URL you were on and your account ID.
Information from others
- Payment confirmations from our payment gateway — whether a payment succeeded, the amount, and the last four digits of the card. We never receive your full card number, expiry or CVV.
- Delivery updates from the courier — tracking status, the delivery time and who signed for the parcel.
- Sign-in details from Google or Facebook if you choose to sign in that way — your name, email address and profile picture, and nothing more.
How we use it
We use your information to do the following, and nothing beyond it:
- Fulfil your order — take payment, arrange delivery, keep you updated and handle returns.
- Run your account — sign you in, keep your saved addresses and order history, and let you reorder.
- Support you — answer questions, price a quote, and investigate anything that goes wrong.
- Remind you about an unfinished basket, if you left one behind with an email address attached. Every such email carries a one-click unsubscribe.
- Send you offers, but only if you asked for them — see marketing below.
- Prevent fraud and abuse — verify orders, defend card disputes, and protect the site from attack.
- Meet our legal obligations — tax records, invoices and any lawful request we are required to answer.
- Improve the shop — understand which pages and products people actually use, and fix what breaks.
We rely on the necessity of performing our contract with you for order and account data, on your consent for marketing emails@if ($usesAnalytics) and analytics@endif, on our legitimate interest in a secure and working shop for security and error logging, and on legal obligation for financial records.
Cookies and similar technology
Cookies are small files stored by your browser. We use them for these purposes:
| Purpose | Why it exists | Can you turn it off? |
|---|---|---|
| Session | Keeps you signed in and keeps your basket attached to you as you move between pages. | No — the site cannot work without it |
| Security | The CSRF token that stops another site submitting forms as you. | No — it protects your account |
| Preferences | Remembers small choices such as your recently viewed items and comparison list. | Yes, by clearing site data in your browser |
You can clear or block cookies in your browser settings. Blocking the session and security cookies will stop you signing in or checking out. We do not run advertising or cross-site tracking cookies@if (! $usesAnalytics), and we do not run analytics@endif.
Who we share it with
We do not sell your personal information, and we never rent or trade your email address. We share it only with the parties below, only with what they need, and only so your order can happen:
- Courier and delivery partners — your name, delivery address and phone number, so they can deliver and call you if they cannot find you.
- Payment gateway and banks — the payment is processed on their systems. They receive the transaction amount and your card details directly; we receive only the result.
- Email delivery provider — your email address and the content of the message, so order confirmations and receipts actually arrive.
- Hosting provider — our servers, where the data sits.
- Professional advisers and authorities — our accountants and lawyers, or a regulator, court or law enforcement body where we are legally required to disclose.
- A buyer of the business — if Kingway Industry is ever sold or merged, customer records would transfer with it. You would be told before that happens.
Everyone we share data with is required to protect it and to use it only for the job we gave them.
Marketing and how to stop it
We only send marketing emails to people who asked for them — by subscribing to our newsletter or ticking the box at checkout. Order confirmations, dispatch notices, receipts and answers to your questions are service messages, not marketing, and are sent to everyone who orders.
Every marketing email carries an unsubscribe link that works in one click, with no sign-in and no confirmation step. You can also email [email protected] and we will remove you. Unsubscribing takes effect immediately and does not affect your orders.
How long we keep it
| What | Kept for |
|---|---|
| Order records, invoices and tax data | As long as tax and company law requires — generally at least six years |
| Delivery evidence used to answer card disputes | 24 months from the order date |
| Account details and saved addresses | Until you ask us to delete the account |
| Newsletter subscription | Until you unsubscribe |
| Abandoned basket records | A short period, then deleted automatically once the reminders have run |
| Support messages | While needed to resolve the matter, then archived |
| Server and error logs | A rolling window, then overwritten |
When something is no longer needed we delete it or strip it of anything that identifies you. Order records we are legally required to keep will survive an account deletion — we can remove your profile, but not the invoice attached to a sale.
Your choices and rights
You can ask us at any time to:
- Show you the personal information we hold about you.
- Correct anything that is wrong — you can also edit your details yourself in your account.
- Delete your account and the data we are not legally required to keep.
- Stop marketing — instantly, via any unsubscribe link.
- Export your data in a portable format.
- Object to or restrict a particular use of your data.
Email [email protected] and we will respond within 30 days. We may ask you to confirm your identity first — that check protects you, not us. There is no charge for any of this.
How we protect it
- The whole site is served over HTTPS, so what you send is encrypted in transit.
- Passwords are stored as one-way hashes and are never recoverable, by us or by anyone else.
- Integration credentials and other secrets are encrypted at rest and masked wherever they are displayed.
- Access to customer data inside our team is restricted by role, and every change to a record is logged with who made it.
- Card details are never stored on our servers — payments are processed entirely by the gateway.
No system is perfect, and anyone who tells you otherwise is selling something. If a breach ever affects your data, we will tell you and the relevant authority promptly, and say plainly what happened.
Children's privacy
This shop is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us their details, tell us at [email protected] and we will delete the record.
Where your data is held
Your data is processed in Pakistan. Some of the services we rely on — email delivery, hosting and — operate servers in other countries, so your data may be processed outside Pakistan. Where that happens, we use providers that commit contractually to protecting it to the standard described here.
Changes to this policy
We update this page when what we do changes. The effective date at the top always reflects the current version. Where a change materially affects how we use your data, we will tell you by email or with a notice on the site rather than expecting you to notice it here.
Contact us
Any question about your data, or to make one of the requests above:
- Email [email protected]
- Call +923174302678 (Mon-Sun 8:00 AM - 11:00 PM)
- Write to Kingway Industry, B, Sarwri street kmha, ledhr road Sarwari St, Chaudhry Colony, Lahore, 43026, Pakistan
Still not sure?
Send us your order number and what happened. Almost everything is quicker to fix by talking to us than through any formal process.