Privacy policy

What we collect

• To deliver an order: your name, phone number, delivery address, email, and what you bought.
• If you create an account: the above plus a password, stored only as a salted hash.
• If we add wallet payments: the JazzCash or EasyPaisa account number you enter would be passed to the provider and stored only as a transaction reference. Today every order is cash on delivery, so no payment details are collected.
• Automatically: server logs (IP address, browser, pages requested) kept for 30 days for security, and a cookie that keeps your cart and session.
• If you subscribe: your email address for the newsletter, until you unsubscribe.

What we use it for

Fulfilling and supporting your orders, sending order emails, preventing fraud, and — only if you opted in — the weekly newsletter. We do not sell or rent personal data, and we do not profile customers for advertising.

Who we share it with

• Courier partners: name, phone and address, to deliver the parcel.
• Payment providers (JazzCash, EasyPaisa), once wallet payments launch: the amount and your wallet number, to take payment.
• Email delivery service: your email, to send order confirmations.
• Hosting and database providers, who store the data on our behalf under contract.

Nobody else, unless required by Pakistani law.

Cookies

One first-party cookie holds your cart and sign-in session. If analytics is enabled, it uses a cookie-less or anonymised configuration. We do not run third-party advertising cookies.

Your choices

You can see and edit your details under My Account, unsubscribe from any newsletter with one click, and ask us to delete your account and order history by contacting us at hello@booksandbooks.pk. We keep order records for as long as tax law requires, then delete them.

Children

We sell children's products to adults. We do not knowingly collect data from anyone under 18.

Changes

If this policy changes materially, the date at the top changes and account holders are emailed.