Who we are
Jome (jome.world) is run by [owner or registered business name], Lahore, Pakistan. We decide how your personal data is used. For anything about your data, email [email protected].
What we collect
When you order, as a guest or with an account: your name, email address, phone number, delivery address and any delivery notes, what you bought and what you paid. The street line of your address is stored encrypted. Every change to an order's status is recorded.
If you create an account: the details above, plus a password — stored only as a one-way hash that cannot be turned back into the password — saved addresses (street line encrypted), your wishlist, your reviews, and your two-factor settings if you turn it on.
Payments: for cash on delivery, nothing beyond the order. For Easypaisa or JazzCash transfers, the transaction ID you give us. For card payments, our payment provider handles the card; we receive only a payment reference and never see your card number.
Returns: the items, the reason and any notes you give.
Your cookie choice: what you chose, when, which version of this policy you saw, the first part of your IP address and your browser type — kept as a record that you were asked.
Security and technical logs: IP address, browser type and the pages requested, so we can keep the site secure and fix faults.
Product analytics, only if you accept analytics cookies: which products were shown to you, which you opened, how long you spent on them, and where on the site you found them — linked to your browser session, and to your account if you are signed in. See the Cookie Policy.
When you register, the form also checks a few facts about your browser, such as screen size and touch support, to stop automated sign-ups. These are checked once and not stored.
Why we use it
- To take, deliver and support your orders, and to email you about them — needed to carry out our contract with you.
- To prevent fraud, abuse and fake orders, including confirming cash-on-delivery orders by phone — our legitimate interest in protecting the shop and its customers.
- To learn which products interest people and improve the range — only with your consent, which you can withdraw at any time.
- To keep business and tax records — a legal obligation.
We do not sell your data and we do not send marketing email. If that ever changes, we will ask you first.
Who we share it with
- Courier companies — your name, phone number and delivery address, so they can deliver and collect payment.
- Zoho — sends our emails and hosts our support inbox.
- Cloudflare — sits in front of the site to protect it from attacks, so all traffic passes through it.
- Our hosting provider, [hosting provider name] — runs the servers that hold the shop's database.
- Our card payment provider — only if you pay by card.
- Authorities — only where the law requires it.
Some of these companies process data outside Pakistan. We use established providers that publish their own security and data protection commitments.
How long we keep it
- Orders — as long as tax and accounting law requires us to keep business records. If you delete your account, your name, contact details and address are removed from your orders; the items and amounts stay as the financial record.
- Accounts — until you delete your account.
- Security and technical logs — 14 days; error logs 90 days.
- Product analytics — up to 14 months.
- Order emails — the message is deleted once sent; a record that it was sent is kept for 30 days.
- Cookie choices — as long as we need to show that you were asked.
Your choices and rights
- See and download your data — from your account, at any time.
- Correct it — edit your details in your account, or ask us.
- Delete it — delete your account from your account settings. Your orders are anonymised as described above rather than deleted.
- Withdraw consent — change your cookie choice at any time on the Cookie Policy page.
- Ask us — guests, or anyone who cannot use the account tools, can email [email protected]. We reply within 30 days, and usually much sooner.
Keeping it safe
Connections to the site are encrypted, addresses are encrypted in the database, passwords are hashed, and accounts can use two-factor authentication. Only the people who run the shop can see order details.
Children
The shop is not meant for children, and we do not knowingly collect data from anyone under 13.
Changes to this policy
If we change how we use your data we will update this page, and where the change affects what you agreed to, we will ask for your consent again.
Complaints
Please contact us first at [email protected]. If you are not satisfied with our answer, you can complain to the authority responsible for data protection where you live.