Privacy Policy

1. Introduction

HYPERBLOCK (PRIVATE) LIMITED ("Company", "we", "us", or "our"), registered under CUIN 0330809 and operating from Digital Hub, CP#96 4th Floor Raya Fairways Commercial, Phase 6 DHA, Lahore, Punjab, Pakistan, operates the LuxeStore ecommerce platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in compliance with the Prevention of Electronic Crimes Act, 2016 (PECA), the Electronic Transactions Ordinance, 2002 (ETO), the Pakistan Telecommunication (Re-organisation) Act, 1996, and applicable provincial consumer protection legislation.

By accessing or using our platform, you consent to the data practices described in this Policy. If you do not agree, please discontinue use of our services immediately.

2. Legal Framework

This Policy is governed by and construed in accordance with the following Pakistani laws:

• Prevention of Electronic Crimes Act, 2016 (PECA) — governs cybercrime, unauthorised data access, and electronic privacy.
• Electronic Transactions Ordinance, 2002 (ETO) — provides legal recognition to electronic records, signatures, and transactions.
• Punjab Consumer Protection Act, 2005 — protects consumer rights in the Province of Punjab.
• Sindh Consumer Protection Act, 2014 — protects consumer rights in the Province of Sindh.
• Pakistan Telecommunication (Re-organisation) Act, 1996 — regulates telecommunications and data transmission.
• Personal Data Protection Bill (Draft) — anticipated legislation; we voluntarily adopt its principles of data minimisation, purpose limitation, and consent.

3. Information We Collect

3.1 Information You Provide Directly

• Full name, email address, and phone number at registration or checkout.
• Billing and shipping address.
• Order details, product preferences, and communications with our support team.

3.2 Information Collected Automatically

• IP address, browser type, operating system, and device identifiers.
• Pages visited, time spent, referral URLs, and clickstream data.
• Cookies and similar tracking technologies (see Cookie Policy).

3.3 Payment Information

We do not store full payment card numbers. Payment processing is handled by our authorised payment gateway partners who are PCI-DSS compliant. We retain only transaction identifiers and status records necessary for order fulfilment and dispute resolution.

4. How We Use Your Information

We process your personal data for the following lawful purposes:

• Processing and fulfilling your orders and managing returns.
• Sending transactional communications (order confirmations, shipping updates).
• Providing customer support and resolving disputes.
• Improving our platform, products, and services through analytics.
• Complying with legal obligations under Pakistani law, including tax and anti-money laundering requirements.
• Detecting and preventing fraud, abuse, and security incidents as required under PECA 2016.
• Sending promotional communications where you have given explicit consent (opt-out available at any time).

5. Data Sharing and Disclosure

We do not sell your personal data. We may share it with:

• Service providers — logistics partners, payment processors, IT infrastructure providers — under strict confidentiality agreements.
• Legal authorities — when required by a court order, the Federal Investigation Agency (FIA), or any competent authority under PECA 2016 or other applicable law.
• Business transfers — in the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable Pakistani law. Order records are retained for a minimum of five (5) years in accordance with tax and commercial record-keeping obligations. You may request deletion of your account data subject to legal retention requirements.

7. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data (subject to legal retention obligations).
• Withdraw consent for marketing communications at any time.
• Lodge a complaint with the Pakistan Telecommunication Authority (PTA) or relevant consumer protection authority.

To exercise these rights, contact us at [email protected].

8. Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, consistent with the security obligations under PECA 2016. However, no method of transmission over the internet is 100% secure.

9. Contact Us

For privacy-related enquiries or to exercise your rights: