Privacy Policy

This Privacy Policy explains how Mehmood Sons Poultry Farms, operating the retail brand Khaas Eggs (“we”, “us”, “our”), collects, uses, shares, and protects your personal data when you visit khaas.mehmoodfarms.com, place an order, contact us on WhatsApp, or interact with us in any other way. It is written to comply with the Prevention of Electronic Crimes Act 2016 (PECA) and the forthcoming Personal Data Protection Act of Pakistan.

1. What data we collect

To fulfil your orders and provide our service, we collect:

• Contact information — full name, mobile number, WhatsApp number, email (optional).
• Delivery information — street address, area, city, delivery instructions, GPS coordinates (only if you share them for hard-to-find locations).
• Order history — products purchased, quantities, delivery dates, payment method, order value.
• Payment information — cash-on-delivery is our default; if you pay by bank transfer we retain the transaction reference. We do not store your bank credentials or card numbers.
• Communications — messages you send us via WhatsApp, email, or our website contact form.
• Technical data — device type, browser, IP address, pages visited on our website (via basic analytics cookies).

2. How we use your data

• Order fulfilment — to prepare, pack, and deliver your order.
• Order communication — to confirm orders, notify delivery status, and resolve any issue.
• Customer support — to respond to questions, complaints, and refund requests.
• Marketing — to occasionally inform you about new products, seasonal offers, or subscription plans, only if you have consented. You can opt out any time by messaging “STOP” to our WhatsApp number.
• Legal compliance — to comply with tax law, food safety traceability requirements, and regulatory audits.
• Product improvement — aggregated, anonymised order patterns help us plan production, delivery routes, and new products.

3. Who we share your data with

We share your personal data only with:

• Delivery drivers — only your name, phone, delivery address, and order contents; nothing else.
• Payment processors — when you pay online (if we introduce online payments in future), the payment gateway receives the amount and reference; card details go directly to them, not to us.
• Regulatory authorities — Islamabad Food Authority, FBR, or other government bodies, if legally required.
• Professional advisers — our tax consultant and lawyer, under confidentiality obligations, only when strictly needed.

We do not sell your personal data to any third party and we do not share it with other brands or advertisers.

4. How long we keep your data

We retain your order and contact records for 24 months from your last order or interaction with us, after which we delete or anonymise the data. Some records (tax invoices, food-safety traceability records) we keep for 6 years as required by Pakistani law.

5. Your rights

You have the right to:

• Access the personal data we hold about you — send a request and we will respond within 15 days.
• Correct any inaccurate data (e.g. updated address or phone).
• Delete your data — we will remove your record within 30 days unless we are required to retain it for legal reasons (in which case we will explain what and why).
• Withdraw consent for marketing communications any time by messaging “STOP” to our WhatsApp number.
• Lodge a complaint with a regulator if you feel we have mishandled your data.

To exercise any of these rights, contact us using the details at the bottom of this page.

6. Data security

We store your data on secure servers, encrypted in transit (HTTPS) and at rest. Access is limited to the small number of team members who need it for their work. We do not print delivery slips containing payment or ID information. Delivery drivers see only the order and address, not order history.

7. Cookies

Our website uses a small number of functional cookies (e.g. to remember your cart) and basic anonymous analytics (to understand which pages people visit). We do not use tracking cookies for advertising purposes. You can disable cookies in your browser, but the website may not function correctly without them.

8. Children

Our services are directed at adults. We do not knowingly collect data from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. Material changes will be highlighted at the top of the page for at least 30 days after the change. Continued use of our services after a change means you accept the updated policy.

10. Governing law

This policy is governed by the laws of the Islamic Republic of Pakistan. Any dispute arising from this policy will be subject to the exclusive jurisdiction of the courts of Islamabad.