Privacy Policy

We may collect information that you provide when placing an order, creating an account, contacting us, subscribing to updates, or using our website.

This also covers orders and support requests you send through WhatsApp or Instagram and that our team enters into the order system. Only send information needed for your order; do not send payment passwords or PINs.

This information may include:

• Your name, email address, and phone number.
• Billing and delivery addresses.
• Order details and product preferences.
• Payment status and transaction references.
• Messages, reviews, and customer-support requests.
• Technical information such as device type, browser, IP address, and website activity.

We use collected information to:

• Process, prepare, and deliver your orders.
• Send order confirmations and delivery updates.
• Record deposits, balances and agreed delivery or pickup changes.
• Invite you to review the products you ordered.
• Manage accounts, rewards, and saved addresses.
• Respond to questions, complaints, or support requests.
• Improve our products, website, and customer experience.
• Send promotional messages when you have agreed to receive them.
• Prevent fraud, misuse, and unauthorized transactions.
• Meet legal, accounting, and regulatory obligations.

Payments may be handled by banks, mobile wallets, payment gateways, or other third-party providers. We do not intentionally store full card details, account passwords, or wallet PINs on our website.

Payment providers process your information according to their own privacy policies and security procedures.

We do not sell or rent your personal information. We may share limited information with trusted parties when required to operate our business.

These parties may include:

• Delivery partners and riders.
• Payment and banking providers.
• Website hosting, email, and analytics services.
• Customer-support and communication providers.
• Government authorities when legally required.

Service providers should only use information for the services they perform for NOISETTE.

When distance-based delivery pricing is enabled, the delivery address you enter is sent to Google Maps Platform for address verification and driving-route calculation. This is used to establish delivery coverage and charges; it does not require continuous access to your device location. It is not used when this delivery-pricing feature is disabled.

Providers such as Microsoft, Meta, Google, and our hosting and email services may process information outside Pakistan. Their own privacy notices describe their processing. We limit what we send according to the service needed and your applicable privacy choices.

Our website may use cookies and similar technologies to remember your preferences, keep items in your cart, understand website usage, and improve performance.

You can disable cookies through your browser settings. Some website functions may not work correctly when cookies are disabled.

Unless you turn off advertising measurement or your browser signals a privacy preference, we use Meta Pixel and Conversions API to measure page visits, product views, cart additions, checkout starts, and successfully placed orders. This includes product identifiers, quantities, prices, order value, browser information and Meta browser/ad-click cookie identifiers. Browser and server events include technical information such as the customer IP address and browser user agent. Server IPs are not substituted for customer IPs. If you separately allow customer matching in Advertising preferences, we also send normalized, SHA-256-hashed email and phone when available. Existing measurement preferences alone do not enable customer matching. We do not send your name or delivery address to Meta. Hashing is a matching safeguard, not anonymization. Browser requests to Meta also include the page URL.

You can turn this measurement off or back on through Advertising preferences in the footer. Turning it off does not affect checkout. We respect browser Global Privacy Control and Do Not Track signals for this integration. Meta processes received data under its own privacy policy. Measurement delivery records are normally removed after eight days; changing your choice stops future collection but cannot recall data already sent.

We also use Microsoft Clarity to understand storefront interactions through session replays and heatmaps, including visits from our ads. Clarity records page structure, clicks, scrolling and technical browser information. Checkout and order-review content is masked, form values are masked by Clarity, and account, administration and private order-lookup pages are excluded. We do not send customer names, contact details or order numbers as Clarity identifiers or custom tags. The same Advertising preferences and browser privacy signals also control this integration.

We may send product updates, offers, and bakery news when you subscribe or otherwise agree to receive marketing messages.

You can unsubscribe using the link in an email or by contacting us. You may still receive essential messages related to active orders, payments, or account security.

Product-review invitations may be sent by email or shared manually by our team on WhatsApp. Invitation links can grant access to reviewing the purchased items; treat them as private and do not publish or forward them. Approved reviews may show your public reviewer name, rating and comments on product pages and in product-review feeds. Do not put private contact or payment details in a review. Where a review earns a reward, that fact may be disclosed; a positive rating is not required.

We use reasonable administrative, technical, and organizational safeguards to protect personal information against unauthorized access, loss, alteration, or misuse.

No online system is completely secure. You are responsible for keeping your account password and verification details private.

We retain personal information only for as long as reasonably required to process orders, provide services, maintain business records, resolve disputes, prevent fraud, and comply with legal obligations.

Subject to applicable law, you may ask us to review, correct, update, or delete certain personal information associated with you.

Some information may need to be retained for completed transactions, legal compliance, fraud prevention, or accounting purposes.