Privacy policy

Last updated 10 September 2026

This is a plain-English draft written to match how StoreLink works today. It will be reviewed by a lawyer before launch, and may change.

StoreLink handles two kinds of people's data: sellers who run a shop, and buyers who place an order on one. This page says what we collect from each, why, who sees it, and how long we keep it.

If you are a seller

When you open a shop we collect:

• Your email address and a password, to sign you in. Passwords are stored hashed, never in plain text.
• Your shop name, address (the part before .mystore.pk), brand colour, return policy and WhatsApp number, to show on your shop and to send you order alerts.
• Your product names, prices, descriptions and photos, to show on your shop. Photos are resized and stored with a cloud storage provider.
• A record of what you do in the dashboard, such as changing an order's status, so that you can see the history of each order.

We send you an email or WhatsApp message when an order is confirmed, and emails about your account such as password resets. You can turn order alerts off in your shop settings.

If you are a buyer

When you place an order we collect:

• Your name, mobile number, city and delivery address, and any note you add. The seller needs these to deliver your order.
• Your WhatsApp message when you confirm the order, including the number you sent it from, so we can match it to your order and tell the seller it is real.
• The IP address and browser type of the device you ordered from. We keep this to spot fake or abusive orders.

We do not ask buyers to create an account, and we do not use buyer details for advertising. Your order page is reachable only through the private link you are given after checkout.

Who sees buyer data

• The seller you ordered from sees your name, number, city, address and note, and uses them to deliver the order and answer your questions.
• StoreLink staff can see order data when needed to run the service, investigate abuse, or help a seller.
• Nobody else. We do not sell or share buyer data with advertisers or data brokers.

Services we rely on

StoreLink runs on a small number of providers who process data on our behalf:

• A hosting provider for the application and its database.
• A cloud storage provider for product photos.
• Meta's WhatsApp Business platform, which carries confirmation messages and order alerts.
• An email delivery provider for account and order emails.
• A product analytics service, which records how the dashboard and shop pages are used. We send it events like "order placed", not buyer names, numbers or addresses.

How long we keep it

• Seller accounts: for as long as the shop is open, and for 30 days after it closes so that it can be restored.
• Orders, including buyer details: for 12 months after the order is completed or cancelled, so that sellers can handle returns and disputes and see their history. After that, buyer name, number and address are removed and only the totals remain.
• Confirmation codes: 24 hours, or until used.
• IP addresses and browser details on orders: 90 days.

Your choices

• Sellers can edit or delete products, and close their shop, from the dashboard or by writing to us.
• Buyers can ask the seller, or us, to correct or delete the details on an order once it is complete.
• Anyone can write to hello@storelink.pk to ask what we hold about them.

Cookies and storage

The seller dashboard stores a sign-in token in your browser so you stay signed in. Shop pages set no tracking cookies. The analytics service uses a random identifier, not your name or number.

Where data lives

Our servers are outside Pakistan at the moment. Data is protected in transit and at rest, and access is limited to the people who run the service.

Changes

We will update this page as the service changes and show the date at the top. For significant changes we will tell sellers by email.

Contact

Questions about privacy: hello@storelink.pk.