1. Information We Collect
Account information: Name, email address, username, and hashed password when you register.
Order information: Shipping address, order contents, and payment status. We do not store card numbers — payments are processed by a third-party provider.
Usage data: IP address, browser type, and pages visited, used solely to improve the platform and detect abuse.
Communications: If you contact us, we retain that correspondence to resolve your query.
2. How We Use Your Information
- To process and fulfil your orders
- To send order confirmation and status emails
- To provide customer support
- To improve the platform and prevent fraud
- To comply with legal obligations
We do not sell your personal data to third parties. Ever.
3. Data Security
All passwords are hashed using bcrypt with a cost factor of 12. Sessions are stored server-side in Redis. All connections use HTTPS. Admin accounts require two-factor authentication.
4. Cookies
We use a session cookie (HttpOnly, Secure, SameSite=Strict) for authentication and a CSRF token cookie for security. We do not use advertising cookies or third-party tracking.
5. Data Retention
Account data is retained while your account is active. Order records are retained for 7 years for tax and legal purposes. You may request deletion of your account at any time by contacting us.
6. Your Rights
- Right to access your personal data
- Right to correct inaccurate data
- Right to request deletion of your account
- Right to data portability
To exercise any of these rights, email privacy@nexora.pk.
7. Contact
Questions about this policy? Contact us at privacy@nexora.pk or visit our Contact page.