Privacy Policy

Ruby Jewellers Lahore ("Ruby Jewellers", "we", "us", or "our") operates two physical jewellery stores in Lahore, Pakistan and this website at rubyjewellers.pk. We take your privacy seriously and comply with applicable Pakistani data protection laws, including the Prevention of Electronic Crimes Act 2016 (PECA) and any applicable regulations.

Business address: Ruby Jewellers, Gulberg III, Lahore, Punjab, Pakistan

We collect personal information only when you interact with us:

• Custom order requests — name, phone/WhatsApp, email, design description, budget, and optional reference images you upload.
• Customer portal (invite-only) — name, email, phone, delivery addresses, and order history.
• Appointments — name, phone, preferred time and purpose of visit.
• In-store kiosk — camera feed used solely for the AR Try-On experience; no images are transmitted or stored.
• Usage data — anonymised page analytics (no cross-site tracking, no advertising cookies).

• Process and track your custom jewellery orders.
• Contact you via WhatsApp, SMS, or email about your order.
• Manage your appointment at our stores.
• Provide access to your private customer portal.
• Improve our website and in-store services.
• Comply with legal obligations under Pakistani law.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Images you upload as design references for a custom order are stored securely and used exclusively by our craftsmen and staff to produce your piece. Design images are never publicly accessible — they require authentication and are served only to authorised staff and the customer who submitted them. We log all access to design images for security purposes.

We use only essential cookies required for the website to function (session management, theme preference). We do not use advertising cookies, third-party analytics cookies, or cross-site trackers. You may disable cookies in your browser settings; essential site functions will remain available.

Custom order records are retained for 7 years to comply with Pakistani commercial record-keeping requirements. Appointment records are retained for 1 year. Kiosk camera data is processed in real-time only — no footage is recorded or stored.

You may request deletion of your personal data by contacting us (see below). We will process deletion requests within 30 days, subject to legal retention requirements.

We protect your data using industry-standard security measures including TLS encryption in transit, hashed password storage, JWT-based authentication with short expiry, and rate limiting on all login endpoints. Access to administrative systems is restricted to authorised staff only.

Under applicable Pakistani law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Withdraw consent for communications at any time.

To exercise these rights, contact us at privacy@rubyjewellers.pk.

We may update this policy periodically. The effective date at the top of this page will reflect the most recent revision. Continued use of our services after changes are posted constitutes acceptance of the updated policy.

For privacy enquiries or to exercise your rights: