PRIVACY POLICY
This Privacy Policy explains how EF BAGS ("EF BAGS", "we", "us" or "our") collects, uses, stores and discloses information when you visit our website, contact us through any channel, place an order with us, or use any of our mobile applications distributed through Google Play.
// SECTIONS
01 Scope of this Policy
This Privacy Policy applies to all products, websites, mobile applications, services and communications provided by EF BAGS, operating from Workshop 11, Mujahid Plaza, Office No. 11, 3rd Floor, Islamabad, 44000, Pakistan.
By accessing our website, downloading or using any EF BAGS mobile application distributed through Google Play, or otherwise providing us with information, you confirm that you have read and understood this Policy.
This document satisfies the privacy disclosure requirements of the Google Play Developer Program Policies (User Data, Permissions and APIs that Access Sensitive Information). A direct link to this Policy is provided in the Google Play store listing and within the application itself.
02 Data we collect
Information you give us directly
- Identity & contact data — full name, phone number, email address and postal/shipping address when you submit a contact form, register an account or place an order.
- Order data — products selected, quantities, customisation notes, delivery instructions, billing details. We do not store full payment-card details — payment processing is handled by third-party payment providers.
- Communications — copies of messages you send us via phone, email, contact form or in-app messaging, along with our responses.
Information collected automatically
- Device data — device model, operating system version, unique device identifiers (advertising ID where applicable), language and time zone.
- Log data — IP address (truncated for storage), browser type, pages or screens viewed, referrer URL, timestamps and crash reports.
- Usage data — interactions inside our application (taps, screens viewed, session duration), used in aggregated form to improve product reliability.
Information from third parties
- Payment processors — confirmation of payment status. We never receive your full card data.
- Logistics partners — delivery confirmation and tracking events.
03 How we use your data
We use your information for the following purposes, and only for these purposes:
| Purpose | Lawful basis |
|---|---|
| Processing and fulfilling your orders | Contractual necessity |
| Responding to your enquiries and providing customer support | Legitimate interest / contract |
| Account creation and management (where applicable) | Contractual necessity |
| Detecting fraud, security incidents and abuse | Legitimate interest |
| Diagnostics, crash reporting and product improvement | Legitimate interest |
| Sending transactional notifications (order updates) | Contractual necessity |
| Sending marketing communications | Consent (you may opt out at any time) |
| Complying with legal and regulatory obligations | Legal obligation |
We do not sell your personal data. We do not use your data for automated decision-making that produces legal effects. We do not run profiling for advertising on minors.
04 App permissions (Google Play)
Where you use an EF BAGS mobile application distributed through Google Play, the application may request the following permissions. Each is requested only when needed, and only for the purpose described below.
| Permission | Why we request it | Optional? |
|---|---|---|
| Internet | To connect to our servers, load product images and submit orders. | No |
| Network state | To detect when you are offline and queue actions. | No |
| Camera | To allow you to scan QR-coded warranty cards on EF Heritage units. Not used for any other purpose. | Yes |
| Photos / Media (read) | To attach images to a support enquiry. Files are only uploaded when you select them. | Yes |
| Notifications | To deliver order status updates and shipping notifications. You can disable this in your device settings. | Yes |
| Approximate location | To suggest your nearest stockist. Coarse location only; never precise GPS. | Yes |
The EF BAGS application does not request access to your contacts, SMS, call logs, microphone, precise background location, or accessibility services. We do not use any restricted permission in a way that contradicts Google Play's Permissions and APIs that Access Sensitive Information policy.
05 Third-party services & sharing
We share information with the following categories of recipients, strictly to the extent necessary for the purposes described in this Policy:
- Payment processors — to securely process payments for your orders.
- Shipping and logistics partners — to deliver your order to the address you provide.
- Cloud hosting and infrastructure providers — to store data and deliver our website and application.
- Analytics and crash-reporting providers — to understand how our application performs (aggregated and pseudonymised wherever possible).
- Professional advisers — auditors, lawyers and accountants, where required.
- Government and regulatory bodies — where we are legally required to disclose information.
Each third-party recipient operates under a written agreement that obligates them to handle your data only for the contracted purpose, to maintain appropriate security, and to delete the data when no longer required.
06 Cookies & analytics
Our website uses a small number of cookies, in three categories:
- Strictly necessary — required for the website to function (e.g. cart state, session integrity). Cannot be disabled.
- Functional — remember your preferences (e.g. language). Disabling these will not break the site, but you may lose some convenience.
- Analytics — help us understand which pages are useful. Used in aggregate. You may opt out via your browser settings or our cookie banner where displayed.
We do not use advertising cookies. We do not engage in cross-site behavioural tracking.
07 Data security
We protect your data with a combination of administrative, physical and technical safeguards, including:
- TLS encryption for all data in transit between your device and our servers.
- Encryption-at-rest for sensitive fields in our databases.
- Access controls — only authorised personnel can access your data, and only for documented purposes.
- Regular vulnerability scanning, dependency patching and security review.
- Documented incident-response procedures, including breach notification where required by law.
No security control is absolute. If you have reason to believe your interaction with us is no longer secure, please notify us immediately using the contact details below.
08 Retention periods
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting or reporting requirements:
- Order & invoice records — kept for 7 years to satisfy tax and accounting obligations.
- Customer support correspondence — kept for 24 months from the date of last contact.
- Marketing preferences — kept until you opt out or your account is closed.
- Analytics and log data — kept for 12 months in pseudonymised form, then deleted.
09 Your rights
Depending on your jurisdiction, you may have the following rights in relation to your personal data:
- Access — request a copy of the personal data we hold about you.
- Rectification — request that we correct inaccurate or incomplete data.
- Erasure — request that we delete your data, subject to overriding legal obligations.
- Restriction — request that we limit the processing of your data.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests, including marketing.
- Withdrawal of consent — at any time, for processing based on consent.
To exercise any of these rights, contact us using the details in Section 14. We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with your local data protection authority.
10 Children's privacy
EF BAGS products, services and applications are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.
If you are a parent or guardian and you believe that your child has provided us with personal information without your consent, please contact us at +92 321 764 5821 and we will delete the information promptly.
Our application is rated Everyone on Google Play. It does not include user-generated content shared publicly, in-app communications between users, or in-app advertising directed at minors.
11 International transfers
EF BAGS is headquartered in Islamabad, Pakistan. Where we use third-party service providers based outside Pakistan, we ensure that any transfer of your personal data is subject to appropriate safeguards, including contractual commitments equivalent to those required under the General Data Protection Regulation (GDPR) where applicable.
12 Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. When we make material changes, we will update the "Last Updated" date at the top of this document, and where appropriate, notify you by email or through a prominent notice in our application or on our website prior to the change taking effect.
13 Terms summary
Use of the EF BAGS website, applications and services is also subject to our standard terms of sale. All product images on this site are representative; final units may vary slightly due to the hand-finished nature of certain EF BAGS collections. Pricing is in Pakistani Rupees (PKR) unless otherwise stated. Heritage and limited-run editions are sold on a registration basis and are non-transferable except as set out in the warranty document.
14 Contact us
If you have any questions about this Privacy Policy, our data practices, or wish to exercise any of your rights, please contact our data protection point of contact:
+92 321 764 5821
Workshop 11 picks up the line directly. Hours: Mon — Sat · 10:00 — 19:00 PKT.
Mujahid Plaza, Office No. 11
3rd Floor, Islamabad, 44000, Pakistan.
Mark your enquiry "Attn: Privacy / Data Protection" for a faster response.