On this page
1. Who we are and who is responsible
SabziMandi Online operates the grocery ordering service at sabzimandi.online. In this policy, “we”, “us” and “our” refer to the business operating that service. We decide how information collected for our website, orders and customer service is used.
You can contact our team on WhatsApp or by phone at +92 311 1522225. Tell us if your request concerns privacy or marketing so it reaches the appropriate person.
2. When this policy applies
This policy covers this website, guest checkout, optional customer accounts, order communications, delivery support and the information we receive when you contact our team about those services. It also covers website information used through our customer APIs. Separate notices may apply to a future app, payment provider or additional service.
External websites and social networks operate under their own policies. Visiting one of our social or WhatsApp links takes you to that provider. Their collection of information is separate from ours. This policy does not grant them unlimited permission to use your information.
3. Information we collect
- Contact and delivery details
- Your name, phone number, email when provided, selected city, sector or service area, delivery address, saved addresses and delivery instructions. Guest orders require delivery details but not account registration.
- Order and transaction records
- Order numbers, products, quantities, accepted prices, totals, invoices, fulfilment updates, delivery assignments, recorded payments, credits, refunds, cancellation reasons and your related communications.
- Account and support information
- Account profile, password hash, verification and recovery records, account status, preferences, enquiries and any attachments or information you voluntarily send us. Do not send passwords, full payment-card information or unnecessary sensitive documents through support channels.
- Technical and device information
- IP address, request time, browser/device information, session and basket identifiers, language/city settings, security logs and, if you enable notifications, device notification tokens and subscription preferences. An IP address or device identifier can be personal information.
- Marketing information
- Where lawfully available and relevant, your contact preferences, consent/withdrawal records, city, language, purchase frequency, order value, products you buy, interests you express and responses to offers or surveys. We do not require unrelated sensitive information for marketing.
We receive information from you, from use of our service, and from authorized staff, delivery personnel and service providers involved in your order. If you provide another person’s delivery or contact details, you must have authority to do so. Do not opt someone else into promotions without their permission.
Choosing a delivery address is not the same as granting continuous location tracking. Any future access to precise device location, contacts, camera or other permissions will require an appropriate feature-specific notice and permission.
4. How we use information to provide the service
- Identify your selected city, display available products and prices, validate checkout, prepare and deliver orders, and communicate about substitutions, availability, delays or delivery problems.
- Maintain order history, issue invoices, record payments and refunds, reconcile accounts, handle complaints and comply with applicable record-keeping obligations.
- Operate optional accounts, verify email, recover access, manage saved addresses and protect private order links.
- Prevent fraud and misuse, investigate errors, enforce appropriate access controls and maintain the reliability of the service.
- Review service demand, stock needs and customer feedback, and improve products, delivery coverage and customer experience. Where practical, we use aggregated or de-identified information for planning.
We process necessary order information to fulfil your request, meet legal obligations and protect legitimate operational interests where permitted. Optional activities requiring consent depend on that consent. We do not treat every use of information as covered by a single blanket permission.
5. Marketing, promotions and sales follow-up
With the permissions required by applicable law and the contact channel, we may use your phone number, name, email, city, language, product interests and purchase history for marketing and sales purposes. This can include offers, product recommendations, seasonal availability, promotions, new service announcements, customer surveys, sales enquiries and follow-up about an offer in which you expressed interest.
We may group customers by broad characteristics such as city, language, frequently purchased products or order frequency to make offers more relevant. Marketing analysis may include campaign responses and engagement where that measurement has been disclosed and lawfully enabled. We do not use grocery marketing to make decisions about employment, lending, insurance or other comparable matters.
Promotional contact may use the channels you have authorized, such as SMS, WhatsApp messages, telephone calls, email or push notifications. Permission for one channel or message category does not automatically authorize every other channel or independent business. Browser permission for order notifications does not, by itself, give unlimited marketing permission.
We may seek permission through a clear opt-in, a request you make to our team or another documented agreement that meets applicable requirements. Simply browsing, placing an order, accepting the terms or initiating a support conversation is not automatic consent to unrelated future advertising.
6. Who may contact you and when
Service communications may come from SabziMandi’s owner, authorized city admins, customer support and sales staff, assigned delivery personnel, or contracted providers acting on our behalf. Necessary order and delivery contact may occur when required to complete your order, including a delivery period you requested.
Where you have authorized marketing, our sales/marketing team and contracted agencies or communication providers may contact you on behalf of SabziMandi Online for the disclosed purposes. They must identify the business they represent, follow our instructions, protect the information they receive and respect your preferences and withdrawal requests.
Marketing is subject to reasonable contact frequency, applicable local contact-hour restrictions, channel rules and preferences you communicate. We do not claim permission to call or message you at any hour indefinitely. An urgent order update is different from a promotional message.
If we propose sharing your details with a separate brand or independent partner for its own marketing, we will identify that recipient and purpose and obtain any separate permission required before sharing. This policy is not permission for anyone who obtains your number to contact you or reuse it without restriction.
7. Your marketing and contact choices
You can decline or withdraw marketing permission at any time. Tell the sender to stop, use an unsubscribe option provided in a message, or contact our team at +92 311 1522225. State “stop marketing” and the affected phone number or email, and tell us whether you want to stop one channel or all promotional contact. Do not include passwords or private order tokens in a public social comment.
We will stop the relevant marketing and communicate the withdrawal to providers carrying out those campaigns for us. We may retain a limited suppression record so the same contact is not accidentally added back to a campaign. Withdrawal applies going forward and does not erase lawful processing that already occurred.
Declining promotions does not prevent guest ordering or necessary order, safety, payment, fraud-prevention or account-security communications. If you disable an operational channel, we may need another way to arrange delivery. You can also disable browser/device notifications through the website’s notification preferences and your device settings.
Starting a WhatsApp chat opens a third-party service; it does not automatically subscribe you to marketing. An opt-out can be requested on or off WhatsApp.
9. Order notifications and devices
The service keeps notification history about relevant order events. If you choose to enable push notifications, Google Firebase Cloud Messaging helps send them to a browser or device using a notification token. Tokens, permission state and delivery results may be processed to send, retry or disable notifications.
Notification permission is optional. Ordering still works without push. Devices may display notifications on a lock screen, so consider your device privacy settings. Do not share private status links or device access with people you do not trust. Future promotional push messages require the applicable marketing permission, in addition to device permission.
11. Processing locations and transfers
Our service providers may host or process information in Pakistan or in overseas data centres. Cloud and communication services, including Google Firebase and WhatsApp/Meta, can involve international processing. We consider provider access, security and applicable transfer requirements when using them.
Where an applicable law requires additional safeguards, restrictions or permission for a transfer, those requirements must be met. We do not promise that every record is stored only in Pakistan or that using this website waives transfer protections.
12. Security and your responsibilities
We use measures appropriate to the service, including restricted staff access, protected account credentials, HTTPS on the deployed service, private document access, security checks and operational backups. Passwords are hashed; staff should not ask you to disclose a password or verification secret over WhatsApp. Access to an order is controlled by account authorization or a private token, not by knowing its order number.
No website, transmission or backup can be guaranteed completely secure. Contact us promptly if you suspect unauthorized access. Keep passwords, recovery links, private order links, email access and devices secure. Marketing and privacy enquiries do not require you to send us your account password.
13. How long information is kept
We keep information for the purposes described here for as long as reasonably necessary, including to complete orders, manage accounts, support customers, maintain accounting and tax records, handle disputes and meet applicable obligations. Different records may need different periods; we do not assign a single blanket deletion date to every category.
Account closure or a deletion request does not necessarily erase invoices, orders, payment records or required audit history. Where retention is necessary, access and use remain restricted. Backups may retain information until their normal rotation, rather than being rewritten immediately. Limited records may also be kept to demonstrate permissions and honour marketing opt-outs.
You may ask what information is retained, why it is needed and whether it can be removed or de-identified. We review requests against the relevant operational and legal requirements and explain material limits.
14. Access, corrections, deletion and complaints
Contact us to request information about your data, correct inaccurate details, withdraw marketing permission, request deletion where appropriate or raise a privacy concern. Account tools may also let you edit a profile, change saved addresses or manage access. Order snapshots may need to preserve the details recorded at purchase while a correction is noted separately.
We may verify your identity proportionately before releasing or changing records. We will not disclose another person’s order simply because a requester knows their phone number. Do not send unnecessary identity documents unless our team explains why they are required and provides an appropriate channel.
We aim to respond within a reasonable time and follow any deadline imposed by the law that applies to your request. If a request cannot be completed fully, we will explain the reason, such as required transaction retention or another person’s rights. Additional mandatory rights and lawful complaint routes are not excluded by this policy.
15. Children and other people’s information
Orders and accounts are intended to be handled by adults with authority to enter the transaction. We do not intentionally target children with marketing or seek unnecessary information about them. An adult arranging a household delivery should provide the necessary adult contact information. Contact us if a child’s information has been provided inappropriately so we can review and address it.
16. Changes to this policy
The effective date and version appear above. We may update the notice to reflect changes in the service, providers or legal requirements. Material new optional purposes will be explained before we rely on any additional permission they require. A policy update does not turn an earlier refusal into marketing consent or retrospectively authorize an unrelated use.
17. Contact and further information
For privacy, marketing withdrawal or order-support requests, contact SabziMandi Online at +92 311 1522225 via WhatsApp or phone.
Our terms and conditions explain ordering, payment, delivery and complaints. This notice provides information about processing; it is not unrestricted consent to marketing.