Privacy policy
Vasl Chocolate — Effective Date: [February, 2026]
1. Who We Are
Vasl is a premium chocolate brand operating under Healy Herbs, Pakistan. Our website is vaslchocolate.com. When this policy refers to "Vasl," "we," "us," or "our," it means Healy Herbs and the Vasl brand.
For any privacy-related questions, contact us at info@vaslchocolate.com
2. What Information We Collect
We collect information in two ways — what you give us directly, and what is collected automatically when you use our website.
Information you provide directly:
- Full name
- Delivery address
- Phone number (for order confirmation and COD verification)
- Email address
- Payment information (processed securely through our payment partners — we do not store card details)
- Any messages or queries you send us via email or WhatsApp
Information collected automatically:
- IP address and browser type
- Pages visited on our website and time spent
- Referring website or source (e.g., Instagram, Google)
- Device type (mobile, desktop)
We do not collect any government-issued identification, financial account numbers, or health records.
3. Why We Collect This Information
We use the information we collect for the following purposes only:
| Purpose | Information Used |
|---|---|
| Processing and fulfilling your order | Name, address, phone number |
| Verifying COD orders before dispatch | Phone number |
| Sending order confirmation and updates | Email address, phone number |
| Handling returns, refunds, or complaints | Name, order details, contact info |
| Sending marketing communications (only with your consent) | Email address, phone number |
| Improving our website and understanding customer behavior | Automatically collected data |
We do not use your data for any purpose beyond what is listed above.
4. Your Phone Number and WhatsApp
Because WhatsApp is our primary support and order channel, we want to be clear about how your phone number is used.
When you place an order, we may contact you via WhatsApp or phone call to:
- Confirm your order details before dispatch
- Provide delivery updates
- Resolve any issues with your order
Marketing messages via WhatsApp or SMS: We will only send you promotional content — offers, new product announcements, or updates — if you have explicitly opted in to receive them. You may opt out at any time by replying STOP to any message, or by emailing us at info@vaslchocolate.com.
We will never add you to broadcast lists without your consent.
5. Your Order and Your Privacy
We understand that what you purchase from Vasl is a personal matter. We are committed to the following:
- We will never publicly share, post, or reference individual customer purchases
- Customer testimonials or reviews are only shared with your explicit permission
- All orders are shipped in plain, discreet packaging with no product name or brand reference visible on the exterior
- Our internal order records are accessible only to authorized team members involved in fulfillment and customer support
6. Do We Share Your Information?
We do not sell, rent, or trade your personal information. Ever.
We share your information only with the following third parties, and only to the extent necessary to fulfill your order:
Courier and logistics partners (e.g., Leopards Courier, PostEx): Your name, address, and phone number are shared with the courier assigned to your delivery. Their handling of your data is governed by their own privacy policies.
Payment processors (e.g., Safepay, JazzCash, EasyPaisa): Payment information is processed directly by these providers. We do not receive or store your card or wallet credentials. Their handling of your data is governed by their own privacy policies.
Shopify Inc.: Our website is hosted on Shopify. Your order data is stored on Shopify's secure servers. Shopify is compliant with international data security standards. You can review Shopify's privacy policy at shopify.com/legal/privacy.
Google Analytics: We use Google Analytics to understand how visitors use our website. This data is aggregated and anonymous — it cannot be used to identify you individually.
We do not share your information with advertisers, data brokers, or any third party for commercial purposes.
7. Data Security
We take reasonable technical and organizational precautions to protect your personal information from unauthorized access, loss, or misuse. These include:
- Secure HTTPS encryption on our website
- Restricted internal access to customer data
- Payment processing through PCI-DSS compliant providers
No method of data transmission over the internet is 100% secure. While we do everything reasonably possible to protect your information, we cannot guarantee absolute security.
8. Data Storage and International Transfer
Our website is hosted by Shopify Inc., a Canadian company with servers located internationally. By placing an order on vaslchocolate.com, you acknowledge that your data may be stored and processed outside of Pakistan. We ensure that any such transfer is handled through providers who maintain adequate data protection standards.
9. How Long We Keep Your Information
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, including:
- Order records: retained for a minimum of 2 years for accounting and legal compliance
- Customer support communications: retained for 1 year from the date of resolution
- Marketing consent records: retained until you withdraw consent
You may request deletion of your data at any time by contacting us at info@vaslchocolate.com. We will action this within 14 business days, subject to any legal retention obligations.
10. Your Rights
You have the right to:
- Access the personal information we hold about you
- Correct any inaccurate information
- Request deletion of your data, subject to legal retention requirements
- Withdraw consent for marketing communications at any time
- Ask us what data we hold about you and how it is being used
To exercise any of these rights, email us at info@vaslchocolate.com with the subject line: "Data Request." We will respond within 14 business days.
11. Cookies
Our website uses cookies — small files stored on your device — to improve your experience and collect usage data. The cookies we use include:
- Session cookies: keep your cart active while you browse
- Analytics cookies: help us understand how visitors use our site (via Google Analytics)
- Shopify platform cookies: required for core store functionality
You can disable cookies in your browser settings. Disabling cookies may affect certain features of the website, such as the shopping cart.
12. Age Restriction
Our products are intended for adults aged 18 and above. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has submitted personal information through our website, please contact us at info@vaslchocolate.com and we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, the revised version will be posted on this page with an updated effective date. We encourage you to review this page periodically. Your continued use of the website after changes are posted constitutes acceptance of the updated policy.
14. Governing Law
This Privacy Policy is governed by the laws of the Islamic Republic of Pakistan, including the Prevention of Electronic Crimes Act (PECA) 2016 and any applicable data protection regulations.
Contact
For all privacy-related questions, requests, or concerns:
Email: info@vaslchocolate.com Response time: Monday–Saturday, within 24–48 hours
This policy applies to vaslchocolate.com and all customer interactions conducted under the Vasl brand. Last updated: [February, 2026]