Privacy Policy · PK Foods

At PK Foods, we respect your privacy and are committed to protecting the personal data you share with us. This policy explains what information we collect, how we use and store it, and the controls you have over your data across the PK Foods website and mobile applications.

1. Information We Collect

Order & Contact Information: For delivering orders across Pakistan, we collect your full name, mobile telephone number, delivery address (house/flat, street, area, city, and province), and optional email address for order confirmation and tracking updates.

Account & Google Sign-In Data: When you create an account or sign in using Google OAuth, we receive and store your verified email address, full name, and Google profile picture URL (requested under the basic profile and email scopes) to personalize your account dashboard.

Saved Profile & Address Book: Registered users may save multiple delivery addresses (including recipient name, contact phone number, and physical shipping address) in their personal Address Book for faster checkout. You may update or delete saved addresses at any time in your Account settings.

Custom Profile Pictures: If you choose to upload a custom avatar, the image is securely processed and hosted via our content delivery partner (Cloudinary). We do not store raw image binaries on our primary database.

2. Cookies, Tokens & Session Identifiers

PK Foods uses cookies and session storage strictly to authenticate users and maintain shopping cart continuity:

Refresh Token Cookie: When logged in, a secure authentication cookie (refreshToken) is set with HttpOnly, Secure, and SameSite=Lax flags to protect against unauthorized script access and cross-site request forgery (CSRF).
Access Token: Short-lived JWT access tokens are held temporarily in memory during your active browsing session and never written to permanent disk storage.
Guest Sessions & Cart State: Guest users are assigned a local session key so that items in your cart persist as you browse. When you log in, your guest cart is seamlessly merged into your registered account.

3. Payment Information & Card Security

No Raw Card Storage: PK Foods never collects, processes, or stores your credit or debit card numbers, CVVs, or bank account PINs on our servers.

Cash on Delivery (COD): For cash-on-delivery orders, payment is made directly to the courier upon doorstep receipt.

Online & Gateway Payments: Any electronic payments and future saved payment methods operate through PCI-DSS Level 1 compliant payment gateways via tokenization. When you save a payment method, only an opaque reference token and non-sensitive display details (e.g. last 4 digits and card brand) are retained. Raw payment credentials never touch PK Foods servers.

4. How We Use & Share Your Information

Your information is used exclusively to fulfill orders, arrange nationwide courier dispatch, communicate status updates, and provide customer support.

We do not sell, rent, monetize, or trade your personal information with any third-party advertisers.

Information is shared only with verified logistics and courier partners (e.g. Trax, Leopards, TCS) strictly to ensure successful delivery to your destination.

5. Your Rights & Data Control

You have full control over your personal data:

Review, update, or clear your saved addresses from your account settings.
Revoke active sessions and sign out across all devices at any time.
Request a copy or complete deletion of your customer record and order history by reaching out to our support team.