Privacy Policy

• Account details: your name, email address, phone number, delivery address and password. Passwords are stored only in scrambled (hashed) form; we cannot see them.
• Orders: the products, quantities, prices, delivery details and payment method of every order.
• Online payment screenshots: if you pay online, the payment screenshot you upload.
• Chat: messages, photos, voice messages and videos you send us in chat, plus emoji reactions.
• Reviews: your star rating, comment and review photos. Location data is removed from review photos when they are uploaded.
• Appeals: the message you send if your account is restricted.
• Security records: email verification codes and short-lived records of sign-in and order attempts, used to stop password guessing and abuse.
• Visitor counting: when you open a page we record that a visitor came that day (and which product they viewed). We store a scrambled code made from your IP address, never the IP address itself, and no advertising or tracking cookies. This only lets us count visitors.

• To create your account, deliver your orders and contact you about them.
• To check online payments.
• To answer your chat messages and appeals.
• To show reviews to other shoppers.
• To protect the shop and its customers from fraud, fake orders and abuse.
• To understand how many people visit the shop and which products are popular.

We do not sell your data, and we do not use it for advertising.

• Leopards Courier: your name, phone number, delivery address and the cash-on-delivery amount, so they can deliver your parcel.
• Our hosting and email providers, which run the website and send our emails. They process data only to provide that service.
• Authorities, if the law requires it.

Reviews (with your first name only) are public on product pages.

• Payment screenshots: deleted 6 months after the order is delivered or cancelled.
• Chat photos, voice messages and videos: deleted 2 months after they are sent.
• Chat messages: deleted 6 months after they are sent.
• Order records: your name, email, phone and address are removed from an order 1 year after it is delivered or cancelled. The products and amounts are kept for our accounts.
• Visitor counts: about 1 year.
• Security records: sign-in and order attempt records within 24 hours; verification codes as soon as they are used or expire.
• Backups: the server keeps backup copies for up to 14 days, so deleted data can remain in a backup for up to 14 days.

• You can see and change your name, phone, address, email and password on your Profile page.
• You can delete your account from your Profile page at any time. This deletes your account, chat (including photos, voice messages and videos), reviews, notifications and payment screenshots. Your past orders stay in our records, no longer linked to any account, for the time listed above.
• For any other privacy question, email support@upshoppk.com.

We use only the cookies needed for the site to work: one that keeps you signed in, and one for the shop owner's admin sign-in. Your cart is saved in your own browser. We use no advertising or analytics cookies.

You must be 18 or older to create an account, or use the shop with a parent's or guardian's permission.

If we change this policy we will update this page and the effective date above.