Privacy Poilcy

Privacy Policy


Omama Studio ("we", "us", "our") operates the website www.omamastudio.com. This policy explains what personal information we collect when you visit or buy from our store, why we collect it, how we protect it, and what choices you have.


We are based in Pakistan. Pakistan does not currently have a single comprehensive data protection statute in force — the Personal Data Protection Bill remains in draft — but we are bound by the Prevention of Electronic Crimes Act 2016 (as amended), the Electronic Transactions Ordinance 2002, and applicable consumer protection law. Regardless of what the law requires, we handle your information the way we would want ours handled.


By using our website or placing an order, you agree to the practices described below.




1. Information We Collect

Information you give us directly


  • Order information: your name, delivery address, billing address, email address, phone number, and the details of what you ordered.
  • Payment information: the payment method you choose. If you pay by card or through a digital wallet, your card number and financial credentials are entered directly with our payment processor — we do not see, receive or store full card numbers. We may retain the last four digits and card type for order reference.
  • Account information: if you create an account, your login email and an encrypted password.
  • Communications: messages you send us by email, WhatsApp, or social media, including any information you choose to share when raising a query, complaint, return or exchange.
  • Marketing preferences: your email address or phone number if you subscribe to our newsletter or WhatsApp updates.
  • Optional details: measurements, size preferences, gift messages or delivery instructions that you provide.

  • Information collected automatically

  • Device and browser type, operating system, screen size and language settings
  • IP address and approximate location derived from it
  • Pages viewed, products browsed, time spent, and the site or advert you arrived from
  • Cart activity, including items added but not purchased

Information from third parties


  • Order, delivery and return status updates from our courier partners
  • Payment authorisation, decline and chargeback information from our payment processors
  • Aggregated advertising and audience data from platforms such as Meta and Google, where you have permitted them to share it


We do not knowingly collect information from anyone under the age of 18. If you believe a minor has provided us personal information, contact us at [EMAIL ADDRESS] and we will delete it.




2. How We Use Your Information

We use your information to:


  • Process, confirm, pack and deliver your orders
  • Take payment and, where applicable, issue refunds
  • Send transactional messages — order confirmations, dispatch notices, tracking links, delivery confirmations and return updates
  • Respond to your questions, complaints and requests
  • Verify orders where we have reasonable grounds to suspect fraud, and to reduce failed cash-on-delivery deliveries
  • Manage returns, exchanges and warranty or defect claims
  • Send marketing messages about new arrivals, restocks and sales — only where you have opted in
  • Understand how our store is used so we can improve our products, sizing, photography, pricing and checkout
  • Meet our record-keeping, tax and legal obligations


We do not sell your personal information. We do not share your phone number or address with anyone except the parties described in Section 4, and only to the extent needed to fulfil your order.




3. Cookies and Similar Technologies

Cookies are small files stored on your device when you visit our site. We use:


  • Essential cookies — required for the site to work. They keep your cart contents, remember you are logged in, and secure the checkout. These cannot be switched off.
  • Analytics cookies — help us understand which pages and products people visit, where they lose interest, and where the checkout is failing.
  • Marketing cookies — set by advertising platforms so we can show relevant adverts and measure whether they worked. These may allow the platform to recognise your device across other sites.
  • Preference cookies — remember settings such as your language or currency.

You can block or delete cookies through your browser settings, and you can opt out of personalised advertising through the settings of the relevant platform. Blocking essential cookies will prevent checkout from working.


Our site does not currently respond to browser "Do Not Track" signals, as no common standard for handling them has been agreed.




4. Third-Party Services

We rely on trusted service providers to run our store. Each receives only the information necessary for its role and is expected to protect it:


  • E-commerce platform: Shopify, which hosts our store and processes orders on our behalf.
  • Payment processors: [PAYMENT PROVIDERS — e.g. Shopify Payments, JazzCash, Easypaisa, your bank's gateway], who handle transactions and fraud screening.
  • Courier and logistics partners: [COURIER NAMES — e.g. TCS, Leopards, PostEx, Trax], who receive your name, address and phone number to deliver your order and collect payment on delivery.
  • Communication tools: [EMAIL / SMS / WHATSAPP PROVIDERS], used to send order updates and, where you have opted in, marketing.
  • Analytics providers: [e.g. Google Analytics, Shopify Analytics].
  • Advertising platforms: [e.g. Meta, Google, TikTok], where we run adverts.

Some of these providers are based outside Pakistan, which means your information may be stored or processed abroad. We choose providers that maintain recognised security standards.


We may also disclose your information where we are legally required to — in response to a lawful order from a court, regulator or law enforcement agency — or where disclosure is necessary to establish or defend a legal claim, prevent fraud, or protect the safety of any person. If our business is sold or merged, customer information may transfer as part of that transaction; we will notify you if that happens.




5. Data Security

We take reasonable technical and organisational measures to protect your information, including:


  • Encrypted connections (SSL/TLS) across our entire site, including checkout
  • Payment processing handled entirely by PCI-DSS compliant processors, so card data never reaches our systems
  • Restricted access to customer records, limited to team members who need it to do their job
  • Passwords stored in hashed form, never in plain text
  • Regular review of the accounts and integrations that can access our store admin

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach occurs that is likely to affect you, we will inform you and take prompt corrective action.


Please note: we will never call, email or message you asking for your full card number, CVV, OTP, bank password or PIN. If someone contacts you claiming to be from [STORE NAME] and asks for these, it is a scam — do not share anything and report it to us at [EMAIL ADDRESS].




6. Data Retention

We keep order records for [RETENTION PERIOD — e.g. 5 years] to meet tax and accounting obligations and to handle any later dispute or claim. Account information is kept while your account is active. Marketing contact details are kept until you unsubscribe. Information no longer needed is deleted or anonymised.




7. Your Rights

You may ask us to:


  • Access the personal information we hold about you
  • Correct anything inaccurate or out of date
  • Delete your information, where we are not required to keep it for legal, tax or dispute-related reasons
  • Stop marketing — you can unsubscribe from emails using the link in any message, reply STOP to SMS or WhatsApp, or simply write to us
  • Withdraw consent you have previously given, without affecting anything done before you withdrew it
  • Receive a copy of the information you gave us, in a commonly used format
  • Object to a particular use of your information and have us reconsider it


To exercise any of these, email [EMAIL ADDRESS] from the address linked to your order or account. We may ask you to confirm your identity so that we do not disclose your information to someone else. We will respond within [RESPONSE TIMEFRAME — e.g. 30 days].


If you are unhappy with how we have handled your information, please raise it with us first — we would rather fix it directly. You also retain the right to complain to the relevant consumer protection authority in your province.




8. Changes to This Policy

We may update this policy as our business, our service providers or the law changes. The revised version takes effect when posted on this page, and the "Last updated" date will change. Where the change is significant, we will make reasonable efforts to notify you directly.




9. Contact Us

Questions about this policy, or about the information we hold on you:


Omama Studio.

Phone / WhatsApp: 03715927142