Last updated: September 2026
This policy explains what LYAL Shoes collects when you visit lyalshoes.com or buy from us, why we collect it, and what control you have over it. We’ve written it in plain language rather than legal boilerplate, because a policy you can’t read isn’t really a disclosure.
In this policy, “we”, “us” and “LYAL” mean Lyal Shoes, operating as LYAL Shoes.
What we collect
When you place an order
- Your name, delivery address, email address and mobile number
- What you ordered, including size and colour
- Your order history and any returns or exchanges
- Delivery notes you give us, and your signature or confirmation on delivery
When you pay
- For card payments, our payment processor handles your card details directly. LYAL never sees or stores your full card number, expiry or CVC.
- For Easypaisa or JazzCash, we receive confirmation that payment succeeded and the mobile number used, not your wallet credentials.
- For cash on delivery, we record only that the courier collected payment.
When you create an account
- Your name, email address, password (stored encrypted, never in readable form), saved addresses and wishlist
When you contact us
- Your message, and whatever contact details you send it from, including WhatsApp messages and their history
Automatically, when you browse
- IP address, browser type, device type, operating system and screen size
- Pages viewed, time on each page, referring website, and what you clicked
- Cookies and similar technologies, described below
We do not collect your national identity card number, biometric data, or any special category information such as health, religion or political views. If you send any of this to us voluntarily, we will delete it.
We do not sell your personal data. We do not rent, trade or share it with data brokers.
Who we share it with
We share only what each party needs to do its job:
- Courier and delivery partners — your name, address and phone number, so they can deliver the box and call you if they can’t find the gate
- Payment processors and banks — to take payment and process refunds
- Our website and hosting providers — who store the site and its database on our instruction
- Analytics and advertising platforms — anonymised or pseudonymised usage data, where you have accepted those cookies
- Professional advisers and authorities — where we are legally required to disclose, or where it is necessary to establish or defend a legal claim
Some of these providers operate servers outside Pakistan. Where that happens, we use providers that apply recognised security and confidentiality standards to the data they process for us.
Cookies
Cookies are small files stored by your browser. We use four kinds:
- Essential — keep you signed in, remember your cart, and let checkout work. These cannot be switched off without breaking the site.
- Preference — remember your size, language and display choices.
- Analytics — tell us which pages people actually read and where they drop off.
- Marketing — measure our advertising and show relevant products on other platforms.
You can clear or block cookies in your browser settings at any time. Blocking essential cookies will prevent checkout from working.
Marketing messages
We send drop announcements, restock alerts and offers only to people who ask for them. Every email has an unsubscribe link, and you can reply STOP to any WhatsApp or SMS message to be removed. Order confirmations, dispatch notices and delivery updates are service messages, not marketing — you will receive those for any order you place.
How long we keep it
- Order, invoice and payment records — retained as long as tax and accounting law requires
- Account details — until you ask us to delete your account
- Support and WhatsApp conversations — [12–24] months
- Marketing consent records — until you withdraw consent, plus a short record of the withdrawal itself
- Analytics data — typically 14 months, in aggregated form
How we protect it
The site runs over HTTPS. Passwords are hashed, never stored in plain text. Access to customer data is limited to team members who need it to do their work, and payment card data never touches our systems. No system is perfectly secure, and we do not claim otherwise — but if a breach ever affects your data, we will tell you and the relevant authority promptly.
Your choices
You can ask us to:
- Give you a copy of the personal data we hold about you
- Correct anything inaccurate
- Delete your account and associated data, subject to records we must keep by law
- Stop sending you marketing
- Stop using your data for advertising and analytics
Email: info@lyalshoes.com with your request and the email address or phone number on your order. We respond within 10 days. If you are not satisfied with our answer, you may raise the matter with the relevant consumer protection authority in your province.
Children
Our store is intended for adults. We do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.
Links to other sites
Our pages may link to social platforms and other websites. Once you leave www.lyalshoes.com, their policies apply, not ours.
Changes to this policy
We update this page when our practices change. The date at the top always reflects the current version. If we make a change that materially affects your rights, we will notify account holders by email.