AKS
Privacy policy
Last updated 12 October 2026
Who runs this shop
AKS Atelier is operated by Qamar Un Nisa (sole proprietor), Karachi, Pakistan. Email info@aks-atelier.com. There is no registered company. This notice is in English, which is the language of the shop.
What we use your data for
We use it to take your order, cut and deliver the piece inside Pakistan, take payment in Pakistani rupees (PKR), and keep an account so you can sign in again. We do not sell your data.
Orders
When you order, we keep the name, phone, delivery address in Pakistan, and the PKR price you agreed at checkout. Those details are copied onto the order and stay on that order so we can deliver it, answer a payment dispute, and keep a record of the sale. Deleting your account does not wipe that order copy.
Account
If you create an account we store your name, an email when we have one, and a phone when we have one. A sign-in code sent by email or WhatsApp is stored only as a hash and expires after 10 minutes.
If you continue with Facebook, Meta sends us your Facebook id, name, email address when the account has one, and profile picture URL. We use that to open your AKS account and to recognise you the next time. We store the Facebook id and the access token Meta issues for that sign-in. We do not post to Facebook for you. If Facebook shares no email, we store a non-deliverable placeholder address so the account still has a unique key.
We keep this while the account is open. When you ask us to delete it, or Meta sends a deletion request, we remove the Facebook link, the token, and the profile fields, and we disable the account as described under Deletion.
Instagram sign-in works for a professional Instagram account. Meta sends us your Instagram user id, username, name, account type, and profile picture URL. Instagram does not send an email. We store the user id, the access token, and a non-deliverable placeholder address. The purpose, the retention, and the deletion are the same as for Facebook.
TikTok
If you continue with TikTok, TikTok sends us your open id, display name, avatar URL, and username when the scopes we requested include them. We ask for an email only if TikTok has approved that scope. Otherwise we store a non-deliverable placeholder address. We store the open id and the access token so we can recognise you, and we delete them when the account is deleted. TikTok does not call our deletion endpoint; use the data deletion page.
If you sign in with WhatsApp, we send a one-time code to the number you typed, through WhatsApp’s Cloud API. We store the number, and the code only as a hash, for 10 minutes. We do not receive your WhatsApp chats. The same number is how we reach you about an order when you give it at checkout.
Who else sees it
The courier who delivers inside Pakistan receives the name, phone, and address on the order. The payment service you choose at checkout receives what it needs to take the PKR payment. Meta (for Facebook, Instagram, and WhatsApp) and TikTok receive the sign-in handshake when you use those buttons. Our email sender receives an address when we write to you about an order, or when you join the newsletter. We do not pass your data to anyone else for their own marketing.
How long we keep it
Account and sign-in data stay while the account is open. When the account is deleted we clear them or replace them with a marker that is not a real inbox. Sign-in codes last 10 minutes. The order copy stays after deletion so the sale can still be delivered and recorded. We do not keep it for a reason beyond the order, a payment dispute, and that record.
Deletion
You can ask us to delete the account from /data-deletion. Facebook and Instagram can also send a signed deletion request to /api/auth/meta/data-deletion. We then disable the account, clear the name, phone, and email, delete the sign-in links and tokens, and delete saved addresses. The order copy stays, as above. A staff login is not removed by that request.
Care of the data
We take reasonable care to stop unauthorised access to this data. Getting into it without permission, copying it, or using someone else’s identity to place an order can be an offence under Pakistan’s Prevention of Electronic Crimes Act, 2016.
Contact
Qamar Un Nisa Karachi, Pakistan info@aks-atelier.com +923378520110