Privacy notice

Effective 2026-04-15. Operated by KitKraft Pakistan (Pvt) Ltd, Lahore. PECA 2016 + Personal Data Protection Act, 2023 compliant. Data Protection Officer: dpo@kitkraft.pk.

What we collect

At point-of-sale and on kitkraft.pk we collect: name, phone, email, delivery address (when you ask us to deliver), the SKU you bought, and the timestamp. Card data is handled by our PSO bank and never touches our systems.

Why we collect it

To honour warranties, to send you a receipt, to operate the wedding registry if you opt in, and to write the daily Pulse briefing the store managers and founders read at 8am — that briefing aggregates SKU and basket data, never individual customers.

Who we share it with

Brand warranty fulfilment partners (Wüsthof Pakistan, Le Creuset Pakistan, Groupe SEB Lahore for Tefal), our courier (M&P, TCS), and our PSO bank for card settlement. We do not sell or rent personal data. We do not share data outside Pakistan except for the international warranty claim path described above.

How long we keep it

Transactional records: 7 years (FBR retention rule). Warranty records: for the full warranty period plus 12 months. Marketing email lists: until you unsubscribe; one-click in every email.

Your rights under PDPA 2023

• Access — request a copy of what we hold on you, supplied within 30 days.
• Rectification — ask us to correct anything inaccurate.
• Erasure — ask us to delete personal data, subject to FBR retention obligations.
• Withdrawal of consent — for marketing, anytime, no questions asked.
• Lodge a complaint — to the National Commission for Personal Data Protection (NCPDP).

Send any request to dpo@kitkraft.pk.

Cookies on kitkraft.pk

We set a single first-party session cookie for cart state. We use Plausible Analytics, which stores no cross-site identifiers and which is configured to anonymise IP at edge.

AI use disclosure

The Pulse daily-sales briefing is written by Google's Gemini 2.0 Flash model on top of deterministic numbers we compute ourselves. The model never sees individual customer data. The model output is reviewed by Mariam every morning before any action is taken on it.