Legal
Privacy policy
We collect as little as we need to reply to you and to see which picks people actually click. We do not run a cart in this phase, so we do not store payment cards.
Narobuy (“we”, “us”) is an editorial shop based in Pakistan. This page explains what we store when you use the site, the contact form, and outbound affiliate links. It is written for this product as it exists today — not copied from a generic generator.
Who this policy covers
It covers visitors to this website, people who send a contact message, and people who click a sponsored link through /go/ toward Daraz, Telemart, or our own-stock contact flow. It does not cover Daraz, Telemart, Google, or any other company you reach after you leave. Their policies apply on their sites.
What we collect
Contact form
If you write to us, we store the name, email address, and message you type, plus the time it arrived. We use that only to reply and to keep a record of corrections, own-stock reservations, and complaints. We do not sell this inbox. We do not add you to a newsletter unless you asked, and this form is not a newsletter signup.
Affiliate click logs
When you use a /go/{code} link, we store a hash of your IP address together with our application key, the product, the store, the offer code, and a short user-agent string. The hash is enough to see which picks work and to notice crude abuse. It is not enough to publish a profile of you. We do not store the raw IP next to the click. We cannot see what you later buy on Daraz or Telemart.
Search
Search queries on this site are used to return product matches. We do not build a public page for each query. Search URLs are listed as disallowed in robots.txt so they are not treated as thin doorway pages.
Admin accounts
Staff who log into the admin panel have an email and a hashed password. That is an internal tool. It is not a customer account system. There is no public “my orders” login because we do not fulfil partner checkouts.
Cookies and analytics
The public storefront does not require an account cookie. If an administrator pastes a Google Analytics 4 measurement ID into settings, Google’s scripts load and Google sets its own cookies under their terms. If a Google Search Console verification token is set, that meta tag appears in the document head so we can prove we control the domain. Neither tool is on unless those IDs are saved.
We do not run advertising pixels from social networks on this site today. If that changes, we will name the vendor here before we switch it on.
Partner sites
Daraz, Telemart, and other merchants set their own cookies when you land on their checkout. We do not control those cookies. We cannot see your basket on their platform. Their privacy notices apply to that visit. Our affiliate disclosure is on About and in the footer of every page.
How long we keep it
- Contact messages: until we have answered and no longer need the thread for a correction or a reservation — typically up to 24 months, sooner if you ask us to delete it and we have no legal reason to keep it.
- Click hashes: in aggregate, to understand which verdicts earn honest clicks. We do not need them forever; old rows can be pruned.
- Server logs that our host may keep (IP, time, path) follow that host’s retention. We do not use those logs to build marketing audiences.
Who we share with
We do not sell personal information. We share what we must with the companies that keep the site online (hosting, email delivery if we use it to reply). Google receives data only if Analytics or Search Console is enabled, under Google’s terms. Law enforcement can compel records where Pakistani law requires it. We will not pretend otherwise.
Your requests
You can ask what we hold about you from a contact message, ask us to correct it, or ask us to delete it. Write to alihaider@janjuacompanies.com or use the contact form from the same address you used. We may need to confirm it is you. We cannot delete an order that lives on Daraz or Telemart — we never received that order.
If you are in a jurisdiction with additional rights, write anyway. We are a small desk. We will answer in plain language.
Children
This site is written for adults buying household tools. We do not knowingly collect contact details from children. If you believe a child sent us a message, tell us and we will delete it.
Security
No website is invulnerable. We hash passwords for staff, hash click IPs as described, and keep the admin path off the public nav. Do not send payment card numbers in the contact form. We have nowhere safe to put them, and we do not need them.
Changes
If we add a cart, a newsletter, or a new analytics vendor, we will update this page and the date at the top. Continued use after a change means you have read the new version. Questions: alihaider@janjuacompanies.com.