Last updated: August 22, 2026
1. Who we are
October Ate (“we”, “us”) operates octoberate.com, a Pakistan clothing boutique. This policy explains what we collect when you browse, create a cart, or place an order.
2. Information we collect
- Order details — name, mobile number, email, delivery address, city, and order contents.
- Payment signals — for COD we do not take card data; for PayFast, payment is processed by PayFast and we receive status/reference information needed to fulfil your order.
- Technical data — basic device/browser data, cookies for cart and preferences, and analytics if enabled.
3. How we use information
- Process and deliver orders across Pakistan
- Confirm payments (COD collection or PayFast)
- Provide customer support and order updates
- Improve the storefront and prevent fraud/abuse
- Send transactional messages (order status, including a dispatch email with tracking)
4. Sharing & processors
We share data only as needed to fulfil your order. We do not sell your personal information.
- Supabase (Singapore) — database and file storage
- Vercel (United States) — website hosting
- Resend (United States) — transactional email
- Couriers (Pakistan) — e.g. Leopards, PostEx, for delivery
- WhatsApp Cloud / Meta (United States) — optional order notifications when enabled
- PayFast (Pakistan) — card payments when that option is enabled
5. Retention & security
Order records are kept for fulfilment and accounting (typically up to five years where tax law requires). Contact data is kept while you have an open relationship with us or as needed for legal obligations. We use technical measures including encrypted connections, access controls on admin tools, rate limiting, and fraud checks on COD checkout.
6. Your choices
You may request access, correction, or deletion of personal data where we are not required to keep it. Email privacy@octoberate.com. You can control many cookies via your browser (the shopping cart requires cookies to work).
7. Children
The store is not directed at children under 16. If you believe we have collected a child’s data, contact us and we will delete it.
8. Updates
We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the site after updates means you accept the revised policy.
