Data Protection & Security

Privacy Policy

Effective Date: October 16, 2026 • Lahore, Pakistan

Plain-Language Summary

We respect your privacy. This policy explains what information we collect to fulfill your boot orders, how your bank transfer receipts are securely stored and automatically purged, and our commitment never to sell your data.

1. Data We Collect

We collect only the minimum personal information required to fulfill your order and provide customer support:

Contact Details: Your name, email address, and mobile phone number for order updates and courier delivery SMS alerts.
Delivery Address: Street address, city, and province for physical parcel dispatch.
Order History: Boot style, size, and transaction history tied to your account.

2. Bank Transfer Proof Storage & Retention

When you submit a payment receipt screenshot for your Direct Bank Transfer (IBFT/Raast) order:

Private, Encrypted Storage: Your receipt is uploaded directly into an access-restricted private object storage bucket. It is never exposed publicly or indexed by search engines.
Staff-Only Verification: Only authorized Chelc finance personnel can view your screenshot using short-lived (15-minute) cryptographically signed links to verify the bank transaction.
Automated 30-Day Retention: Receipt screenshots are retained strictly for 30 calendar days to resolve any banking reconciliation disputes or audit inquiries, after which they are automatically and permanently purged.

3. Zero Selling or Ad-Network Sharing

We do not sell, rent, or trade your personal data with third-party data brokers or behavioral advertisement networks. Your data is shared exclusively with our logistics courier partners (TCS, Leopard, M&P) solely to effect parcel delivery to your doorstep.

4. Cookies & Storefront Analytics

Our storefront utilizes essential session cookies to preserve your shopping cart and customer account authentication. Analytics data collected to evaluate page performance does not track individual personally identifiable information (PII) or banking credentials.

5. Your Rights & Data Inquiries

You have the right to request access to the personal data we hold about you, request corrections, or request account closure and data deletion.

For privacy inquiries or deletion requests, please contact our data privacy officer at support@chelc.online.

1. Data We Collect

We collect only the minimum personal information required to fulfill your order and provide customer support:

Contact Details: Your name, email address, and mobile phone number for order updates and courier delivery SMS alerts.
Delivery Address: Street address, city, and province for physical parcel dispatch.
Order History: Boot style, size, and transaction history tied to your account.

2. Bank Transfer Proof Storage & Retention

When you submit a payment receipt screenshot for your Direct Bank Transfer (IBFT/Raast) order:

Private, Encrypted Storage: Your receipt is uploaded directly into an access-restricted private object storage bucket. It is never exposed publicly or indexed by search engines.
Staff-Only Verification: Only authorized Chelc finance personnel can view your screenshot using short-lived (15-minute) cryptographically signed links to verify the bank transaction.
Automated 30-Day Retention: Receipt screenshots are retained strictly for 30 calendar days to resolve any banking reconciliation disputes or audit inquiries, after which they are automatically and permanently purged.