IT Racks / Privacy Policy
Your Privacy Matters
We're committed to being transparent about how we handle your personal data.
Data We Collect
When you create an account, we collect your name, email address, phone number, and shipping/billing addresses.
When you make a purchase, we collect payment information (processed securely by our payment partners — we never store full card numbers), order details, and transaction history.
When you browse our site, we collect device information, IP address, browser type, pages visited, and time spent. This is collected via cookies and analytics tools.
When you contact support, we collect the content of your communications, including chat transcripts and email threads.
How We Use It
To process and fulfil your orders, including sending confirmation and shipping updates.
To personalise your shopping experience — product recommendations, saved searches, and curated deals based on your purchase history.
To improve our platform — analysing site usage patterns to fix bugs and optimise performance.
To communicate with you — sending transactional emails, promotional offers (only with your consent), and important account updates.
To comply with legal obligations, resolve disputes, and enforce our Terms & Conditions.
Data Sharing
We do not sell your personal data. Ever.
We share data with service providers who process it on our behalf: payment processors, shipping/courier partners, and cloud infrastructure providers. All are bound by data processing agreements.
We may disclose data if required by law, court order, or regulatory authority — and we'll notify you where legally permitted.
In the event of a merger or acquisition, your data may be transferred. You'll be notified in advance with the option to delete your account.
Cookies
Essential cookies: Required for the site to function (session management, cart, login state). Cannot be disabled.
Analytics cookies: Help us understand how visitors use the site. You can opt out.
Marketing cookies: Used to show relevant ads on other platforms. Require your explicit consent.
Preference cookies: Remember your settings (language, currency, theme). Can be cleared in your browser.
You can manage cookie preferences at any time via your browser settings.
Your Rights
Right of Access: Request a copy of all personal data we hold about you.
Right of Rectification: Correct inaccurate or incomplete data.
Right of Erasure: Request deletion of your data ('right to be forgotten'), subject to legal retention requirements.
Right to Restrict Processing: Ask us to stop processing your data while a dispute is resolved.
Right to Data Portability: Receive your data in a structured, machine-readable format.
Right to Object: Opt out of direct marketing or processing based on legitimate interests.
To exercise any right, email [email protected].
Security
All data is encrypted in transit (TLS) and at rest.
Payment data is handled exclusively by PCI-DSS compliant processors. We never store raw card numbers.
We conduct regular security reviews of our systems and infrastructure.
Employee access to personal data is limited on a need-to-know basis with audit logging.
In the event of a data breach affecting your personal data, we will notify you as required by applicable law.
Contact DPO
Our Data Protection contact can be reached at: [email protected]
For general privacy inquiries, we aim to respond within a few business days.
For formal data subject requests, we respond within 30 calendar days.
You also have the right to lodge a complaint with the relevant Pakistani regulatory authority if you believe your data rights have been violated.