Privacy Policy

یہ صفحہ صرف انگریزی میں دستیاب ہے۔ قانونی شرائط اور کمپنی کی تفصیلات ہم صرف انگریزی میں رکھتے ہیں تاکہ کوئی ابہام نہ رہے۔ کسی بھی سوال کے لیے ہمیں info@authenticlahori.com پر لکھیں – ہم اردو میں جواب دے دیں گے۔

This explains what we do with your information when you buy from us, join our list or just read a recipe. It is written to be understood rather than to cover us.

Who is responsible for your information

Authentic Lahori Foods LTD is the data controller. We are registered in England and Wales, company number 17367849, registered office 15 Coldcotes Avenue, Leeds LS9 6NA, United Kingdom.

For anything about your information – a copy of it, a correction, or deletion – email info@authenticlahori.com. We aim to reply within 2 working days.

When you place an order

Preorders are taken through Shopify, so the details you enter at checkout – your name, email address, delivery address, phone number and order contents – are handled by Shopify on their systems as our processor, under their own privacy policy.

We use those details to take payment, fulfil your order, email you about it and keep the accounting records we are required by law to keep. Our lawful bases are performance of our contract with you, and our legal obligation to keep tax and company records.

We never see or store your full card number. Payment is handled by Shopify's checkout and its payment providers.

When you join our list

We ask for your email address, optionally your mobile number, and for you to tick a box confirming we may email you. We store those details, along with the date you agreed, in Shopify and in Klaviyo, the service that sends our emails. We use them to send you our recipes and batch news. Our lawful basis is your consent.

Your number is stored so we can reach you about an order. We only send marketing texts if you tick the separate SMS box, and ticking it is never required to get the code.

Every email we send carries an unsubscribe link, and unsubscribing withdraws your consent for marketing. It does not cancel a discount code you have already been given.

When you simply read the site

We count visits anonymously, with no cookie and nothing that identifies you. That measurement needs no consent because it cannot be linked to a person.

If you allow “Measuring the site” on the cookie note, we also use PostHog to build heatmaps, record an anonymised replay of a visit and note roughly where in the world it came from. Anything you type is masked before it is recorded. Our lawful basis is your consent, you can withdraw it any time via Cookie settings in the footer, and we ask again after six months rather than treating one answer as permanent.

If you allow “Advertising”

We use the Meta pixel to measure our advertising on Facebook and Instagram, and the TikTok pixel to measure our advertising on TikTok. Information about the pages you view here, the pack you choose and what you add to your basket is shared with Meta and TikTok, who handle it under their own privacy policies. Our lawful basis is your consent.

If you have given us your email address, we also send TikTok a one-way scrambled (hashed) copy of it, and of your mobile number if we hold one, so it can tell that an advert led to your visit. The scrambling happens in your browser and TikTok never receives the address itself, but it can still be matched to a TikTok account, so we only ever do it with your consent. We never send TikTok your name or your postal address.

If you place an order while advertising cookies are on, Shopify also sends Meta a record of the checkout and the purchase from its own servers, along with a one-way scrambled (hashed) copy of the contact and delivery details you entered at checkout – such as your email address, phone number, name and address – so Meta can match the order to an advert. Meta never receives those details in readable form, but they can be matched to a Facebook or Instagram account, so we treat them as personal information and only send them with your consent. Your cookie choice on this site is passed on to our checkout, so if you decline, nothing is sent from there either.

If you decline, nothing is shared and neither pixel loads at all. You can withdraw at any time via Cookie Settings in the footer.

The full list of what is stored on your device, and why, is on our cookie policy page.

How long we keep it

Order records are kept for at least 6 years from the end of the financial year they fall in, because company and tax law requires it. Marketing contact details are kept until you unsubscribe or ask us to delete them, whichever comes first. Anonymous visit counts are aggregate totals and are not linked to anyone, so there is nothing in them to delete.

Where your information goes

We share your information only with the services we need to run the shop: Shopify (store and checkout), Klaviyo (email), our payment providers, and the courier that delivers your parcel. Where you have consented, Meta, TikTok and PostHog also receive the information described above. We do not sell your information, and we never share it with anyone for their own marketing.

Some of these providers are based outside the United Kingdom, mainly in the United States and the European Union. Where your information leaves the UK, it is protected by the data-protection terms in our contract with that provider.

Your rights

Under UK GDPR you have the right to ask us for a copy of the information we hold about you, to have it corrected if it is wrong, to have it deleted, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on your consent, you can withdraw it at any time, and withdrawing it does not affect anything we did before you did so.

To exercise any of these, email info@authenticlahori.com. We will respond within one month.

Complaints

If you think we have handled your information badly, please tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK regulator, at ico.org.uk or on 0303 123 1113.

Changes to this policy

We update this page before we change what we do, not after. If we make a significant change we will say so on the site.

Last updated: 26 August 2026.

Company details

Authentic Lahori Foods LTD is a company registered in England and Wales, company number 17367849.

Registered office: 15 Coldcotes Avenue, Leeds LS9 6NA, United Kingdom.

Post, including returns and formal notices, should go to Suite 708, Unit 7 Ashbrook Business Park, Leeds LS11 5SF, United Kingdom.

Any questions about any of this? Email us at info@authenticlahori.com