Privacy Policy

Section 01Who we are and what this covers

GLASS AURA (“GLASS AURA”, “we”, “us”, “our”) is a glass and mirror workshop at 4–5 Hathi Chowk, Saddar, Rawalpindi 46000, Pakistan. We make and install decorative mirrors, custom mirrors, glass interiors, glass partitions, shower glass and architectural glass products.

This privacy policy applies to:

• the website at glassaura.pk and any page served from it;
• the GLASS AURA mobile application distributed through Google Play, together with any update or successor version of it;
• enquiries, quotations, site visits, orders and after-sales support that reach us by telephone, WhatsApp, email or in person.

We are the data controller for the personal data described here. If you do not agree with this policy, please do not use the website or the application and do not send us personal data.

Section 02Summary at a glance

Section 03Information you give us

We collect the following when you contact us, request a quotation, place an order or use the application:

• Identity and contact data — your name, telephone or WhatsApp number, email address, and the name of the company or household you are enquiring on behalf of.
• Site and delivery address — the address of the property where the glass is to be measured, delivered or installed, and access notes such as a floor number or a gate code you choose to give us.
• Project information — measurements, drawings, specifications, finishes, quantities, deadlines and any notes about the room or opening.
• Photographs and files — images of the space or the existing glass that you send to us or upload through the application, and any documents you attach.
• Order and payment records — quotations, invoices, delivery notes, amounts paid, payment method and payment reference. We do not collect or store full card numbers; card and bank payments are handled by the bank or payment provider.
• Correspondence — the content of emails, messages and call notes exchanged with us, and any feedback or complaint you send.
• Account data (application only) — if the application offers an account, the sign-in identifier you register with and your saved preferences.

You choose what to send. If you leave out something a job depends on — a size, an address, a working telephone number — we may not be able to quote, deliver or install.

Section 04Information collected automatically

When you use the website or the application, some technical information is recorded automatically:

• Device and app information — device model, operating system and version, application version, language and region settings, and a device or installation identifier.
• Log data — IP address, date and time of the request, pages or screens opened, referring page, and the outcome of the request.
• Diagnostics — crash reports, error traces and basic performance measurements, used to find and fix faults.
• Approximate location — a coarse location may be inferred from your IP address. The application does not collect precise GPS location unless you grant the location permission for a feature that needs it, and you can withdraw that permission at any time in your device settings.

This information is used to keep the service working, to protect it against abuse, and to understand in aggregate which parts of it are used. It is not used to build a profile of you for advertising.

Section 05App permissions

Where the GLASS AURA application asks for a device permission, it asks at the moment the feature is used, explains why, and works without it wherever that is possible. Permissions may include:

Photographs and files taken or selected through a permission are used only for the enquiry or order you attach them to. We do not read your photo library in the background, and we do not collect contacts, call logs, SMS messages or microphone audio.

Section 06Information from other sources

We sometimes receive personal data about you from someone else, for example:

• an architect, interior designer, builder or fit-out contractor who instructs us on your project and gives us your details for access and delivery;
• a landlord, building manager or neighbour arranging access to a shared area;
• a person who refers you to us, or a third-party listing or messaging platform through which you contacted us.

We use that information only for the job it relates to, and we hold it under this policy in the same way as information you give us directly.

Section 07How we use your information

• To answer enquiries and prepare quotations.
• To arrange and carry out site measurements, fabrication, delivery and installation.
• To take payment, issue invoices and keep proper accounting records.
• To provide after-sales service, handle warranty claims, replacements and complaints.
• To communicate with you about a job in progress — confirmations, timings, changes and completion.
• To operate, maintain, secure and improve the website and the application, including diagnosing crashes and preventing fraud or abuse.
• To keep records that we are required by Pakistani tax, accounting and consumer-protection law to keep.
• To send occasional service messages. We do not send marketing messages unless you have asked for them, and every marketing message includes a way to stop them.

We do not use your personal data to make decisions about you by automated means alone, and we do not profile you for advertising.

Section 08Our legal grounds

Where data-protection law requires a legal ground for processing, we rely on:

• Performance of a contract — to quote for, make, deliver and install what you have ordered, and to support it afterwards.
• Consent — for optional device permissions, for optional marketing messages, and for any non-essential analytics. You may withdraw consent at any time; withdrawal does not affect what was done beforehand.
• Legitimate interests — to keep our services secure and working, to prevent abuse, to keep an accurate record of work carried out, and to defend legal claims. We balance these interests against your rights.
• Legal obligation — to keep tax and accounting records and to respond to lawful requests from public authorities.

Section 09When we share information

We do not sell personal data. We share it only in these situations, and only as far as needed:

• Service providers acting for us — website and application hosting, email and messaging providers, crash-reporting and analytics providers, and IT support. They may process your data only on our instructions and must keep it confidential and secure.
• Trade partners on your job — toughening and lamination processors, coating and back-painting suppliers, and delivery or fitting crews, where a job needs them. They receive the sizes, specifications and access details required to complete the work.
• Your own project team — the architect, designer, contractor or building manager who instructed us or who is coordinating access, where that is the normal course of the project.
• Payment and banking — banks and payment providers, to take and reconcile payment.
• Professional advisers — accountants, auditors, insurers and lawyers, under a duty of confidentiality.
• Legal and safety — courts, regulators or public authorities where the law requires it, or where disclosure is necessary to establish or defend a legal claim, or to protect the safety of a person or of property.
• Business transfer — if the business or part of it is sold or reorganised, records may transfer to the new owner, who must continue to protect them under a policy at least as protective as this one.

Section 10Third-party services

The website and the application rely on a small number of third-party services. Depending on the version you use, these may include a hosting provider, an email provider, a messaging platform, and — where enabled — an analytics or crash-reporting service supplied by Google (for example Google Analytics or Firebase Crashlytics) in connection with distribution through Google Play.

Those providers process data under their own privacy policies as well as under our instructions. Where the application is distributed through Google Play, Google’s handling of the download and of any telemetry it collects is governed by the Google Privacy Policy. Our own Data safety declaration on the Google Play listing describes the data the application collects, and is kept consistent with this policy.

Section 11Advertising and tracking

We do not display third-party advertising, we do not use advertising identifiers for ad targeting or measurement, and we do not share personal data with data brokers or advertising networks. We do not track you across other companies’ applications or websites.

Section 12Cookies and local storage

The website is deliberately simple. It uses no advertising cookies and no cross-site trackers. Where a cookie or an item of local storage is set, it is for an essential purpose — remembering a preference you have chosen, or keeping the site secure — or for anonymous, aggregated measurement of how many people visited a page.

You can block or delete cookies in your browser settings. Essential items are small and the site continues to work without the optional ones. The application may store a small amount of data on your device — such as your last enquiry draft or your settings — so that it works offline; clearing the app’s storage or uninstalling it removes that data from your device.

Section 13How long we keep information

When a retention period ends, records are deleted or anonymised. Where a record is needed for an unresolved claim or a legal requirement, it is kept until that ends.

Section 14How we protect information

• Data sent between your device and our website or application is encrypted in transit using HTTPS/TLS.
• Access to enquiry, order and payment records is limited to the people in the business who need it to do their work, and is protected by individual accounts and passwords.
• Devices used for the business are protected by screen locks, and accounts use multi-factor authentication where the provider supports it.
• We keep the number of third-party services small, and we ask providers to hold data securely and to process it only on our instructions.
• Paper records — measurements, delivery notes and invoices — are kept at the workshop and disposed of securely.

No method of transmission or storage is completely secure. If a breach occurs that is likely to put your rights at risk, we will act promptly to contain it, notify the people affected without undue delay, and notify any authority that must be told.

Section 15Children

Our services are intended for adults arranging glazing work, and are not directed at children. We do not knowingly collect personal data from anyone under 13, and the application is not designed for or marketed to children. If you believe a child has given us personal data, write to info@glassaura.pk and we will delete it promptly.

Section 16International transfers

We operate from Pakistan. Some of the providers we use — hosting, email, messaging, analytics — process data on servers outside Pakistan. Where personal data is transferred abroad, we use providers that offer recognised safeguards, such as contractual data-protection terms, and we transfer no more than the service requires.

Section 17Your rights and choices

Subject to the law that applies to you, you may:

• ask what personal data we hold about you and receive a copy;
• ask us to correct anything inaccurate or incomplete;
• ask us to delete personal data we no longer need (see Deleting your data);
• ask us to restrict processing, or object to processing based on our legitimate interests;
• withdraw consent you have given, including device permissions and marketing consent;
• ask for a copy of data you gave us in a portable, machine-readable form;
• complain to a competent data-protection or consumer authority.

To exercise any of these, write to info@glassaura.pk or call +92 300 748 3165. We may ask for enough information to confirm who you are. We answer within 30 days; if a request is complex we will tell you and explain the delay. There is no charge for a reasonable request.

Section 18Deleting your data

What is deleted. Your contact details, site address, photographs, drawings, measurements, correspondence and call notes, any application account and its saved preferences, and any marketing consent record.

What may be kept, and why. Invoices, receipts and the minimum job record behind them are kept for up to 7 years because tax and accounting law requires it. Where a warranty is still running, or a claim or dispute is unresolved, the related job record is kept until it ends. Records kept for these reasons are locked down and not used for anything else.

How long it takes. We act within 30 days of confirming who you are, and confirm to you in writing when it is done. Backups are overwritten on their normal cycle, within a further 90 days.

Deleting from your device. Uninstalling the application removes the data it stored locally on your device. Uninstalling does not by itself delete records already held by us — use the request above for that.

Section 19Links to other sites

Our pages may link to other websites — a supplier, a processor or a map service. We do not control those sites and are not responsible for their content or their privacy practices. Read their policies before giving them personal data.

Section 20Changes to this policy

We update this policy when what we do with personal data changes, or when the law or the Google Play requirements change. The effective date at the top of the page always shows the current version, and the previous version is superseded from that date.

If a change materially affects how we use personal data we already hold, we will give notice on this page and, where the change requires it, ask for your consent again. Continuing to use the website or the application after a change takes effect means you accept the updated policy.

Section 21How to contact us

For any question about this policy, about the personal data we hold, or to make a request under Section 17 or Section 18:

• Glass Aura — data controller and privacy contact
• 4–5 Hathi Chowk, Saddar, Rawalpindi 46000, Pakistan
• Email: info@glassaura.pk
• Telephone: +92 300 748 3165
• Hours: Monday to Saturday, 9:00 – 19:00 (Pakistan Standard Time)

If you are not satisfied with our answer, you may raise the matter with a competent data-protection or consumer authority in your country.