Privacy Policy

Your data, your rights

Privacy Policy

Sornato operates this store and website, powered by Shopify. This policy explains how we collect, use and disclose your personal information when you visit, shop or contact us.

Last updated: September 22, 2026

Please read this first

By using our Services you confirm that you have read this Privacy Policy and understand how your information is collected, used and disclosed. If it conflicts with our Terms of Service, this Privacy Policy controls for personal information.

Personal information we collect

“Personal information” means information that identifies or can reasonably be linked to you. Depending on how you use the Services, we may collect:

• Contact details: name, billing and shipping address, phone number, email address.
• Financial information: payment card and account details, transaction details, form of payment and payment confirmation.
• Account information: username, password, security questions, preferences and settings.
• Transaction information: items you view, add to cart or wishlist, purchase, return, exchange or cancel, and your past transactions.
• Communications with us: what you write in support inquiries and messages.
• Device information: device, browser or network details, IP address and other unique identifiers.
• Usage information: how and when you interact with and navigate the Services.

Where it comes from

• Directly from you when you create an account, use the Services or communicate with us.
• Automatically from your device, through cookies and similar technologies.
• From our service providers who process data on our behalf.
• From our partners or other third parties.

How we use your information

• Provide, tailor and improve the Services: process payments, fulfil orders, arrange shipping, handle returns and exchanges, manage your account, remember your preferences and recommend related products.
• Marketing and advertising: send promotional messages by email, text or post, and show you ads on our Services or other websites, including based on items you viewed or added to your cart.
• Security and fraud prevention: authenticate your account, secure payments, and detect or act on fraudulent, illegal or malicious activity. Please keep your login details private.
• Communicating with you: customer support and keeping our business relationship with you.
• Legal reasons: comply with the law, respond to valid legal process and enforce our terms and policies.

How we disclose information

We may share personal information with third parties for legitimate purposes, such as:

• Shopify, vendors and other providers who work on our behalf (IT, payment processing, analytics, customer support, cloud storage, fulfilment and shipping).
• Business and marketing partners who help us advertise to you. Depending on where you live, you may have the right to direct us not to share information for targeted advertising. Partners use your information under their own privacy notices.
• Third parties when you ask or consent, for example to ship your products or through social media widgets and login integrations.
• Our affiliates or corporate group.
• In connection with a business transaction such as a merger or bankruptcy, to meet legal obligations, enforce our terms, and protect the Services and the rights of our users or others.

Relationship with Shopify

Our Services are hosted by Shopify, which collects and processes information about your access to and use of the store to provide and improve the Services. Your information may be transmitted to and shared with Shopify and third parties in countries other than where you live. Shopify is responsible for the processing it does for its own enhanced features, including responding to your rights requests for that use.

Learn more in the Shopify Consumer Privacy Policy or the Shopify Privacy Portal.

Third-party websites and links

Our Services may link to websites run by others. We do not control them and are not responsible for their privacy, security or content, so please review their policies before sharing information. Information you post on public or social platforms may be visible to others. A link does not mean we endorse that site.

Children’s data

The Services are not intended for children and we do not knowingly collect personal information about children under the age of majority in your jurisdiction. If you are a parent or guardian and your child has given us personal information, contact us and we will delete it. We have no actual knowledge that we “share” or “sell” personal information of individuals under 16.

Security and retention

No security measure is perfect and we cannot guarantee perfect security. Information you send us may not be secure in transit, so please avoid sending sensitive or confidential details through unsecure channels.

How long we keep your information depends on factors such as whether we need it to maintain your account, provide the Services, meet legal obligations, resolve disputes or enforce our policies.

Your rights and choices

Depending on where you live, you may have some or all of these rights. They are not absolute and we may decline a request where the law allows.

• Access / know: ask what personal information we hold about you.
• Delete: ask us to delete personal information we keep about you.
• Correct: ask us to fix inaccurate information.
• Portability: receive a copy of your information and ask us to transfer it to a third party, in certain cases.
• Communication preferences: opt out of promotional emails at any time using the unsubscribe link. We may still send account and order emails.

To use these rights, contact us using the details below. We will not discriminate against you for doing so. We may need to verify your identity first, and an authorized agent may make a request for you with proof of authorization.

Complaints and international transfers

If you have a complaint about how we process your information, contact us. Depending on where you live, you may also appeal our decision or lodge a complaint with your local data protection authority.

We may transfer, store and process your information outside the country you live in. For transfers out of the EEA or UK we rely on recognized mechanisms such as the European Commission’s Standard Contractual Clauses, unless the destination is recognized as providing adequate protection.

Changes to this policy

We may update this policy for operational, legal or regulatory reasons. We will post the revised version here, update the “Last updated” date and give notice where the law requires.

Questions about your privacy?

Email ayanshabbir738@gmail.com or write to us at Lahore, 54000, Pakistan.