Privacy Policy

Privacy Policy Last updated: 27 July 2026 Sajjad and Sons (“we”, “us”, “our”) makes bespoke ornamental metalwork to order at our workshop in Lahore, Pakistan, and delivers to clients in Pakistan and internationally. This policy explains what personal information we collect, why we collect it, how we use it, and what rights you have over it. This policy covers sajjadandsons.com and the enquiries we receive by WhatsApp, email, telephone and social media. It does not cover purchases made through Etsy, which are governed by Etsy's own privacy policy in addition to this one. Who we are Sajjad and Sons 1 Km Tcf Road, off Bedian Road, near Askari 11, Cantt, Lahore, Punjab 54000, Pakistan Email: info@sajjadandsons.com · Telephone and WhatsApp: +92 301 2596491 We also operate a United Kingdom company, Sajjad and Sons Ltd, 15 Moat Avenue, Glasgow, Scotland, United Kingdom, which handles certain international payments. For any question about this policy or about information we hold, contact info@sajjadandsons.com. What we collect When you contact us for a quotation or enquiry: • Your name • Your email address • Your telephone or WhatsApp number • Your country, and your delivery address where you provide it • The content of your message and any subsequent correspondence • Files you choose to upload or send — photographs of your property or installation area, drawings, measurements, design references When you visit the website: • Standard technical information your browser sends — IP address, browser type, device type, pages visited, time of visit • Information collected by cookies and similar technologies, described below When you place an order: • Billing and delivery address • Project specifications, dimensions and correspondence relating to the commission • Records of payments received. We do not collect or store card numbers or bank credentials — payments are processed by our bank or by the platform you order through, and we receive only confirmation that payment was made Why we collect it, and our lawful basis Where the UK or EU General Data Protection Regulation applies to you, our lawful bases are as follows. • To prepare and send you a quotation, and to answer your enquiry — because you asked us to, and as steps taken at your request before entering a contract. • To manufacture, deliver and support an order you have placed — performance of our contract with you. • To keep records of quotations, orders and payments — our legitimate interest in running the business, and compliance with accounting and tax obligations. • To improve our website and understand how visitors use it — our legitimate interest, and your consent where cookies require it. • To send you marketing about our work — only with your consent, and you may withdraw it at any time. Photographs of your project We photograph and film work in progress and completed commissions as a normal part of quality control and record keeping. We may also wish to use those images to show our work publicly — on our website, catalogue, social media or advertising. We will not publish images that identify you, your family, your address or the exterior of your property in a way that makes it identifiable, without your permission. If you would prefer us not to publish images of your commission at all, tell us at any time and we will not. If we have already published something you would like removed, email info@sajjadandsons.com and we will remove it. Who we share information with We do not sell your personal information, and we do not share it for anyone else's marketing. We share it only where it is needed to do the work: • Shipping and freight forwarders, customs brokers and clearing agents — your name, delivery address and contact number, as required to deliver the goods and clear them through customs. • Our customer relationship management system, which stores enquiries and order records. • Payment providers and banks, to receive payment. • Professional advisers — accountants and legal advisers — where necessary. • Public authorities, where we are required to by law. International transfer of information We operate from Pakistan. If you are in the United Kingdom, the European Economic Area or another country with data protection laws, please be aware that your information will be transferred to and stored in Pakistan, which is not the subject of an adequacy decision by the UK or EU authorities. Where the law requires it, we rely on the fact that the transfer is necessary to perform our contract with you, or to take steps at your request before entering that contract. We apply the protections described in this policy to your information wherever it is held. Cookies and tracking Our website uses cookies and similar technologies. These fall into three groups: • Necessary — required for the site to function, for example remembering form entries and keeping the site secure. These cannot be switched off. • Analytics — helping us understand which pages visitors use, so we can improve them. • Advertising — we use the Meta Pixel and Google advertising tags to measure whether our advertising works and to show relevant advertising on Facebook, Instagram and Google. These providers may set their own cookies and may combine this with information they already hold about you, under their own privacy policies. You can control cookies through your browser settings, and you can opt out of personalised advertising through your Facebook and Google account settings. Blocking necessary cookies may stop parts of the site working. WhatsApp enquiries Many of our enquiries arrive by WhatsApp. WhatsApp is operated by Meta, and messages you send are subject to WhatsApp's own privacy policy as well as this one. We store the content of WhatsApp enquiries in our customer records for the same purposes and periods described here. How long we keep it • Enquiries that do not become orders: up to three years, in case you return to the project later. Many of our clients do. • Order records, quotations, invoices and correspondence: at least seven years, to meet accounting and tax obligations. • Files you send us — photographs, drawings, measurements: for as long as the related record is kept. • Marketing consents: until you withdraw them. Your rights Depending on where you live, you may have the right to: • Ask what personal information we hold about you, and receive a copy • Ask us to correct information that is wrong or incomplete • Ask us to delete information we no longer need • Object to, or ask us to restrict, how we use your information • Withdraw consent you have given, at any time • Ask us to send your information to another provider, where technically possible To exercise any of these, email info@sajjadandsons.com. We will respond within 30 days. We will not charge you, and we will not treat you differently for asking. If you are in the UK you may complain to the Information Commissioner's Office; if you are in the EEA, to your national data protection authority. We would prefer you raise it with us first so we can put it right. Security We take reasonable steps to protect your information, including restricting access to those who need it, using secure connections on our website, and holding order records in access-controlled systems. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. Children Our services are not directed at children, and we do not knowingly collect information from anyone under 16. If you believe we have, contact us and we will delete it. Changes We may update this policy. The date at the top shows when it was last changed. Material changes will be noted on this page.