FYS Mall - Electronics and Gadgets in Pakistan

1. Scope and responsible company

Services covered

This policy applies when you browse fysmall.online, create or use an account, continue as a guest, use a cart, place or track an order, make a payment, submit a support ticket, request a return, or complete the seller application. FYS Mall is operated by STS MEDIA SMC PRIVATE LTD.

2. Information we collect

Information connected to actual services

Account and identity

Name, email, mobile number, account authentication information, and account status.

Guest checkout

Checkout email, recipient name, mobile number, address, city, province, postal code where provided, and order notes.

Orders and delivery

Cart items, quantities, prices, discounts, shipping, invoice, order history, tracking, and delivery outcome.

Payment records

Payment method, PKR amount, merchant reference, provider transaction reference, payment status, and refund status.

Fraud and security signals

Order, account, address, device, IP, browser, failed-attempt, transaction-pattern, provider-risk, and verification records used to identify misuse.

Support

Ticket ID, messages, attachments, status history, notes, and the information supplied to investigate a request.

Seller applications

Store name, requested URL name, description, business email, contact number, address, and logo filename.

Technical and browser data

IP address, browser and device details, security events, cookies, local storage, session storage, and request logs.

3. Where information comes from

Direct, browser, and provider sources

We receive information directly from you, automatically from your browser or device, and from providers involved in an order. Examples include a gateway reporting payment status, a courier reporting delivery, or an authorized customer representative contacting support.

4. How we use information

Operational purposes

Create accounts, support sign-in, and maintain authenticated sessions.
Preserve carts and checkout-recovery information on the customer's browser.
Calculate PKR totals, verify payments, confirm orders, and issue order records.
Dispatch, track, cancel, return, refund, and support orders.
Create and track customer support tickets and seller applications.
Prevent fraud, duplicate transactions, abuse, and unauthorized access.
Maintain, diagnose, secure, and improve website reliability.
Meet accounting, dispute, court, regulatory, and legal record requirements.

We do not describe unused social-login, competition, gaming, location-deal, or unrelated marketplace processing as part of this policy.

5. Payment information

What FYS Mall records

We record the order and payment metadata needed for confirmation, reconciliation, refunds, and disputes. Payment authentication may occur on a bank, wallet, card, or gateway page governed by that provider's policy.

We do not intentionally store card PINs, CVV codes, wallet PINs, one-time passwords, banking passwords, gateway passwords, private keys, or integrity secrets in customer records or public browser code.

6. Fraud prevention and unauthorized-payment investigations

Risk signals and investigation records

We may compare order, account, contact, delivery, device, network, payment status, failed-attempt, and transaction-pattern information to identify suspected fraud, account misuse, unauthorized payment instruments, duplicate claims, or attempts to bypass checkout controls. These checks may result in an order being held, declined, cancelled, or referred for reasonable verification.

Where reasonably necessary to prevent or investigate misuse, resolve a chargeback, protect a customer, or comply with law, we may disclose the minimum necessary records to the selected gateway, wallet, acquiring or issuing bank, card scheme, courier, professional adviser, regulator, court, or law-enforcement authority. We do not use this purpose to collect or store card PINs, CVV codes, one-time passwords, wallet PINs, or banking passwords.

Fraud and dispute records may be retained while an investigation, chargeback, refund, legal claim, accounting requirement, or provider review remains open and for a reasonable period afterward where needed to prevent repeat abuse or meet record obligations.

7. When information is shared

Providers and lawful disclosure

We do not sell personal information. We disclose only information reasonably needed for the relevant service or legal purpose.

Payment gateways, banks, wallets, and card-processing providers used for the selected payment method.
Couriers and fulfilment partners that need recipient, address, order, and return information.
Hosting, database, authentication, monitoring, and communication providers used to operate the website.
Professional advisers, regulators, courts, or law-enforcement bodies where disclosure is required or legally justified.
A successor organization if the business is transferred, subject to appropriate confidentiality and legal safeguards.

8. Cookies, local storage, and session storage

Browser-based continuity

Essential cookies and browser storage support sign-in, cart persistence, checkout recovery, guest-order recovery, preferences, and seller-application drafts. Data saved only in your browser can be removed by clearing browser data and may not be available on another device.

9. Retention

How long records are kept

We retain information only as long as reasonably needed for accounts, orders, delivery, refunds, warranty support, seller review, fraud prevention, accounting, disputes, and required records. Retention differs by record type. Data is deleted, anonymized, or access-restricted when no longer required.

10. Security and service locations

Safeguards and provider processing

We use HTTPS/TLS, access controls, server-side validation, restricted credentials, and logging safeguards. No online service can guarantee absolute security. Some hosting, payment, monitoring, or communication providers may process information outside Pakistan under their service terms and applicable safeguards.

11. Your requests and choices

Access, correction, and closure

Request access to personal information associated with your account or orders where applicable.
Request correction of inaccurate account, contact, delivery, or seller-application information.
Request account closure or deletion where records are not required for orders, refunds, fraud prevention, disputes, accounting, or law.
Raise a privacy complaint or ask how a particular record is being used.

We may request reasonable identity or order verification before acting and may retain information where required for security, accounting, disputes, or law.

12. Children

Age requirements

The store is intended for adults. A person under 18 should use it only with a parent or legal guardian. Contact us if you believe a child submitted information without appropriate supervision.

13. Updates and privacy contact

Questions and complaints

We may update this policy when actual services, providers, security needs, or legal requirements change. Submit privacy requests through Contact Us or email support@fysmall.online.