Privacy Policies

Data Protection Declaration

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the processing of your personal data when using our website. Personal data means any data by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Rastify, 40 m Defence RD Fatehgarh , Sialkot , Punjab , Pakistan,
Tel.: +92 302 8673727,
E-mail: Contact@rastify.org.

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 The controller has appointed a Data Protection Officer who can be contacted as follows:
[Name of DPO], Rastify, [Address], [Phone], [Email].

1.4 For security reasons and to protect the transmission of personal data and other confidential content, this website uses SSL or TLS encryption. You can recognize an encrypted connection by “https://” and the lock symbol in your browser.

2) Data Collection When Visiting Our Website

If you use our website for informational purposes only, we collect only the data that your browser transmits to our server (“server log files”). This includes:

  • Visited website

  • Date and time of access

  • Amount of data transmitted

  • Source/referrer URL

  • Browser type

  • Operating system

  • IP address (anonymized where applicable)

Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in ensuring the stability and functionality of the website. Data is not passed on unless there are concrete indications of unlawful use.

3) Hosting & Content Delivery Network

Hosting via Shopify

Our online shop is hosted by Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, Ireland (“Shopify”). All data collected on our website is processed on Shopify servers.

Data may be transferred to Shopify affiliates in Canada or the USA as part of order processing. An adequate level of data protection is ensured by EU adequacy decisions or standard contractual clauses.

4) Cookies

We use cookies to enhance website functionality and user experience. Cookies may be session-based or persistent.

Processing is carried out on the basis of:

  • Art. 6(1)(b) GDPR (contract performance),

  • Art. 6(1)(a) GDPR (consent), or

  • Art. 6(1)(f) GDPR (legitimate interest).

You can control cookies via your browser settings. Disabling cookies may limit website functionality.

5) Contact

When you contact us (e.g. via form or email), personal data is processed solely to respond to your inquiry.
Legal basis: Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR for contractual matters.
Data is deleted once the request has been fully processed, subject to statutory retention obligations.

6) Customer Account

When opening a customer account, personal data is processed in accordance with Art. 6(1)(b) GDPR.
You may delete your account at any time by contacting us. Data will be deleted once all contractual and legal obligations are fulfilled.

7) Use of Customer Data for Direct Advertising

7.1 Newsletter Subscription

By subscribing to our newsletter, you consent to the processing of your email address under Art. 6(1)(a) GDPR using a double opt-in procedure.
You may unsubscribe at any time.

7.2 Newsletter for Existing Customers

If you provided your email during a purchase, we may send offers for similar products under Art. 6(1)(f) GDPR.
You may object at any time.

7.3 Postal Advertising

We may use your postal details for marketing purposes under Art. 6(1)(f) GDPR.
You may object at any time.

8) Data Processing for Order Fulfillment

8.1 Image files sent for personalized products are processed exclusively for order fulfillment and deleted after completion.

8.2 Personal data is shared with shipping providers and payment institutions as required under Art. 6(1)(b) GDPR.

8.3 Payment Providers

  • Klarna

  • PayPal

  • Shopify Payments (Stripe)

  • SOFORT

Data processing is carried out strictly for payment handling in compliance with GDPR.

9) Online Marketing

Facebook Pixel (Meta)

With your consent under Art. 6(1)(a) GDPR, we use Facebook Pixel for advertising and conversion tracking.
You may withdraw consent via the Cookie Consent Tool at any time.

10) Web Analytics

Google Analytics 4

Google Analytics 4 is used only with your explicit consent under Art. 6(1)(a) GDPR.
IP anonymization is enabled, and data is stored for a maximum of 2 months.

11) Remarketing / Retargeting

Google Ads

We use Google Ads conversion tracking with consent under Art. 6(1)(a) GDPR.
You can disable this via cookie settings or browser plugins.

12) Website Functionalities

Google Customer Reviews

With your consent, your email address may be shared with Google for review collection purposes under Art. 6(1)(a) GDPR.

13) Rights of the Data Subject

You have the right to:

  • Access (Art. 15 GDPR)

  • Rectification (Art. 16 GDPR)

  • Erasure (Art. 17 GDPR)

  • Restriction (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Withdraw consent (Art. 7(3) GDPR)

  • Lodge a complaint (Art. 77 GDPR)

Right of Objection

You may object to processing based on legitimate interests or direct marketing at any time.

14) Storage Duration

Personal data is stored only as long as necessary for the respective purpose or legal retention period.
Data processed on the basis of consent remains stored until consent is withdrawn.