BELFLOU
The Maison Belflou

Privacy Policy

Effective as of August 2026

At BELFLOU (Pvt.) Ltd. (“Belflou,” “we,” “us,” or “our”), operating from our headquarters and atelier in Lahore, Pakistan, we are committed to maintaining the absolute trust and confidence of our private clientele. This Privacy Policy describes how we handle personal information we collect through our interactions with you, whether in our private salons, through our bespoke services, via our website, or at exclusive brand events. This document is designed to provide transparency into our privacy practices and principles.

1. Identity of the Data Controller

For the purposes of data protection laws, BELFLOU (Pvt.) Ltd., a Pakistani company with its registered office on MM Alam Road, Gulberg III, Lahore, Pakistan, is the controller responsible for your personal information.

2. Information We Collect

To fulfill our commitment to providing exceptional, personalized luxury service, we collect and process various types of personal data, which we have categorized for clarity:

  • Identity Data: Includes your full name, title, date of birth, and gender.
  • Contact Data: Includes your billing address, shipping address, secure email address, and primary telephone numbers.
  • Financial Data: Includes details necessary for transactions, such as encrypted credit or debit card information, bank transfer details, and billing history, processed securely via third-party institutional gateways.
  • Transaction Data: Includes details about acquisitions you have made, products reserved, and services rendered.
  • Profile & Preference Data: Includes your purchase history, sartorial measurements, style preferences, wish lists, feedback, survey responses, and notes from private consultations.
  • Technical Data: When you interact with our digital platforms, we may collect internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.
  • Usage Data: Includes information about how you use our website, products, and services.
  • Marketing & Communications Data: Includes your preferences in receiving marketing from us and your communication preferences.
  • Security Data: We may collect CCTV footage within our physical salons for security purposes.

3. How We Collect Your Personal Data

We utilize different methods to collect data from and about you, ensuring discretion and security:

  • Direct Interactions: You may provide us with Identity, Contact, Financial, and Preference Data by filling in forms or by corresponding with us by post, phone, email, or in person at our salons or events.
  • Automated Technologies or Interactions: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this data by using cookies and other similar technologies.
  • Third Parties or Publicly Available Sources: We may receive personal data about you from various third parties and public sources, including:
    • Technical Data from analytics providers such as Google.
    • Identity and Contact Data from publicly available sources such as the Commercial Register.
  • Social Media Interactions: If you interact with us on social media platforms, we may collect information from your profile based on your privacy settings on those platforms.

4. Purposes for Which We Will Use Your Data

We only use your personal data when legally permitted. Most commonly, we will use your personal data in the following circumstances:

  • To register you as a new client of the Maison.
  • To process and deliver your bespoke orders, including managing payments, fees, and charges.
  • To manage our relationship with you, which will include notifying you about changes to our terms or Privacy Policy and asking for your feedback.
  • To enable you to partake in a prize draw, competition, or complete a survey.
  • To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data).
  • To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve.
  • To use data analytics to improve our website, products/services, marketing, client relationships, and experiences.
  • To make suggestions and recommendations to you about goods or services that may be of interest.
  • For internal record keeping and compliance with legal obligations.
  • For the detection, prevention, and investigation of fraudulent transactions and other illegal activities.
  • To protect the security and integrity of our business operations and physical premises.

5. Our Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

  • Performance of a Contract: Where we need to perform the contract we are about to enter into or have entered into with you (e.g., processing an acquisition).
  • Legitimate Interests: Necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (e.g., fraud prevention, direct marketing).
  • Legal Obligation: Necessary for compliance with a legal obligation to which we are subject (e.g., anti-money laundering regulations).
  • Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., receiving marketing communications where required).

6. Data Security and Confidentiality

We have implemented robust security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed.

  • All client data is encrypted at rest and in transit using industry-standard protocols.
  • Storage is primarily within secure data centers known for their high standards of privacy and reliability.
  • Access to personal data is restricted strictly to authorized Belflou personnel, contractors, and agents who have a legitimate business need-to-know and are subject to strict contractual confidentiality obligations.
  • We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

7. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

8. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

  • Request access to your personal data (commonly known as a “data subject access request”).
  • Request correction of the personal data that we hold about you.
  • Request erasure of your personal data.
  • Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
  • Request restriction of processing your personal data.
  • Request the transfer of your personal data to you or to a third party.
  • Withdraw consent at any time where we are relying on consent to process your personal data.

If you wish to exercise any of the rights set out above, please contact us using the details provided below. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We will respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

9. International Data Transfers

Given the global nature of our operations and clientele, your personal data may be transferred to, stored, and processed in countries outside of Pakistan. However, we ensure that any such transfer is compliant with applicable data protection laws and that your personal data remains protected to the standards described in this policy, including through the use of standard contractual clauses to ensure equivalent protection.

10. Cookies and Similar Technologies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and allows us to improve our platform.