Privacy Policy for GardenShop
Effective Date: September 21, 2026
Website: https://gardenshop.pk
Contact: officialgardenexpress@gmail.com
At GardenShop, we are committed to protecting your privacy. This policy explains what information we collect and how we use it.
1. Information We Collect
When you use our website and services, we may collect:
a) Information you provide directly:
- Name, email address, phone number, shipping address when you place an order
- Account credentials if you create an account
b) Information collected automatically:
- Order history, IP address, browser type, device information via cookies
c) Information from Google APIs:
Our application uses the Google Gmail API with a single, restricted scope: gmail.send
We use this scope ONLY to send transactional emails on your behalf, including:
- Order confirmations
- Shipping notifications
- Password resets
- Customer support replies
We DO NOT read, download, store, or analyze the content of your Gmail inbox. We do not access your emails, contacts, or any other Google data.
2. How We Use Your Information
We use your information to:
- Process and fulfill your orders
- Send transactional emails via the Gmail API
- Provide customer support
- Improve our website and services
- Comply with legal obligations
3. Google API Services User Data Policy – Limited Use Disclosure
GardenShop’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We only use Google user data to provide or improve user-facing features that are prominent in our app’s user interface.
- We do not use Google user data for serving advertisements.
- We do not allow humans to read Google user data unless we have your affirmative agreement, or it is necessary for security purposes, to comply with applicable law, or for our internal operations and even then only when the data have been aggregated and anonymized.
- We do not transfer Google user data to third parties except as necessary to provide or improve user-facing features, for security, or to comply with law.
- We do not retain Google user data longer than necessary to fulfill the purpose for which it was collected.
4. Data Sharing
We do not sell your personal data. We only share data with:
- Delivery partners (to ship your order)
- Payment gateways (to process payments)
- Google (solely to send emails via the Gmail API as described above)
- Legal authorities if required by law
5. Data Retention
We retain order information for 5 years for accounting purposes. Gmail OAuth tokens are stored securely and are revoked when you disconnect the integration or request deletion. You can revoke access at any time from your Google Account settings > Security > Third-party access.
6. Data Security
We use SSL encryption, secure servers, and access controls to protect your data. OAuth tokens are encrypted at rest.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Withdraw consent for email communications
- Revoke Google API access at any time via myaccount.google.com/permissions
To exercise these rights, contact us at officialgardenexpress@gmail.com
8. Cookies
We use essential cookies for cart functionality and analytics cookies to improve our site. You can disable cookies in your browser settings.
9. Children’s Privacy
Our services are not directed to children under 13. We do not knowingly collect data from children.
10. Changes to This Policy
We may update this policy from time to time. We will post the updated version at this URL with a new effective date.
11. Contact Us
If you have questions about this privacy policy or our data practices:
GardenShop
Email: officialgardenexpress@gmail.com
Website: https://gardenshop.pk