Privacy Policy

Last updated: 29 September 2026

This Privacy Policy explains how Pakistan Restaurant, the brand name operated by Durat Al Azhar Trading Company, Commercial Registration number 3550037286 (“we,” “our,” or “the restaurant”) collects, uses, shares, and protects personal data when you use the website or an account, place an online or phone order, or contact us.

1. Data We Collect

• Identity and contact data: name, mobile number, email address, delivery address, and account information.
• Login and verification data: verified mobile number, verification status, and login identifiers needed for mobile one-time-code verification or external-account sign-in.
• Order data: items and options, order type, branch, payment method, amounts and fees, notes, order status and history, order source, refunds, and complaint information.
• Location data: the address and precise location coordinates you provide or select for delivery, together with branch or delivery-zone selection results.
• Payment data: payment status, transaction references, amounts, payment attempts, and refunds. Online payments are handled by a payment-processing service.
• Communication data: order, payment, refund, and customer-service communications, email-delivery information, and requests to stop marketing communications.
• Technical and security data: session data, essential cookies, device or browser type, security and rate-limit identifiers, and operational records needed to protect the website and orders.

2. How We Collect Data

We collect data you provide when creating an account, signing in, ordering, paying, choosing a location, or contacting us. We also collect operational and technical data automatically when the website is used. Branch staff may enter information you provide during a phone order.

3. How We Use Data

• To create accounts, verify identity, manage login, and link permitted sign-in methods.
• To create, confirm, prepare, and deliver orders and manage pickup or dine-in fulfilment.
• To select the branch and delivery zone, calculate fees, and help branch staff and drivers complete delivery.
• To process and verify payments, prevent duplicates, and manage cancellations, refunds, and disputes.
• To send order, payment, refund, and customer-service communications.
• To send offers, updates, and marketing communications under the agreement described in the Terms & Conditions, with the ability to request that they stop.
• To protect accounts, orders, and the website, prevent misuse and fraud, and resolve technical problems.
• To improve our services, website experience, food quality, and support and comply with legal, accounting, and business requirements.

4. Basis, Purpose, and Required Data

We process data as necessary to perform orders and provide services, comply with legal obligations, and protect our systems and legitimate interests without overriding your rights, and on the basis of consent where required. Name, mobile number, and order details are required for an order. A valid address and location are required for delivery. Email may be required for certain orders and communications. External-account sign-in and browser location detection are optional, but sufficient information must be provided to complete the selected service.

5. Phone Orders and Marketing

When a phone order is placed, branch staff may record the customer’s name, mobile number, email if provided, address, location, order details, and notes, and a customer and order record may be created in the system. We may use contact details to service the order and send offers and marketing communications under the Terms & Conditions. Marketing communications can be stopped at any time through the Contact Us page without affecting operational messages required for an order, payment, or refund.

6. Data Sharing and Service Providers

We may share the necessary amount with branch staff, drivers, and service providers supporting identity verification, payment processing, website hosting, communications, email, mapping, location, and order fulfilment, and with governmental or legal authorities where requested or required by law. Shared data may only be used for the purpose for which it was provided.

7. Processing Inside and Outside the Kingdom

Some supporting technology services may process or store limited personal data inside or outside the Kingdom of Saudi Arabia, subject to applicable legal requirements and safeguards for the relevant transfer or processing.

8. Payments and Refunds

When online payment is selected, the order is connected to a payment-processing service to complete the transaction. The order amount, transaction references, contact details, and payment and refund status may be processed. We do not store full card details on the website. We may retain the references and statuses needed to reconcile payments, prevent duplicates, and manage refunds and disputes.

9. Location and Delivery

We use the address and coordinates you provide or select to choose the branch and delivery zone, calculate fees, verify delivery coverage, complete delivery, and assist branch staff and drivers. Browser location is requested only when you use a location-selection or detection feature.

10. Cookies and Sessions

The website uses essential cookies, session data, and local browser storage where needed to operate the cart, login, language, security, order tracking, and ordering experience.

11. Data Retention and Destruction

We retain personal data for as long as necessary to provide services, manage accounts and orders, provide customer support, resolve disputes, prevent fraud, and meet legal and accounting requirements. Certain verification, session, communication, and security records expire or are deleted automatically according to their configured operational periods. When personal data is no longer required and there is no legal basis requiring retention, it will be securely deleted or anonymized. A destruction request does not prevent retention of records that must be kept by law.

12. Data Security

We apply appropriate administrative, technical, and organizational measures to protect data against unauthorized access, use, disclosure, alteration, or loss. Access is restricted to those who need the information for their responsibilities. However, absolute security cannot be guaranteed for any electronic system.

13. Updates to This Privacy Policy

We may update this Policy when our services, practices, or legal requirements change. The updated version and effective date will be posted on this page. Appropriate notice will be provided or fresh consent requested where required by law. An update does not retroactively create consent that did not previously exist.

14. Contact Us

Pakistan Restaurant
Durat Al Azhar Trading Company
Commercial Registration number: 3550037286
For enquiries, complaints, privacy requests, use our Contact Us page.