Privacy policy

Effective Date: 21 September 2026

At Legacy By M, we respect your privacy and are committed to protecting the personal information you provide when using our website, placing an order, submitting a custom product request, creating an account, or interacting with our services.

This Privacy Policy explains what information we collect, how we use it, when we may share it, how we protect it, and the choices and rights available to you.

By accessing or using https://legacybym.com/, you acknowledge that you have read and understood this Privacy Policy.

1. About Legacy By M

Legacy By M is a Home & Lifestyle e-commerce brand offering home textiles and lifestyle products, including curtains, bedroom essentials, bathroom accessories, kitchen essentials, and related products.

Business Address: 3/A6, Commercial Zone, Block H, Valencia, Lahore, 54800, Pakistan

Email: info@legacybym.com
Phone / WhatsApp: +92 307 7514494
Website: https://legacybym.com/

For the purposes of this Privacy Policy, "Legacy By M", "we", "us", and "our" refer to Legacy By M.

2. Information We Collect

We may collect personal and technical information when you interact with our website or services.

2.1 Information You Provide Directly

Depending on how you use our website, we may collect:

  • Full name
  • Email address
  • Phone/contact number
  • Billing and delivery information
  • Province/state
  • City
  • Complete delivery address
  • Order information
  • Product selections
  • Quantity and customization requirements
  • Account information
  • Customer service communications
  • Information submitted through contact or inquiry forms
  • Information provided through our Custom Order form
  • Files, images, or design references uploaded through a Custom Order request
  • Any additional information you voluntarily provide to us

2.2 Order Information

When you place an order, we collect information necessary to process and fulfill your order, which may include your name, contact information, delivery address, products ordered, order amount, and other information required to complete the transaction.

Legacy By M currently offers Cash on Delivery (COD) as its payment method. We do not collect or store your credit/debit card details because card payments are not currently processed through our website.

2.3 Customer Account Information

Customers may place orders using guest checkout or may create an account.

If you create an account, we may collect and retain information associated with your account, such as your name, email address, contact information, order history, saved information, and other basic account information supported by our Shopify store.

3. Custom Product Requests

Legacy By M may provide customers with the ability to request customized products.

Our Custom Order form may collect information including:

  • Full name
  • Contact number
  • Email address
  • Province
  • City
  • Complete delivery address
  • Product category
  • Product type
  • Product/design reference
  • Uploaded files
  • Quantity
  • Customization requirements
  • Required dimensions
  • Width
  • Height/length
  • Measurement unit
  • Preferred color
  • Preferred material/fabric
  • Additional customization requirements
  • Priority level
  • Special instructions or notes

This information is used to understand your requirements, prepare a custom quotation, communicate with you, and process your custom product request.

Uploaded files or design references may be retained for the purpose of handling your request and related customer service.

Custom-order information is intended to be retained for up to 30 days, subject to operational, legal, security, or transactional requirements.

4. Information Collected Automatically

When you visit our website, certain information may be collected automatically through cookies, pixels, analytics tools, and similar technologies.

This may include:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Website pages visited
  • Products viewed
  • Referring website or source
  • Approximate geographic information
  • Date and time of website visits
  • Website interaction information
  • Session and browsing information
  • Advertising and campaign information

This information may help us understand how visitors use our website, improve website performance, measure advertising campaigns, and provide more relevant advertising.

5. Cookies and Tracking Technologies

Legacy By M uses cookies and similar technologies to operate, improve, analyze, and market our website.

Cookies may be used for purposes such as:

  • Essential Cookies — These may be necessary for basic website functions, shopping cart functionality, checkout, account functionality, security, and other essential services.
  • Analytics Cookies — We use analytics technologies, including Google Analytics, to understand how visitors interact with our website and to improve our products and services.
  • Advertising and Marketing Technologies — We may use advertising and tracking technologies including:
    • Google Ads / Google Tag Manager
    • Meta Pixel
    • TikTok Pixel
    • Microsoft Clarity

    These technologies may help us measure advertising performance, understand customer interactions, analyze website behavior, and create or improve advertising audiences where supported by the relevant platform.
  • Managing Cookies — Depending on your browser, device, and available website settings, you may be able to block, delete, or manage cookies through your browser settings.
    Disabling certain cookies may affect some website functionality.

6. How We Use Your Information

We may use your information for the following purposes:

  • Processing and fulfilling orders
  • Delivering products to you
  • Confirming and managing orders
  • Providing customer support
  • Responding to inquiries
  • Processing custom product requests
  • Preparing custom quotations
  • Managing customer accounts
  • Maintaining order records
  • Improving our website and services
  • Understanding customer preferences and website usage
  • Detecting and preventing fraudulent or unauthorized activity
  • Maintaining website security
  • Measuring advertising performance
  • Running and optimizing marketing campaigns
  • Providing relevant advertisements
  • Sending transactional emails and order-related communications
  • Sending promotional communications where permitted
  • Complying with applicable legal obligations

We do not use your personal information for purposes unrelated to the operation of our business except where permitted by applicable law or where you have otherwise provided appropriate permission.

7. Order and Delivery Information

When you place an order, we may share the information necessary to fulfill and deliver your order with our delivery partner.

Our current courier partner is:

  • PostEx

Information shared may include information necessary for delivery, such as:

  • Customer name
  • Phone/contact information
  • Delivery address
  • Order information
  • Other information required to successfully deliver the order

We do not share more information than is reasonably necessary for the relevant delivery or service purpose.

8. Email Communications

We may use your email address to send transactional communications, including:

  • Order confirmations
  • Order-related information
  • Delivery or fulfillment updates
  • Customer service responses
  • Other communications directly related to your transactions

We may also send promotional or marketing communications where permitted.

You may opt out of promotional communications at any time by using the available unsubscribe mechanism or by contacting us directly.

Please note that opting out of promotional communications does not necessarily stop essential transactional or service-related communications.

9. Marketing and Advertising

Legacy By M may use online advertising platforms and related technologies to promote its products and services.

Our current marketing platforms include:

  • Meta
  • Google
  • TikTok

We may use pixels, tags, cookies, and similar technologies provided by these platforms to:

  • Measure advertising performance
  • Understand interactions with advertisements
  • Measure conversions
  • Build or optimize advertising audiences
  • Improve advertising campaigns
  • Show relevant advertisements where supported by the platform

These third-party advertising platforms may process information according to their own privacy policies and terms.

You may manage certain advertising preferences through the relevant platform or your device/browser settings.

10. Third-Party Service Providers

We use third-party services and technologies to operate, analyze, secure, market, and improve our website.

These may include:

  • Shopify — Our online store is hosted and operated using Shopify. Shopify provides the e-commerce infrastructure necessary to operate our online store, including functionality related to shopping, checkout, customer accounts, and store operations.
  • PostEx — We may provide necessary customer and order information to PostEx for order delivery and fulfillment.
  • Google — We use Google services including Google Analytics, Google Ads, and Google Tag Manager for analytics, advertising, measurement, and website-related functionality.
  • Meta — We may use Meta Pixel and related Meta advertising technologies to measure and optimize advertising activity.
  • TikTok — We may use TikTok Pixel and related TikTok advertising technologies for advertising measurement and optimization.
  • Microsoft Clarity — We use Microsoft Clarity to understand how visitors interact with our website and identify opportunities to improve website usability and experience.

Third-party providers may process information according to their own terms and privacy policies.

11. Sharing of Personal Information

We may share personal information with trusted service providers where reasonably necessary to operate our business and provide services to you.

This may include:

  • Shopify
  • PostEx
  • Analytics providers
  • Advertising platforms
  • Website and technology service providers
  • Other service providers necessary for operating our business

We may also disclose information where required to:

  • Comply with applicable laws or legal processes
  • Respond to lawful requests from authorities
  • Protect our rights, property, or safety
  • Protect customers or other individuals
  • Detect, investigate, or prevent fraud, abuse, or security issues

We do not sell your personal information as a standalone product.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to our operational and legal requirements.

Our stated standard retention period for customer/order information and custom-order information is 30 days.

However, certain information may need to be retained for longer where reasonably necessary for:

  • Completing or documenting transactions
  • Customer service
  • Accounting or business records
  • Legal or regulatory requirements
  • Resolving disputes
  • Preventing fraud
  • Security purposes

Where information is no longer required, we may delete, anonymize, or securely dispose of it.

13. Data Security

We take reasonable measures to protect personal information against unauthorized access, misuse, alteration, disclosure, or destruction.

Our store is operated through Shopify, which provides the infrastructure and security features associated with the Shopify platform.

We also take reasonable administrative and operational measures to limit access to customer information to people and service providers who require it for legitimate business purposes.

However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure.

Therefore, while we take reasonable precautions to protect your information, we cannot guarantee absolute security.

14. Your Privacy Rights

Depending on applicable law and your circumstances, you may have rights concerning your personal information.

These may include the right to:

  • Access — Request information about the personal data we hold about you.
  • Correction — Request correction of inaccurate or incomplete personal information.
  • Deletion — Request deletion of your personal information, subject to circumstances where we may be required or permitted to retain certain information.
  • Marketing Opt-Out — Opt out of promotional communications.
  • Withdraw Certain Permissions — Where processing is based on your permission or consent, you may request withdrawal of that permission, subject to applicable limitations.

To make a privacy-related request, contact us using the details provided in the Contact Us section.

We may need to verify your identity before processing certain requests to protect your information from unauthorized access.

15. Children's Privacy

Our website is intended for general consumers and is not specifically directed toward children.

We do not knowingly request or intentionally collect personal information from children where such collection is prohibited by applicable law.

If you believe that a child has provided personal information to us without appropriate authorization, please contact us at:

info@legacybym.com

If we become aware that we have collected personal information from a child in circumstances where it should not have been collected, we may take reasonable steps to delete that information.

16. International Customers and Data Processing

Legacy By M provides services in the locations where our store currently offers delivery and services.

Depending on the services used to operate our website, your information may be processed by third-party service providers in locations outside your country of residence.

These providers may include Shopify, analytics providers, advertising platforms, technology providers, and other service providers used by Legacy By M.

By using our website, you acknowledge that your information may be processed by these service providers in accordance with their applicable terms and privacy policies.

17. Links to Third-Party Websites

Our website may contain links to third-party websites, social media platforms, advertising platforms, or other external services.

If you follow a link to a third-party website, that website will operate under its own privacy practices and policies.

Legacy By M is not responsible for the privacy practices, content, security, or policies of third-party websites that we do not control.

We encourage you to review the privacy policy of any third-party website before providing personal information.

18. Changes to This Privacy Policy

We may update or modify this Privacy Policy from time to time to reflect changes in:

  • Our business practices
  • Website functionality
  • Third-party services
  • Tracking technologies
  • Legal or regulatory requirements
  • Privacy practices

When we make changes, we will update the Effective Date shown at the beginning of this Privacy Policy.

We encourage you to review this page periodically to remain informed about how we handle personal information.

19. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how your information is handled, please contact us.

Legacy By M

Address: 3/A6, Commercial Zone, Block H, Valencia, Lahore, 54800, Pakistan

Email: info@legacybym.com

Phone / WhatsApp: +92 307 7514494

Website: https://legacybym.com/

We will review privacy-related requests and respond using the contact information you provide.

Last Updated: 21 September 2026