Privacy Policy

ProAthlete.uk (“we”, “us”, “our”) respects your privacy. This policy explains what personal data we collect when you use our website, how we use it, who we share it with, and your rights under applicable data protection laws in Pakistan.

1. Who we are

ProAthlete.uk is operated from Floor 11, Al-Hafeez Heights, 3 Ghalib Rd, Block D1 Gulberg, Lahore 54000, Pakistan, and is the data controller for the personal data described in this policy. You can contact us at info@proathlete.uk.

2. What data we collect

• Account & order data — name, email address, postal address, phone number, and order history when you create an account or place an order.
• Payment data — Cash on Delivery orders involve no online payment data. Where an online payment method is used, it is handled by the payment provider; we do not store full card numbers on our servers.
• Technical data — IP address (hashed for our consent log), device and browser type, pages visited, referrer.
• Cookies & identifiers — see “Cookies and tracking” below.
• Communications — emails or messages you send us.

3. Why we use your data (legal bases)

• Contract — to process your orders, deliver products, and provide customer support.
• Legitimate interests — to operate and improve our website, prevent fraud, and keep our services secure.
• Consent — for analytics cookies, marketing cookies, and marketing emails. You can withdraw consent at any time via the cookie banner or by contacting us.
• Legal obligation — to comply with accounting, tax, and consumer-protection law.

4. Cookies and tracking

We use the following categories of cookies. The cookie banner shown on your first visit lets you accept or reject each non-essential category.

• Strictly necessary — required for the cart, checkout, login, and security. These cannot be disabled.
• Functional — remember your region and recently viewed items.
• Analytics — Google Analytics 4 (G-YVX351CFVB) and Google Tag Manager (GTM-MSB9WMC8). We use Google Consent Mode v2 so that no analytics identifiers are stored until you opt in.
• Marketing — Meta Pixel (712013674652415) and Meta Conversions API for measuring advertising effectiveness and personalising ads on Facebook, Instagram, and partner networks. The pixel is set to “revoke” until you grant marketing consent.

You can change your cookie preferences at any time using the “Manage” option in the cookie banner. Disabling analytics or marketing cookies will not affect your ability to place orders.

5. Who we share data with

• Payment providers — where an online payment method is used, governed by the provider's own privacy policy. COD orders involve no online payment processing.
• Shipping carriers — TCS, Leopards, and similar partners, only the data needed to fulfil delivery.
• Analytics & advertising providers — Google (Analytics, Ads, Tag Manager) and Meta Platforms Ireland Ltd (Facebook, Instagram). Data shared with these providers is governed by their own privacy policies and our cookie consent settings.
• Hosting & infrastructure — our hosting provider, content-delivery network, and email provider, under data-processing agreements.

We never sell your personal data. Some providers (e.g. Google or Meta) may process data on servers outside Pakistan; such transfers are governed by those providers' own safeguards and privacy policies.

6. How long we keep your data

• Order records — 7 years (to comply with tax and accounting requirements).
• Account data — for as long as your account is active. You can request deletion at any time.
• Consent log — kept as evidence of your consent choices. Hashed IP only; no raw IP is stored.
• Cookies — durations are listed in your browser developer tools. Analytics cookies typically expire after 14 months; marketing cookies after 13 months.

7. Your rights

You have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (“right to be forgotten”), subject to legal retention requirements.
• Restrict or object to processing.
• Receive your data in a portable, machine-readable format (“right to data portability”).
• Withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, email info@proathlete.uk. We will respond within one calendar month.

8. Security

We use HTTPS across the site, store passwords using industry-standard one-way hashing, and apply security best practices to our hosting environment. No system is 100% secure, however, and we cannot guarantee absolute security.

9. Children

Our website is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have, please contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent version. Material changes will be communicated through a notice on our website.

11. Contact

For any questions about this policy or how we handle your personal data, email info@proathlete.uk.