Legal
Privacy Policy
Last updated: 1 August 2026
YUM PUM ("we", "our", or "us") operates the website https://www.yumpum.pk and its associated online ordering platform (the "Service"). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. By using our Service you agree to the practices described here.
1. Information We Collect
We collect information in the following ways:
a) Information you provide directly
- Name — when you create an account or place an order.
- Phone number — used to confirm orders and arrange delivery.
- Delivery address — required to fulfil your order.
- Order history — a record of every order you place through our platform.
- Account credentials — a hashed password stored securely; we never store plain-text passwords.
b) Information collected automatically
- Cookies and similar technologies — small text files placed on your device to keep you logged in, remember cart contents, and analyse how you interact with the site.
- Log data — IP address, browser type, pages visited, time and date of access, and referring URL.
- Device information — device type, operating system, and screen resolution.
c) Information from third parties
- Google Analytics — we use Google Analytics to understand how visitors use our site. Google may set its own cookies. See Google's Privacy Policy.
- Google AdSense — we display advertisements through Google AdSense. Google and its partners may use cookies to show you relevant ads based on your browsing history. You can opt out at Google Ad Settings.
2. How We Use Your Information
We use the information we collect to:
- Process and deliver your orders.
- Send order confirmation and status updates via WhatsApp or SMS.
- Respond to customer service enquiries.
- Personalise your experience (e.g. suggesting dishes you have ordered before).
- Improve our website, menu, and delivery operations through analytics.
- Display relevant advertisements via Google AdSense.
- Prevent fraud and enforce our Terms & Conditions.
- Comply with legal obligations.
3. Cookies
We use both session cookies (deleted when you close your browser) and persistent cookies (stored for a set period). The main categories are:
- Essential cookies — required for the site to function (login session, cart).
- Analytics cookies — Google Analytics tracks page views and user journeys in aggregate.
- Advertising cookies — Google AdSense uses cookies to serve personalised ads.
You can control cookies through your browser settings. Disabling essential cookies will break login and cart functionality.
4. Sharing Your Information
We do not sell your personal data. We share it only with:
- Delivery staff — name, phone number, and address shared with the rider assigned to your order.
- Technology providers — cloud hosting (Railway / Vercel), Cloudinary (image storage), and MongoDB Atlas (database). All are bound by data-processing agreements.
- Analytics & advertising partners — Google Analytics and Google AdSense as described above.
- Law enforcement — if required by Pakistani law or a valid court order.
5. Data Retention
We retain your account and order data for as long as your account is active or as needed to provide our services. If you request account deletion, we will erase your personal data within 30 days, except where retention is required by law.
6. Security
We use HTTPS encryption for all data in transit, store passwords as bcrypt hashes, and restrict database access to authorised systems only. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
7. Children's Privacy
Our Service is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
8. Your Rights
You have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to correct inaccurate data.
- Deletion — request erasure of your personal data ("right to be forgotten").
- Opt out of marketing — reply STOP to any WhatsApp message from us.
To exercise any of these rights, contact us using the details below.
9. Third-Party Links
Our site may contain links to third-party websites (social media, payment apps). We are not responsible for the privacy practices of those sites and encourage you to read their policies.
10. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with a revised "Last updated" date. Continued use of our Service after changes constitutes acceptance.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:
- WhatsApp: 0318-0142172
- Phone / UAN: 0318-0142172
- Address: Main Gujranwala Rd, Near UBL BANK, Kashmir Park Shahdra, Lahore, Pakistan
Return to Home · Terms & Conditions · Refund Policy