Privacy Policy

Kurveluv is a Pakistan-based innerwear brand. When this policy refers to "Kurveluv", "we", "us", or "our", it means the Kurveluv business and its website at kurveluv.com. You can contact us at support@kurveluv.com with any privacy-related questions.

We collect information you give us directly: • Account information — name, email address, and password when you create an account. • Order information — delivery address, phone number, and order details when you place an order. • Size profile data — underbust and bust measurements, unit preference, and fit feedback when you use the AI size finder. These are stored only to generate your recommended size and are never associated with your name in logs or audit trails. • Communications — messages you send us via email or contact forms. We also collect limited technical data automatically: • Log data — IP address, browser type, pages visited, and timestamps (standard server logs). • Cookies — session cookies required for cart, wishlist, and login functionality. We do not use advertising or tracking cookies.

We use your information only for the following purposes: • Processing and fulfilling your orders and sending order confirmations. • Providing and improving the AI size finder experience. • Responding to your support enquiries. • Sending transactional emails (order confirmation, dispatch notification, password reset). We do not send marketing emails without your explicit consent. • Preventing fraud and maintaining security. • Complying with legal obligations. We do not sell, rent, or trade your personal information to any third party for marketing purposes.

Your underbust and bust measurements are particularly sensitive. We treat them with extra care: • Measurements are processed in memory to calculate your size and are stored only in your size profile — never in application logs, error messages, or audit trails. • Your size profile is linked to your account or guest session only — it is not shared with third parties. • We do not send measurement data to any AI provider. Only your recommended size, confidence level, and non-identifying fitting notes are used to generate the AI explanation copy. • You may delete your size profile at any time from My Account → Size Profile.

We share your information only when necessary: • Delivery partners — we share your name, phone number, and delivery address with our courier partners solely to fulfil your order. • Payment processors — for non-COD payments (if introduced), your payment details are processed directly by the payment provider. We do not store card numbers. • Legal requirements — we may disclose information if required by law or to protect the rights and safety of our customers. We do not use third-party advertising networks, social media tracking pixels, or analytics services that share your data externally.

We use strictly necessary cookies only: • Session cookies — to keep you logged in and maintain your cart and wishlist across pages. • Guest session cookies — a random identifier (not your name or email) stored in an httpOnly cookie to associate your cart, wishlist, and size profile with your browser session. You can disable cookies in your browser settings, but this will prevent login, cart, and wishlist features from working correctly. We do not use analytics, advertising, or third-party cookies.

We retain your data only as long as necessary: • Account data — retained for as long as your account is active. You may delete your account at any time. • Order data — retained for 7 years as required by Pakistani tax and commercial law. • Size profiles — retained until you delete them or close your account. • Guest sessions — expire automatically after 30 days of inactivity. • Server logs — retained for up to 90 days for security purposes.

You have the right to: • Access the personal data we hold about you. • Correct inaccurate data. • Delete your account and associated data (subject to legal retention requirements). • Export your size profile data. • Withdraw consent to marketing communications at any time. To exercise any of these rights, contact us at support@kurveluv.com. We will respond within 14 business days.

We take reasonable technical and organisational measures to protect your data, including: • Passwords are hashed using a strong one-way algorithm — we cannot recover your password. • All data is transmitted over HTTPS. • Body measurements are never written to logs. • Admin access to customer data requires authentication and is logged for audit purposes. No system is 100% secure. If you suspect unauthorised access to your account, change your password immediately and contact us.

Our service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

We may update this policy from time to time. When we make significant changes we will update the "Last updated" date at the top of this page. Continued use of Kurveluv after changes constitutes acceptance of the updated policy.

For any privacy questions or requests, contact us at: support@kurveluv.com We aim to respond within 14 business days.