Privacy Policy

We are a small coffee company, not an advertising business. We collect what we need to grind your coffee and get it to your door, and nothing beyond that.

Last updated 16 September 2026

Who we are

Steep is a specialty coffee company based in Karachi, Pakistan, selling within Pakistan through this site and our shop. If you want to talk to a person about anything on this page, message us on WhatsApp at +92 370 5961921.

What we collect

When you place an order

Your name, delivery address, phone number and email address.
What you ordered, the roast and grind you chose, and the order total.
Whether you paid cash on delivery or online, and the payment status.

We need every one of these to grind the right coffee and have a courier find you. Without them there is no order.

When you message us

Whatever you choose to tell us - your name, your number, and the contents of the conversation.

Please read this bit. The form on our contact page does not send anything to this website and nothing you type into it is stored here. It opens WhatsApp with your message ready to send, and you send it yourself. That means the conversation lives in WhatsApp and is handled under Meta’s privacy terms as well as ours. If you would rather not use WhatsApp, email us instead.

Automatically, when you browse

Standard server logs from our hosting provider: IP address, browser type, the pages requested and when.
On the shop, a cookie that remembers what is in your basket and keeps you signed in. Without it the basket empties on every page.

This marketing site does not set advertising or tracking cookies, and we do not run a tracking pixel on it.

On the shop, for advertising

Our shop runs the Meta Pixel. It records which products you look at, what you add to your basket and when you begin checking out, and it sets cookies that let Meta recognise the same browser again later. We use it to see whether our Facebook and Instagram ads bring anyone to the shop, and to show ads to people who have visited before.

When an order is confirmed we also send Meta the sale itself, from our own server rather than from your browser. Your email address and phone number go with it, but hashed - scrambled before they leave us, rather than sent in the clear. Meta compares the scrambled value against its own records to work out which ad led to the sale. We send this only once someone has confirmed the order with you by phone; an order that is cancelled, or refused at the door, is never reported.

You can stop this. Blocking third-party cookies in your browser prevents the pixel following you between sites, and Meta’s own ad preferences let you limit how your activity is used for advertising. Neither affects your order.

What we never collect

Your card details. If you pay online, your card information goes directly to the payment provider. It does not pass through our servers and we never see it.
Your CNIC number, date of birth, or any government identifier.
Anything about your health, religion, politics or ethnicity.

Why we use it

To grind, pack and deliver your order, and to handle returns.
To contact you about that order - a tracking number, a delay, a question about your address.
To keep our own accounting and tax records.
To send you occasional news about new coffees, but only if you asked us to. We do not add order customers to a mailing list automatically, and every message has an unsubscribe link.

We do not sell your data. We do not rent it, trade it, or hand it to data brokers. There is no version of our business where that makes sense.

Who else sees it

Our courier. Your name, address and phone number, so they can deliver the parcel and call you on the way.
Our payment provider, if you pay online, so the payment can be taken.
Our hosting and shop platform, which stores the order on our behalf.
WhatsApp and Meta, if you contact us that way, as described above.
Meta, which receives the browsing and purchase information described above, so we can measure and target our ads.
A government authority, where we are required by law to produce records.

Where your data is stored

Our website is hosted on servers outside Pakistan, so information you give us may be stored and processed abroad. Practically, this is how nearly every website in Pakistan operates. We choose providers that offer proper security commitments, but you should know it is the case.

How long we keep it

Order records: kept as long as our tax and accounting obligations require.
Enquiries that did not become an order: around 12 months, then deleted.
Mailing list: until you unsubscribe.

Your choices

You can ask us at any time to:

tell you what we hold about you;
correct anything that is wrong;
delete it, where we are not required to keep it for tax or accounting;
stop sending you marketing, which you can also do from any email.

Message us on WhatsApp or email hello@steepcoffee.co. We will respond within 30 days. We may ask you to confirm your order number or the phone number you ordered with, so that we are not handing your details to someone else.

The law that applies

We operate under the laws of Pakistan. Pakistan does not currently have a single comprehensive data protection statute in force, so rather than point at a law, we have written this page to describe what we genuinely do. If legislation commences that gives you further rights, those rights apply whether or not this page has caught up.

Security, honestly stated

Our site is served over HTTPS, access to order data is limited to the people who need it, and payment details never reach us. No small business can promise a breach will never happen. If one does and your data is affected, we will tell you rather than hope you do not notice.

Children

Our shop is not intended for children under 16, and we do not knowingly collect their information. If you believe a child has given us their details, tell us and we will delete it.

Changes to this policy

When we change it we update the date at the top of this page. For anything significant - a new category of data, a new recipient - we will say so clearly rather than quietly edit the text.