YOUR DETAILS.
YOUR CHOICE.
This page explains how BOOM handles your bag, guest checkout details and privacy choices. Guest ordering uses your name and mobile number; it does not create a customer account or send a verification code.
Your bag
Product choices, quantities and kitchen notes are stored in this browser so your bag survives a refresh. Removing items clears them from the saved bag. You can also clear this site’s browser data.
Your name and phone
Checkout details stay available while you move between the bag and checkout. If you select “Remember my name, phone and address on this device” and review your details, they are saved in this browser for future visits. Your account → Remove saved contact details deletes the remembered name and phone. This is local device storage, not phone verification or an authenticated account. Clearing browser data or using another device removes recognition. We do not use IP addresses to identify returning customers.
Your address
Your address is remembered in this browser when you explicitly choose address saving, or remember your checkout details. It is not synced to an account. You can delete it using Your account → Remove saved address. Avoid saving addresses on shared devices.
Quotes, orders and receipts
When you check your total, your bag, name, phone and any delivery details are sent to BOOM’s server and saved privately with your quote. This includes your selected map pin and kitchen notes, if supplied. When you tap “Place order,” these details are sent to Blink POS so BOOM’s team can accept, prepare and fulfil your order. Cash is paid on delivery or at pickup; this checkout does not collect card details or take an online payment.
BOOM uses private Google Cloud storage for checkout records and keeps the order reference to check uncertain submissions without creating a second order. Essential, HttpOnly cookies let this browser view its own receipt. An unsubmitted quote cookie lasts 10 minutes; submitted-order and guest cookies last up to 30 days and may renew when used. The receipt reference is also saved for this browser session. Clearing site data may remove your ability to reopen the receipt here; it does not cancel an order or delete BOOM’s operational records. Contact the team about an order, correction or data-removal request.
Location and maps
“Use my location” asks for your browser’s permission and stores the selected pin with your address only if you choose to remember it. The delivery map contacts Google Maps only when you open it. Google receives your IP address, the map areas you view and coordinates used to display your pin. Your name, phone and written address are not sent with these map requests. Your delivery pin is only changed after you select “Use this pin.” The branch map and directions also use Google Maps when you open them. Manual address entry remains available.
Instagram and ordering
BOOM-provided videos and photos are served directly by this website. Only the active video loads for playback, and playback pauses when the section or browser tab is hidden. Videos start muted where your browser permits autoplay. Instagram is contacted only if you open an original-post or profile link. The new ordering flow stays on this BOOM website and submits directly to Blink POS when live ordering is enabled. No legacy ordering-site redirect is used. Google Maps is contacted only when you choose to load a map.
Optional website analytics
When enabled on the website, BOOM analytics starts automatically without a cookie popup and measures visits, viewed products, bag actions, checkout progress, WhatsApp button clicks and whether an order receipt was shown. WhatsApp message contents and whether you sent a message are not collected. A random browser identifier lasts up to 180 days; each tab’s visit ends after 30 minutes of inactivity. These identify browsers, not verified people. We store source categories (such as Instagram or Google), device type and page paths without query strings. Your written address is classified on your device into a broad area such as DHA Phase 2 or Bahria Town. Only that area label enters analytics; an address that cannot be classified remains unknown. It is not your current location.
Analytics does not store your name, phone, email, full address, map pin, kitchen notes or IP address. Reports are private to BOOM administrators. Browser identifiers and event summaries are held in private storage; reports show aggregate counts. Choose “Required only” in Privacy choices to stop future measurement and clear the local analytics identifiers. Previously collected summaries are not withdrawn. Browser privacy controls and blocked requests may prevent measurement. Ordering works without analytics.
Optional advertising measurement
When advertising measurement is enabled on the live BOOM website, Meta Pixel starts automatically without a cookie popup. A saved “Required only” choice is respected. You can switch tracking off or on using “Privacy choices” in the menu page footer. Ordering and your saved bag work either way. A supported browser Global Privacy Control signal also stops tracking.
Enabled measurement shares product IDs, quantities, prices and actions such as viewing a burger, adding it to your bag, beginning checkout and a kitchen-accepted order (including its final PKR total and an opaque event identifier) with Meta. While marketing is enabled, our server also sends the accepted order, SHA-256 hashes of your normalized phone number and optional receipt email, an opaque customer identifier, advertising cookie identifiers and browser type to Meta to match purchases to ads. Hashing does not make these identifiers anonymous. This can happen after you close the page; retries are limited to 24 hours. Browser and server copies share an event ID to prevent double counting. Meta also receives browser/network information when its script loads. This integration does not send kitchen notes, typed search text, your name, written delivery address or map pin to Meta. Advertising link identifiers may be saved for 30 days, and your privacy choice for 180 days; a saved opt-out remains off until you change it. Opaque purchase identifiers are kept on this device for up to seven days to prevent repeated measurement. Clearing browser storage removes these local preferences. Disabling marketing clears this integration’s saved attribution and first-party Meta cookies and asks our server to cancel pending measurement for orders linked to this device; it does not retract events already received by Meta.
Optional Google Ads measurement
When Google Ads measurement is enabled, the Google tag starts automatically without a cookie popup, unless you previously switched it off or your browser sends Global Privacy Control. Google can use advertising click identifiers and cookies to connect your visit to an ad. For a kitchen-accepted order, this integration sends Google the final PKR total, currency and an opaque transaction identifier so the same order is not counted twice. It does not send your name, phone, email, delivery address, map pin or kitchen notes. Enhanced conversions and personalized advertising are disabled. Google also receives browser/network information when its tag loads.
An enabled Google measurement preference lasts up to 180 days and renews under the site default; a saved opt-out stays off until changed. Opaque order identifiers are kept on this device for up to seven days to prevent repeated measurement. Choose “Required only” to stop future Google purchase events and remove this integration’s local purchase markers and first-party Google advertising cookies. This does not withdraw events Google already received. Browser privacy controls and blocked requests can prevent measurement, and orders accepted after you close the receipt may not be measured. Ordering works without Google measurement.
Updated 19 September 2026.
Questions? Call 0334 1511901.