Privacy Policy

1. Introduction

PakRoozgar Private Limited ("PakRoozgar", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform ("Service").

This policy complies with:

• The Constitution of Pakistan (Article 14 - Right to Privacy)
• Prevention of Electronic Crimes Act (PECA) 2016
• Personal Data Protection Bill (when enacted)
• General Data Protection Regulation (GDPR) for EU users
• International best practices for data protection

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, phone number, CNIC/NICOP number (for verification)
• Profile Information: Business name, address, description, photos, business hours
• Verification Documents: Business registration, licenses, tax certificates (for Service Providers)
• Communication Data: Messages, reviews, ratings, support inquiries
• Payment Information: Billing details, transaction history (processed by secure payment providers)
• Optional Information: Social media profiles, website URLs, additional contact numbers

2.2 Information Collected Automatically

• Device Information: IP address, device type, operating system, browser type, unique device identifiers
• Usage Data: Pages viewed, features used, search queries, click data, access times and dates
• Location Data: GPS location (if permitted), IP-based location, user-provided location
• Cookies and Tracking: Session cookies, preference cookies, analytics cookies
• Log Data: Server logs, error reports, performance data

2.3 Information from Third Parties

• Social Media: If you connect via social media accounts
• Payment Providers: Transaction confirmations and payment status
• Verification Services: Identity and document verification results
• Public Sources: Business directories, public records

3. How We Use Your Information

3.1 Primary Purposes

• Provide, operate, and maintain our Service
• Process and manage your account registration
• Connect Customers with Service Providers
• Process transactions and send transaction notifications
• Verify identity and prevent fraud
• Respond to comments, questions, and support requests
• Send administrative information (updates, security alerts)
• Enforce our Terms of Service and policies

3.2 Business Purposes

• Improve and personalize user experience
• Develop new features and services
• Analyze usage patterns and trends
• Send marketing communications (with consent)
• Conduct surveys and collect feedback
• Detect and prevent technical issues
• Protect against illegal activities and abuse

3.3 Legal Bases for Processing (GDPR)

We process your data based on:

• Consent: Where you have given clear consent
• Contract: To fulfill our contract with you
• Legal Obligations: To comply with Pakistani law
• Legitimate Interests: For business operations that don't override your rights
• Vital Interests: To protect someone's life

4. Information Sharing and Disclosure

We do NOT sell, rent, or trade your personal information. We share information only in these circumstances:

4.1 With Your Consent

• When you explicitly agree to share information
• When connecting Customers with Service Providers
• Public profile information visible to all users

4.2 Service Providers

• Cloud storage providers (data hosting)
• Payment processors (JazzCash, EasyPaisa, banks)
• Email service providers
• Analytics providers (Google Analytics)
• Customer support tools

All service providers are contractually obligated to protect your data and use it only for specified purposes.

4.3 Legal Requirements

• To comply with legal obligations under Pakistani law
• In response to valid legal requests from authorities
• To protect rights, property, or safety
• To investigate potential violations
• To enforce our policies and terms

4.4 Business Transfers

In case of merger, acquisition, or sale of assets, your information may be transferred. We will notify you before any transfer and any changes to this policy.

4.5 Aggregated Information

We may share aggregated, anonymized data that cannot identify you personally for business analysis, research, and marketing purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

5.1 Security Measures

• SSL/TLS encryption for data in transit
• Encryption at rest for sensitive data
• Regular security audits and penetration testing
• Access controls and authentication mechanisms
• Regular backups and disaster recovery procedures
• Employee training on data protection
• Incident response procedures
• Compliance with PCI DSS for payment data

5.2 Data Breach Notification

In case of a data breach that poses risk to your rights and freedoms, we will:

• Notify affected users within 72 hours of discovery
• Provide details about the breach and affected data
• Explain measures taken to address the breach
• Recommend steps to protect yourself
• Notify relevant authorities as required by law

6. Data Retention

We retain your information only as long as necessary for the purposes outlined in this policy:

• Active Accounts: Data retained while account is active
• Inactive Accounts: Deleted after 2 years of inactivity
• Transaction Records: Retained for 7 years per tax requirements
• Legal Holds: Retained as required by law or legal proceedings
• Marketing Lists: Until you unsubscribe
• Cookies: Session cookies expire on browser close; persistent cookies expire as specified

After retention periods expire, we securely delete or anonymize your data.

7. Your Rights and Choices

7.1 Your Data Rights

Under applicable laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a portable format
• Restriction: Limit processing of your data
• Object: Object to certain processing activities
• Withdraw Consent: Where processing is based on consent
• No Automated Decision-Making: Not be subject to solely automated decisions

7.2 How to Exercise Your Rights

To exercise your rights, you can:

• Access account settings to update or delete information
• Email us at privacy@pakroozgar.com
• Call our data protection officer at +92 339 0005654
• Submit a request through our online form

We will respond to your request within 30 days. We may need to verify your identity before processing certain requests.

7.3 Communication Preferences

• Marketing Emails: Unsubscribe link in every email
• SMS Messages: Reply STOP to opt-out
• Push Notifications: Manage in device settings
• Account Notifications: Manage in account settings

8. Cookies and Tracking Technologies

8.1 Types of Cookies We Use

• Essential Cookies: Required for basic functionality
• Performance Cookies: Help us understand usage patterns
• Functionality Cookies: Remember your preferences
• Marketing Cookies: Used for targeted advertising (with consent)
• Third-Party Cookies: From our service providers

8.2 Managing Cookies

You can control cookies through:

• Browser settings (block or delete cookies)
• Our cookie consent banner
• Third-party opt-out tools

Note: Disabling cookies may affect functionality of the Service.

8.3 Other Tracking Technologies

• Web beacons/pixel tags for email tracking
• Local storage for user preferences
• Device fingerprinting for security

9. Children's Privacy

PakRoozgar is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we discover that a child under 18 has provided us with personal information, we will delete such information from our systems promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than Pakistan. When we transfer data internationally, we ensure appropriate safeguards:

• Standard contractual clauses approved by authorities
• Data processing agreements with service providers
• Adequacy decisions where applicable
• Your explicit consent for specific transfers

By using our Service, you consent to the transfer of your information to countries that may have different data protection laws than Pakistan.

11. Third-Party Links and Services

Our Service may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

Third-party services integrated with our platform include:

• Google Maps for location services
• Payment processors (JazzCash, EasyPaisa)
• Social media platforms
• Analytics services

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations.

When we make changes:

• We will update the "Last Updated" date
• For material changes, we will notify you via email or platform notification
• We may require you to acknowledge the updated policy
• Continued use after changes constitutes acceptance

We encourage you to review this policy periodically.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices:

Supervisory Authority: You have the right to lodge a complaint with the Pakistan Telecommunication Authority (PTA) or relevant data protection authority.

14. Consent and Acknowledgment

By using PakRoozgar, you acknowledge that:

• You have read and understood this Privacy Policy
• You consent to the collection and use of your information as described
• You are at least 18 years old
• You have the right to withdraw consent at any time
• You understand your rights under applicable data protection laws