How Ghar Se collects, uses, and protects personal data under Pakistani law
Ghar Se (GHAR SE APP (PRIVATE) LIMITED) is a technology marketplace platform only. We connect Users with independent third-party Partners (sellers, restaurants, drivers, service providers). Ghar Se does NOT sell goods, employ Partners, operate delivery fleets, or guarantee listings. Product, food, ride, delivery, COD, and tax disputes are between User and Partner. This Privacy Policy describes how we process data as a platform operator, not as a merchant of record.
Account data: name, email, phone, password (hashed), city, delivery addresses, profile photo. Location: GPS coordinates, accuracy, derived village/city/district, manual map pins, coarse IP location (if used). Transaction data: orders, payments, COD status, ride history, chat messages related to orders. Device data: browser type, device identifiers, IP address, app version. KYC (Partners): CNIC and business documents stored encrypted.
To operate marketplace, food, rides, delivery, and services; process orders and payments; show nearby Partners; prevent fraud; send order updates and (with consent) promotions; comply with Pakistani law including PECA 2016, AML reporting, and tax record-keeping; improve AI features using aggregated or anonymized patterns where possible.
We request GPS permission for delivery, nearby search, and rides. Location may be cached on device (localStorage, ~7 days), server Redis (~7 days), and PostgreSQL geocode_cache (rolling TTL). When cache misses, we may query licensed or OSM-based geocoders (Photon/Nominatim). Map labels depend on third-party data completeness — especially in rural areas. You may withdraw GPS consent in device settings.
We share delivery address and phone with fulfillment Partners ONLY for active orders — not for unrelated marketing. Payment data goes to PCI-compliant gateways. We do NOT sell personal data to ad networks. We may disclose data to law enforcement, FMU, FBR, or courts when required by Pakistani law. Map providers (OpenStreetMap © contributors) process location queries under their licenses.
We use SSL/TLS in transit and encryption at rest for sensitive fields. KYC documents have restricted access. Order and tax records may be retained 7+ years as required by law. Traffic data and session logs are retained for a minimum of 1 year per PECA 2016 Section 32. Geocode cache uses rolling deletion. Account deletion requests: [email protected] — we anonymize where retention is legally required.
At signup, you provide explicit consent for: (a) account creation and identity verification via phone OTP; (b) processing your orders and payments; (c) sharing delivery address and phone with the fulfilling Partner for active orders. For non-essential data processing, consent is opt-in: (d) GPS location — you may grant or revoke this permission at any time via device settings; (e) marketing emails and push notifications — you may opt out in account settings or via unsubscribe links; (f) analytics cookies — controlled via the cookie banner on first visit and in settings. You may withdraw any consent at any time through account settings. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Consent records are retained for the duration of the processing activity plus 2 years.
Ghar Se designates a Data Protection Officer (DPO) and Grievance Officer responsible for overseeing compliance with PECA 2016, this Privacy Policy, and all applicable data protection laws. The DPO can be contacted at: Email: [email protected] · Response commitment: within 48 hours of receiving a complaint. The DPO is responsible for: (a) investigating data protection complaints; (b) coordinating with FIA and PTA on data-related matters; (c) conducting annual data protection audits; (d) training staff on data protection obligations; (e) maintaining records of data processing activities. If you believe your data protection rights have been violated, you may also file a complaint with the FIA Cyber Crime Wing (ccr.fia.gov.pk) or the relevant provincial data protection authority.
Access and update profile data in account settings. Withdraw location consent. Request a copy or deletion of data (subject to legal retention). Opt out of marketing notifications in settings.
Essential cookies for login, cart, and checkout. Preference cookies for language and location. Analytics to improve the Platform. You may control non-essential cookies via browser or in-app banner.
Services are intended for users aged 18 or above, or with verifiable guardian consent where permitted. We do not knowingly collect children's personal data without appropriate consent. Privacy inquiries: [email protected] · [email protected] · Ph: +92 313 0599699 · GHAR SE APP (PRIVATE) LIMITED, Sumblanwala, Post Office Miani, Tehsil Bhera, District Sargodha, Pakistan. Privacy Policy v1.0.0.