01.Introduction & Consent
At RaabtaQR ("Company", "we", "us", "our"), accessible from raabtaqr.com, the privacy of our visitors and customers is one of our highest priorities. This Privacy Policy explains what information we collect, why we collect it, how it is used, and your rights as a user.
By using our website, mobile application, or any RaabtaQR product or service, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use our services.
🔒 Core Privacy Promise: Your real phone number is never displayed publicly on any RaabtaQR profile page. All contact is mediated through our privacy layer. We employ AES-256 encryption on all stored personal data.
This policy applies to all users globally, with specific provisions for users in the European Union, United Kingdom, United States (California), Pakistan, and Gulf Cooperation Council (GCC) countries.
02.Information We Collect
Information You Provide Directly
- Name: Used to display on your private profile page (first name only, optionally)
- Phone Number (WhatsApp): Stored encrypted. Never displayed publicly. Used to forward contact requests to you.
- City: Used on your profile page for context
- Email Address: Optional. Used for order confirmations and account communications
- Emergency Contact: Optional. Displayed on your profile for emergency situations
- Vehicle Documents: Uploaded voluntarily. Protected by OTP access. Stored encrypted.
- Order & Payment Information: Order details, delivery address, payment method (we do not store full payment card numbers)
Information Collected Automatically
- IP Address: Collected for security and approximate geolocation of QR scans
- Device Type & Browser: Used for service optimisation
- Scan Events: When your QR tag is scanned, we log the timestamp, approximate location (city level), and device type
- Cookies: Session cookies for login management. No advertising cookies.
Information We Do NOT Collect
- We do not collect sensitive personal data such as religious beliefs, political views, biometric data, or financial account details
- We do not sell, rent, or share personal data with advertisers
- We do not collect data from children under the age of 13
03.How We Use Your Information
- To create and maintain your RaabtaQR profile page and privacy layer
- To process and fulfill your product orders
- To send you order confirmations and delivery updates via WhatsApp or email
- To enable masked contact between QR scanners and tag owners
- To maintain scan history logs for your dashboard
- To improve our website, app, and services through analytics
- To prevent fraud, abuse, and security threats
- To comply with applicable laws and regulations
- To respond to your customer support requests
Legal Basis (GDPR): We process your data based on (a) contract performance — to deliver the service you purchased, (b) legitimate interest — to improve our services and prevent fraud, and (c) consent — where you have explicitly agreed.
04.Data Storage & Security
All personal data is stored on secure, encrypted servers. We apply industry-standard security measures including:
- AES-256 encryption for stored personal data including phone numbers
- SSL/TLS encryption for all data in transit
- OTP-protected access for sensitive documents
- Role-based access control — only authorised staff can access customer data
- Regular security audits and vulnerability assessments
Our infrastructure is hosted on GDPR-compliant servers. Data may be processed in Pakistan and/or within EU/EEA-compliant cloud infrastructure.
⚠️ Despite best efforts, no system is 100% secure. If you believe your account has been compromised, contact us immediately at raabtaqr@gmail.com.
05.Cookies & Tracking
RaabtaQR uses the following types of cookies:
- Essential Cookies: Required for login sessions and core functionality. Cannot be disabled.
- Analytics Cookies: Used to understand how visitors use our website (e.g., Google Analytics). You may opt out.
- No Advertising Cookies: We do not use tracking pixels, advertising cookies, or third-party ad networks.
You may disable cookies through your browser settings. Note that disabling essential cookies may affect your ability to use the dashboard.
For more on managing cookies, visit your browser's help documentation: Chrome, Firefox, Safari, or Edge.
06.Third-Party Services
We use the following third-party services. Each has its own privacy policy:
- Twilio: For masked call and SMS forwarding (Pro Masking subscribers). Subject to Twilio's Privacy Policy.
- WhatsApp / Meta: Contact facilitation via WhatsApp links. We use only the wa.me link system — no WhatsApp API data is stored by us.
- EasyPaisa / JazzCash: Payment processing. We do not store your payment credentials — they are processed directly by the payment provider.
- Supabase / Hosting Providers: Database and file storage, operating under applicable data protection standards.
- Google Analytics (optional): Website analytics. You may opt out at tools.google.com/dlpage/gaoptout.
We do not allow third parties to use your data for their own advertising or marketing purposes.
07.Your Rights — GDPR (EU & UK)
If you are located in the European Union or United Kingdom, you are protected by the General Data Protection Regulation (GDPR) and/or the UK GDPR. You have the following rights:
- Right of Access: Request a copy of all personal data we hold about you
- Right to Rectification: Correct any inaccurate or incomplete data
- Right to Erasure ("Right to be Forgotten"): Request deletion of your data, subject to legal obligations
- Right to Restrict Processing: Limit how we use your data under certain circumstances
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for direct marketing
- Rights related to automated decision-making: We do not use automated decision-making that significantly affects you
To exercise any of these rights, contact us at raabtaqr@gmail.com. We will respond within 30 days.
If you are unsatisfied with our response, you may lodge a complaint with your national Data Protection Authority (e.g., ICO in the UK, or your local EU DPA).
08.Your Rights — CCPA (California, USA)
If you are a California resident, you are protected under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). You have the right to:
- Know: Request disclosure of the categories and specific pieces of personal data we have collected about you
- Delete: Request deletion of your personal data, subject to certain exceptions
- Opt-Out of Sale: We do not sell personal information. This right is automatically satisfied.
- Non-Discrimination: We will not discriminate against you for exercising any CCPA rights
- Correct: Request correction of inaccurate personal information
To submit a CCPA rights request, email raabtaqr@gmail.com with the subject line "CCPA Rights Request". We will respond within 45 days.
09.Pakistan Data Protection
RaabtaQR is a Pakistani company registered and operating in Pakistan. We comply with applicable Pakistani law including the:
- Pakistan Electronic Crimes Act 2016 (PECA): We do not facilitate cybercrime or unauthorised data access
- Personal Data Protection Bill (PDPB): We apply the principles of this pending legislation proactively, including data minimisation, purpose limitation, and security obligations
- Prevention of Electronic Crimes Act: All data processing activities are lawful and transparent
Pakistani customers may contact us at any time to access, correct, or delete their personal data. We aim to respond to all requests within 14 days.
For any disputes arising in Pakistan, the courts of Rawalpindi, Punjab shall have jurisdiction.
10.Gulf Countries (UAE, Saudi Arabia, Qatar, Kuwait)
For users in Gulf Cooperation Council (GCC) countries, we acknowledge and respect the following applicable regulations:
- UAE Federal Decree-Law No. 45 of 2021 (Personal Data Protection Law — PDPL): We process UAE residents' data lawfully, transparently, and for specified purposes only. UAE residents have the right to access, correct, and delete their data.
- Saudi Arabia Personal Data Protection Law (PDPL 2021): We comply with KSA data localisation and processing standards where applicable. Saudi residents may request data access, correction, or deletion at any time.
- Qatar Law No. 13 of 2016 (Personal Data Privacy Protection): We respect the privacy rights of Qatari residents and process their data in accordance with this law.
- Kuwait Law No. 20 of 2014: Kuwaiti users retain rights over their personal data under applicable Kuwaiti legislation.
GCC residents may exercise their rights by contacting raabtaqr@gmail.com. We will respond within 30 days.
11.Children's Privacy
RaabtaQR services are intended for users aged 18 and above. We do not knowingly collect personal data from children under the age of 13 (or under 16 in the EU/UK).
If you believe a child has provided personal data to us without parental consent, please contact us immediately at raabtaqr@gmail.com. We will promptly investigate and delete any such data.
12.Data Retention
We retain your personal data for as long as necessary to provide our services and comply with legal obligations:
- Active account data: Retained for the duration of your account plus 2 years after closure
- Order records: Retained for 7 years for accounting and legal compliance
- Scan logs: Retained for 1 year, then anonymised
- Deleted accounts: Data permanently deleted within 30 days of deletion request, except where legal retention is required
13.Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via WhatsApp message or email (if provided), and by posting the updated policy on this page with a revised "Last Updated" date.
Continued use of RaabtaQR services after a policy update constitutes acceptance of the updated terms.
14.Contact Us
For any privacy-related questions, requests, or complaints:
Pakistan