Privacy Policy

1. Introduction

Saudagran (Private) Limited ("Saudagran," "we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including our website (saudagran.com), mobile applications, and related program (collectively, the "Platform").

By using Saudagran, you consent to the data practices described in this policy. If you do not agree, please do not use the Platform. This policy applies to all users: buyers, sellers, organizations, and visitors.

2. Data We Collect

We collect several types of information to provide and improve our program:

2.1 Information You Provide

• Account Data: Name, email address, phone number, business name, NTN/registration number, password.
• Profile Information: Business category, city, profile images, company description.
• Transactional Data: RFQ submissions, product listings, program descriptions, applications to organization programs.
• Communications: Messages, support tickets, inquiries, feedback, and survey responses.
• Payment Information: Billing details, subscription selections (processed via PCI-compliant third parties — we do not store full card numbers).

2.2 Automatically Collected Information

• Device & Browser Data: IP address, browser type, operating system, device identifiers.
• Usage Data: Pages visited, time spent, search queries, clicks, scroll behavior, and interactions.
• Location Data: Approximate location derived from IP address (city/country level).

2.3 Information from Third Parties

• verification Programs: Business registration details from SECP or other verification partners.
• Social Media: If you log in via Google or LinkedIn (with your consent).
• Analytics Providers: Aggregated usage patterns.

3. How We Use Your Data

We use collected information for the following purposes:

• Platform Operations: Create and manage accounts, process RFQs, facilitate transactions, enable messaging between users.
• Program Improvement: Analyze usage to enhance user experience, fix bugs, and develop new features.
• Communication: Send important notices (account updates, RFQ responses, application status), respond to support inquiries.
• Marketing (with consent): Send newsletters, promotional offers, platform updates (you may opt out at any time).
• Legal Compliance: Comply with applicable laws, respond to lawful requests, prevent fraud and abuse.
• Verification: Verify seller/organization credentials to display "Verified" badges.
• Personalization: Show relevant products, program, and RFQs based on your activity.

4. Data Sharing & Disclosure

We do not sell your personal data. We may share information in these limited circumstances:

• With Your Consent: When you explicitly authorize sharing (e.g., applying for an organization program shares your data with that organization).
• Seller : Third-party vendors who help us operate (hosting, analytics, payment processing, email delivery) under confidentiality agreements.
• Legal Requirements: If required by law, court order, or government regulation (e.g., tax authorities, SECP, FIA).
• Business Transfers: In case of merger, acquisition, or bankruptcy, your data may be transferred as an asset.
• Protection of Rights: To enforce our Terms, protect our property, or prevent harm to users.

When you apply for an organization program (scholarship, health aid, housing, etc.), your application data (name, CNIC, contact, documents) is shared directly with that organization for processing. Saudagran is not responsible for how organizations use that data — review their privacy practices separately.

5. Cookies & Tracking

We use cookies, web beacons, and similar technologies to enhance your experience. Types of cookies we use:

• Essential Cookies: Required for platform functionality (login, session management).
• Preference Cookies: Remember your settings (language, search filters).
• Analytics Cookies: Measure usage (Google Analytics, Mixpanel) — aggregated and anonymized.
• Marketing Cookies: For personalized ads (you can opt out via cookie banner).

You can control cookies via browser settings. However, disabling essential cookies may affect platform functionality.

6. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS 1.3) and at rest (AES-256).
• Regular security audits and penetration testing.
• Access controls: only authorized personnel can access sensitive data.
• Two-factor authentication (2FA) available for seller accounts.
• PCI DSS compliance for payment processing (via third-party processors).

While we strive for complete security, no transmission over the internet is 100% secure. You are responsible for safeguarding your password — do not share it.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data we hold.
• Correction: Update inaccurate or incomplete information.
• Deletion: Request deletion of your account and data (subject to legal retention).
• Objection: Opt out of marketing communications or certain data processing.
• Portability: Receive your data in a structured, machine-readable format.

To exercise these rights, contact us at privacy@saudagran.com. We will respond within 30 days. Identity verification may be required.

For Pakistani users: Under the Prevention of Electronic Crimes Act (PECA) 2016 and upcoming Personal Data Protection Bill, you have the right to lodge a complaint with the Pakistan Telecommunication Authority (PTA) if you believe your data has been mishandled.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide program. After account deletion, we may retain:

• Transactional records for 7 years (tax and legal compliance).
• RFQ history for 3 years (anonymized after 6 months).
• Chat logs for 12 months.
• Backup data for up to 90 days.

Anonymized or aggregated data (which cannot identify you) may be retained indefinitely for analytics.

9. Children's Privacy

Saudagran is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we discover that a minor has provided us with personal data, we will delete it immediately. If you are a parent and believe your child has used our platform, contact us.

Exception: Organization program applications (scholarships, training) may require eligibility of individuals under 18 — in such cases, parental consent is required, and organizations must comply with child protection laws.

10. International Data Transfers

Your information may be transferred to and processed in countries other than Pakistan, including servers located in the United States, Singapore, and the European Union. These transfers comply with applicable data protection laws via standard contractual clauses (SCCs) or adequacy decisions. By using Saudagran, you consent to such transfers.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified via:

• Email to your registered address (30 days before effective date).
• Prominent banner on the platform.

The "Last Updated" date at the bottom indicates when changes were made. Your continued use after changes constitutes acceptance of the revised policy.

12. Contact Us

For privacy-related questions, complaints, or to exercise your rights, please contact our Data Protection Officer (DPO):

Saudagran (Private) Limited – Data Protection Officer
Email: privacy@saudagran.com (for data subject requests)
Phone: +92 (21) 123 4567 (Mon-Fri, 10am-6pm PKT)
Address: DHA Phase 8, Karachi, Pakistan

Complaints: If you are unsatisfied with our response, you may lodge a complaint with the Pakistan Telecommunication Authority (PTA) or the relevant data protection authority in your jurisdiction.