1 Introduction

Welcome to AFTER PAY ("we", "our", or "us"). We are a mobile phone e-commerce platform operating in Pakistan that offers Buy Now, Pay Later (BNPL) installment options for mobile phones.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the AFTER PAY mobile application ("App") or our website. By using our services, you agree to the practices described in this policy.

2 Information We Collect

2.1 Information You Provide

• Identity Information: Full name, as provided during checkout
• Contact Information: Phone number and email address
• Delivery Address: Street address, city, and province for order delivery
• Payment Information: Payment method selection (COD, JazzCash, EasyPaisa); we do not store full card numbers
• Order Information: Products ordered, quantities, prices, and order status

2.2 BNPL (Buy Now, Pay Later) Documents

If you apply for our installment plan, we may collect:

• CNIC (National Identity Card) front and back images
• Tasdeeq App verification screenshot
• Bank cheque image
• 3-month bank statements

2.3 Automatically Collected Information

• Device type, operating system version, and device identifiers
• App usage data (screens visited, features used)
• IP address and approximate location (city-level only)
• Crash reports and performance data to improve the App

3 How We Use Your Information

We use your personal information for the following purposes:

• Processing and delivering your orders
• Communicating order confirmations, status updates, and delivery notifications
• Processing payments and verifying transactions
• Evaluating BNPL installment plan applications
• Providing customer support and responding to your enquiries
• Improving our App, product listings, and services
• Sending promotional offers (only with your consent)
• Preventing fraud and ensuring the security of our platform
• Complying with legal and regulatory obligations

4 How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your data only in these limited circumstances:

4.1 Service Providers

• Delivery Partners: Your name, address, and phone number are shared with courier services to fulfil your order
• Payment Processors: JazzCash and EasyPaisa process payments on our behalf under their own privacy policies
• Cloud Infrastructure: Our servers are hosted on secure cloud infrastructure providers

4.2 Legal Requirements

We may disclose your information if required by Pakistani law, a court order, or government authority, or to protect the rights, property, or safety of AFTER PAY, our users, or the public.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction. You will be notified before your data becomes subject to a different privacy policy.

5 Data Storage and Security

We take the security of your personal information seriously:

• All data is stored in encrypted, secure databases
• Sensitive payment transactions use industry-standard SSL/TLS encryption
• Admin access to user data requires two-factor authentication (OTP)
• BNPL documents are stored with restricted access and automatic deletion after review
• We conduct regular security audits of our systems

While we implement strong security measures, no digital system is 100% immune from security breaches. We will notify affected users promptly if a breach occurs.

6 Data Retention

• Order Records: Retained for 7 years for tax and legal compliance
• Account Information: Retained as long as you use the App; deleted within 30 days of account closure request
• BNPL Documents: Retained for 6 months after application review, then securely deleted
• Analytics Data: Retained in aggregated, anonymised form indefinitely

7 Your Rights

You have the following rights regarding your personal data:

• Right to Access: Request a copy of all personal data we hold about you
• Right to Correction: Ask us to correct inaccurate or incomplete data
• Right to Deletion: Request deletion of your data (subject to legal retention requirements)
• Right to Withdraw Consent: Opt out of marketing communications at any time
• Right to Data Portability: Request your data in a machine-readable format

To exercise any of these rights, contact us at support@afterpay.pk. We will respond within 14 working days.

8 Children's Privacy

Our App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately and we will delete the data.

Users between 13 and 18 must have parental or guardian consent before using BNPL installment services.

9 Third-Party Links and Services

Our App may contain links to third-party websites or integrate with third-party payment services. This Privacy Policy applies only to AFTER PAY. We are not responsible for the privacy practices of third-party services.

Third-party services integrated in our App:

• JazzCash (Payment) – governed by JazzCash Privacy Policy
• EasyPaisa (Payment) – governed by EasyPaisa Privacy Policy

10 Cookies and Tracking

Our mobile App does not use browser cookies. We use local device storage (AsyncStorage) to save your cart, wishlist, and preferences locally on your device. This data never leaves your device unless you place an order.

11 Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Post the updated policy on this page with a new "Last Updated" date
• Notify users through the App or via email for significant changes

Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

12 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: