Draft for review
Privacy Policy
This page describes the information the Pak Courier application collects and uses. It is a product draft for legal review before production use. It does not claim a certification, a fixed retention period, or a legal basis beyond what the software actually does.
Information the application collects
The data stored depends on which parts of the product you use. Public pages do not require an account. Creating an account, joining the waiting list, or submitting verification stores the fields those forms ask for.
Account and contact information
Registration stores your name, business name, email, mobile number, WhatsApp number, and password. The password is stored with Laravel’s password hashing, not as the original text. The waiting list stores a name, email, WhatsApp number, and how you heard about the platform. Those waiting-list entries are visible to Super Admin and are not published on the website.
Business verification
Verification can store a selfie, shop exterior and interior photos, CNIC images, an NTN document, business identity details, bank name, account holder, account number, IBAN, a signature, and the time and version of the terms you accept. A Super Admin can open those records while reviewing the account.
Shipments and transactions
Bookings store customers, sender and delivery details, COD amounts, weight, the selected courier, the courier charge, platform fee, net amount, consignment and tracking details, and status history. The wallet stores balances and ledger entries. Payout requests store the amount, status, and any transaction reference an administrator records.
How information is used
The application uses these records to create and show the account, decide whether booking and payouts are unlocked, book a shipment with an enabled courier, show charges and statuses, hold amounts through clearing, and let an administrator settle a payout. Waiting-list details are kept so the team can see who asked to be contacted. The contact form, when a support inbox is configured, emails the message to that inbox. It does not add a public contact database. When the inbox is not configured, the form does not send or store the message.
Sharing
A live courier booking sends the shipment details that courier integration requires to the courier configured for that booking. Leopards is the courier with a live adapter in this application. A mock driver does not call an external courier API. Administrators of this platform can view merchant, order, wallet, payout, and waiting-list records. The application does not include a feature that sells personal information to advertisers. Service providers that send mail or host the application can process the data needed for that role when those services are configured.
Retention
Account, verification, shipment, wallet, payout, and waiting-list records remain in the application while they are stored there. This draft does not set a deletion timetable. There is no self-service control that erases an account or a waiting-list entry.
Account security
Sign-in uses the account password and the application’s session. Password reset emails a link when mail delivery is configured and the account exists. This page does not claim a security certification or that stored documents cannot be accessed by an authorized administrator.
Requests
There is no separate privacy-request portal. When the contact form is open, you can send a question about your account through it. The form cannot delete records by itself. If the form is closed, the application is not receiving those messages.
Cookies and local storage
The application uses a session cookie to keep you signed in, a CSRF cookie to protect forms, and a theme preference cookie if you set a theme. The browser’s local storage also stores the theme preference used before the page finishes loading. No third-party analytics tool is included in the public website.
Changes
This draft is dated 29 October 2026. If the way the application collects or shares information changes, this page should be updated and reviewed before it is treated as the current notice.
Contact
No public email address or postal address is published here. Use the contact page only when it states that messages are being sent.