Privacy Policy — bechly.pk

01 Information We Collect

We collect only what we need to run Bechly: account details (name, phone, email, city); listing content; usage data (screens visited, searches); device data (IP, OS/app version, push token, and on mobile the advertising ID where allowed); chat messages; and advertising/analytics signals used to show and measure ads (see Advertising).

Data Type	Examples	Basis
Account Info	Name, phone, email, city	Contract
Listing Data	Title, photos, price, description	Contract
Usage Data	Pages visited, search queries	Legitimate interest
Device Data	IP address, browser, OS, push notification token	Security / Legal
Communication	Chat messages between users	Contract

02 How We Use Your Information

To create, maintain, and operate your account

To display your listings to potential buyers across Pakistan

To facilitate messaging between buyers and sellers

To send transactional notifications (listing status, replies)

To detect and prevent fraud, scams, and prohibited content

To comply with legal obligations under PECA 2016 and Pakistani law

To improve Platform performance and user experience

03 Information Sharing

We never sell your personal data to third parties.

Other users (public data)

Your listing details, display name, and city are publicly visible. Your phone number is only revealed when you click "Show Phone Number".

Trusted service providers

We use trusted providers such as Google (Analytics, AdMob in the mobile apps, Sign-In, Maps, Firebase), OneSignal, Sentry, and WhatsApp Business API (OTP). See Google's Privacy Policy. Location is sent to Google Maps only when you allow it for nearby listings.

Legal authorities

We disclose data when required by a valid court order, FIA directive, or PTA instruction under Pakistani law. We will notify you unless prohibited by law.

Business transfers

In the event of a merger or acquisition, your data would transfer subject to equivalent privacy protections.

04 Data Security

We implement technical and organisational security measures in line with PDPB 2023 requirements and industry best practices:

Passwords hashed with bcrypt — never stored in plaintext

HTTPS / TLS 1.3 encryption for all data in transit

Encrypted database storage for sensitive fields

Regular security audits and penetration testing

Breach notification within 72 hours per PDPB 2023 requirements

Strict role-based access — staff access only what is necessary

05 Cookies & Tracking

We use cookies and similar technologies to maintain your session, remember preferences, and measure traffic with Google Analytics. The website does not currently show third-party ads. We do not sell cookie data.

Essential

Session, CSRF token, auth state. Required for the site to function.

Preferences

City selection, UI preferences. Stored in localStorage.

Analytics

Google Analytics (G-010LB0YFY2) collects anonymised page-view data to help us improve the website.

06 Advertising

Bechly shows ads only in the mobile apps via Google AdMob to stay free. The website does not currently show ads. In-app ads are labelled (for example, Sponsored) so they are separate from marketplace listings.

In the apps, Google may use device identifiers (including the Advertising ID), IP address, app activity, and ad interactions to serve and measure ads. We do not share your name, phone number, or email with advertisers for targeting.

More from Google: partner sites & apps · Privacy Policy · Ad Settings (Android: Settings → Google → Ads). You may still see ads after turning off personalisation.

07 Data Retention

Active account data Retained while your account is active

In-app deletion Account and personal data deleted immediately upon confirmation

Web form deletion request Processed within 7–30 days of submission

Transaction/chat logs Retained for 2 years for fraud investigation purposes

Server/access logs 90 days, then permanently deleted

Legal hold data Retained as required by Pakistani court order or FIA directive

08 Account & Data Deletion

You can permanently delete your Bechly account and associated personal data at any time using either method below.

Delete in the app

Go to Account → Settings → Delete Account and confirm. Your account is deleted immediately and you are logged out.

Request via web form

Submit the Account Deletion Request form at bechly.pk/delete-account. Requests are processed within 7–30 days. No app access required.

Data deleted when your account is removed:

Profile information (name, phone number, email address, profile photo)
All listings you posted
Listing photos and videos
Chat conversations and messages
Saved / favourite ads
Login sessions and access tokens
OTP and phone verification records

Data that may be retained: Some records (backups, security logs, audit records, fraud-prevention data) may be retained for a limited period where required for legal, security, fraud prevention, or compliance purposes. Retained records are not linked to your identity wherever possible.

09 Your Rights under PDPB 2023

Pakistan's Personal Data Protection Bill 2023 grants you the following rights as a data subject:

Right of Access

Request a copy of all personal data we hold about you.

Right to Rectification

Correct inaccurate or incomplete personal data via Account Settings.

Right to Erasure

Delete your account instantly in the app, or submit a deletion request via our web form at bechly.pk/delete-account.

Right to Portability

Receive your data in a machine-readable format.

Right to Object

Object to processing based on legitimate interest.

Right to Withdraw Consent

Withdraw consent for non-essential processing at any time.

To exercise any of these rights, contact us. We will respond within 30 days.

10 Children's Privacy

Bechly is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child has provided personal data, please contact us so we can review and remove it. If we discover we have collected data from a person under 13, it will be deleted immediately and the matter referred per PECA 2016 § 19 if applicable.

11 Changes to This Policy

We may update this Privacy Policy to reflect changes in law or our practices. Material changes will be notified via a banner on the Platform at least 14 days before they take effect. Continued use after that date constitutes acceptance.

12 Contact & Data Controller

bechly.pk

📍 Lahore, Punjab, Pakistan

📧 support@bechly.pk

Regulatory Authority

Privacy complaints may be escalated to:

PTA — pta.gov.pk

FIA NR3C — nr3c.fia.gov.pk

Helpline: 0800-02345