Privacy Policy — bechly.pk

01 Information We Collect

Under PDPB 2023, we collect only the minimum personal data necessary to provide our services (data minimisation). This includes: Account Info (name, phone, email, city); Listing Data (title, photos, price, description); Usage Data (pages visited, search queries); Device Data (IP address, browser, OS, push notification token); and Communication (chat messages between users).

Data Type	Examples	Basis
Account Info	Name, phone, email, city	Contract
Listing Data	Title, photos, price, description	Contract
Usage Data	Pages visited, search queries	Legitimate interest
Device Data	IP address, browser, OS, push notification token	Security / Legal
Communication	Chat messages between users	Contract

02 How We Use Your Information

To create, maintain, and operate your account

To display your listings to potential buyers across Pakistan

To facilitate messaging between buyers and sellers

To send transactional notifications (listing status, replies)

To detect and prevent fraud, scams, and prohibited content

To comply with legal obligations under PECA 2016 and Pakistani law

To improve Platform performance and user experience

03 Information Sharing

We never sell your personal data to third parties.

Other users (public data)

Your listing details, display name, and city are publicly visible. Your phone number is only revealed when you click "Show Phone Number".

Trusted service providers

On the web, we use Google Analytics (Google LLC) for anonymised traffic analysis and Google AdSense for advertising. Google's Privacy Policy → In the mobile app, we use Google Sign-In for account authentication, OneSignal for push notification delivery and device token storage, Sentry for app crash and error diagnostics (the web backend does not use Sentry), the WhatsApp Business API for OTP delivery during phone verification, and the Google Maps Platform to power nearby-listing results — when you enable location access, your device's GPS coordinates are sent to Google to determine nearby listings. All processors operate under data processing agreements prohibiting independent use of your data.

Legal authorities

We disclose data when required by a valid court order, FIA directive, or PTA instruction under Pakistani law. We will notify you unless prohibited by law.

Business transfers

In the event of a merger or acquisition, your data would transfer subject to equivalent privacy protections.

04 Data Security

We implement technical and organisational security measures in line with PDPB 2023 requirements and industry best practices:

Passwords hashed with bcrypt — never stored in plaintext

HTTPS / TLS 1.3 encryption for all data in transit

Encrypted database storage for sensitive fields

Regular security audits and penetration testing

Breach notification within 72 hours per PDPB 2023 requirements

Strict role-based access — staff access only what is necessary

05 Cookies & Tracking

We use cookies and similar technologies to maintain your session, remember preferences, measure traffic with Google Analytics, and serve or measure ads with Google AdSense. We do not sell cookie data.

Essential

Session, CSRF token, auth state. Required for the site to function.

Preferences

City selection, UI preferences. Stored in localStorage.

Analytics & Advertising

Google Analytics (G-010LB0YFY2) collects anonymised page-view data. Google AdSense may set advertising cookies when ads are active.

06 Advertising & Google AdSense

We use third-party advertising companies to serve ads when you visit our website. These companies may use information about your visits to this and other websites to provide relevant advertisements about goods and services of interest to you.

Google AdSense

bechly.pk uses Google AdSense (Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA) to display advertisements. Google AdSense uses the DoubleClick cookie and similar tracking technologies to serve ads based on your prior visits to this site and other websites across the internet. The DoubleClick cookie enables Google and its partners to serve ads based on your visit to our site and/or other sites on the internet. You may opt out of interest-based advertising by visiting Google Ad Settings. Alternatively, you can opt out of a third-party vendor's use of cookies for interest-based advertising by visiting networkadvertising.org/optout.

Interest-Based Ads

Google uses cookies and device identifiers to show you ads that are relevant to your interests. These ads are served based on your browsing history across websites that use Google advertising products, not just bechly.pk. You can review and update your ad personalisation preferences at any time through Google Ad Settings.

Google Analytics

We use Google Analytics (tracking ID: G-010LB0YFY2) to collect anonymised usage data including pages visited, session duration, and general geographic location. This data helps us understand how visitors use our site so we can improve the experience. Google Analytics does not collect personally identifiable information and all data is processed in aggregate form. See Google's Privacy Policy for details.

What Data Advertisers May Collect

Third-party ad networks, including Google, may collect information such as your IP address, browser type, pages visited, time spent on pages, links clicked, and whether you clicked or viewed an ad. This information is used to measure ad effectiveness and to serve personalised advertising. We do not share your name, phone number, or email address with advertisers.

Your Opt-Out Options

You have the right to opt out of interest-based advertising at any time. Visit adssettings.google.com to manage Google ad personalisation, or optout.networkadvertising.org for broader network opt-out. Note: opting out means you will still see ads, but they will not be tailored to your interests.

For more information about how Google uses data when you use Google's partners' sites or apps, see How Google uses information from sites or apps that use our services.

07 Data Retention

Active account data Retained while your account is active

In-app deletion Account and personal data deleted immediately upon confirmation

Web form deletion request Processed within 7–30 days of submission

Transaction/chat logs Retained for 2 years for fraud investigation purposes

Server/access logs 90 days, then permanently deleted

Legal hold data Retained as required by Pakistani court order or FIA directive

08 Account & Data Deletion

You can permanently delete your Bechly account and associated personal data at any time using either method below.

Delete in the app

Go to Account → Settings → Delete Account and confirm. Your account is deleted immediately and you are logged out.

Request via web form

Submit the Account Deletion Request form at bechly.pk/delete-account. Requests are processed within 7–30 days. No app access required.

Data deleted when your account is removed:

Profile information (name, phone number, email address, profile photo)
All listings you posted
Listing photos and videos
Chat conversations and messages
Saved / favourite ads
Login sessions and access tokens
OTP and phone verification records

Data that may be retained: Some records (backups, security logs, audit records, fraud-prevention data) may be retained for a limited period where required for legal, security, fraud prevention, or compliance purposes. Retained records are not linked to your identity wherever possible.

09 Your Rights under PDPB 2023

Pakistan's Personal Data Protection Bill 2023 grants you the following rights as a data subject:

Right of Access

Request a copy of all personal data we hold about you.

Right to Rectification

Correct inaccurate or incomplete personal data via Account Settings.

Right to Erasure

Delete your account instantly in the app, or submit a deletion request via our web form at bechly.pk/delete-account.

Right to Portability

Receive your data in a machine-readable format.

Right to Object

Object to processing based on legitimate interest.

Right to Withdraw Consent

Withdraw consent for non-essential processing at any time.

To exercise any of these rights, contact us. We will respond within 30 days.

10 Children's Privacy

Bechly is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child has provided personal data, please contact us so we can review and remove it. If we discover we have collected data from a person under 13, it will be deleted immediately and the matter referred per PECA 2016 § 19 if applicable.

11 Changes to This Policy

We may update this Privacy Policy to reflect changes in law or our practices. Material changes will be notified via a banner on the Platform at least 14 days before they take effect. Continued use after that date constitutes acceptance.

12 Contact & Data Controller

bechly.pk

📍 Lahore, Punjab, Pakistan

📧 support@bechly.pk

Regulatory Authority

Privacy complaints may be escalated to:

PTA — pta.gov.pk

FIA NR3C — nr3c.fia.gov.pk

Helpline: 0800-02345