Privacy policy.

MobileStorePK is owned and operated by MobileStorePK (Pvt.) Limited, a private limited company registered in Pakistan with its head office at Bahria Complex II, M.T. Khan Road, Civil Lines, Karachi 74000.

This Privacy Policy applies to all services provided under the MobileStorePK brand, including:

• The website at mobilestorepak.com and any regional or country variants
• The MobileStorePK mobile applications for Android and iOS
• The MobileStorePK Dealer Portal and verified dealer services
• SMS-based price alerts and email newsletters
• Any partner integrations explicitly branded as "MobileStorePK" or "Powered by MobileStorePK"

This policy does not apply to third-party websites or services we link to, even when those links appear within our properties. When you click an outbound link to a dealer, manufacturer, or news source, that destination operates under its own privacy policy, which we encourage you to review.

We collect information in three buckets: what you give us directly, what we observe as you use the service, and what we receive from trusted partners who help us operate.

2.1 Information you provide

2.2 Information we collect automatically

When you visit any MobileStorePK property, we automatically log standard technical information including: IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages viewed, time spent on each page, and approximate location derived from IP (typically accurate to city level).

We use this data to detect fraud, improve performance, and understand which content is most valuable to Pakistani buyers. We do not link IP-derived location to your account profile unless you've explicitly opted into hyperlocal price alerts.

2.3 Information from third parties

If you sign in using Google or Facebook, we receive your name, email address, and profile photo from those services. We never receive your password or any data beyond what's needed to authenticate you. You can disconnect these accounts at any time from your settings page.

We use the personal information we collect for the following specific purposes:

1. To provide the service: Maintain your account, save your wishlist and comparisons, deliver the price alerts you've subscribed to, and let you publish reviews.
2. To communicate with you: Send transactional emails (sign-in confirmations, password resets, alert notifications) and respond to support inquiries.
3. To prevent abuse: Detect fake accounts, spam reviews, automated scraping, and dealers attempting to manipulate ratings or pricing data.
4. To improve the product: Understand how features are used so we can fix what's broken and build what's missing. Aggregated, anonymized analytics only.
5. To comply with legal obligations: Respond to lawful requests from courts or regulators in Pakistan, retain financial records as required by tax law, and preserve evidence in disputes.

Your personal data is shared only in the following limited circumstances:

4.1 Service providers

We work with carefully selected vendors who help us operate the service. Each is contractually bound to use your data only for our defined purposes and to apply security standards equivalent to our own. Current providers include:

• Cloud hosting: AWS Asia Pacific (Singapore region) for primary infrastructure
• Email delivery: Postmark for transactional emails, Mailgun for newsletters
• SMS delivery: Jazz CashPlus and Telenor Pakistan for price alert SMS
• Analytics: Self-hosted Plausible Analytics (no third-party tracking)
• Payments (dealers only): 2Checkout for international dealer subscriptions, JazzCash for local payments

4.2 When publicly visible

When you publish a review, your display name, city, profile photo, ownership duration, and rating become publicly visible alongside your review content. Your email address, phone number, and full name are never displayed publicly.

4.3 Legal requirements

We will disclose information when required by Pakistani law — typically in response to a court order, a properly-issued summons, or a request from the Federal Investigation Agency (FIA) or Pakistan Telecommunication Authority (PTA) acting under valid legal authority. We notify affected users of such disclosures unless legally prohibited from doing so.

4.4 Business transfers

If MobileStorePK is acquired, merged, or undergoes a change of control, your information may be transferred to the new entity. You will be notified at least 30 days in advance and given the option to delete your account before any transfer takes effect.

We use a minimal set of first-party cookies and similar technologies:

We do not use Google Analytics, Facebook Pixel, advertising cookies, or any cross-site tracking technology. You can disable all non-essential cookies through your browser settings without losing access to the service — only the theme and currency preferences will reset on each visit.

Data retention periods are tied to specific purposes:

• Account data: Retained while your account is active. After deletion, fully purged within 30 days, except as required below.
• Reviews and public content: May remain visible after account deletion in anonymized form (display name removed, attribution shown as "Verified buyer"), unless you specifically request removal.
• Support correspondence: 24 months from the last interaction, for quality and dispute resolution.
• Server logs and security data: 90 days, then aggregated and anonymized.
• Financial records (dealers only): 7 years, as required under Section 174 of the Income Tax Ordinance, 2001 of Pakistan.

You have the following rights regarding your personal data, regardless of where you're located:

• Right to access: View all data we hold about you. Available as a one-click export from your settings page.
• Right to rectification: Correct inaccurate or incomplete data. Most fields are editable directly in your profile.
• Right to erasure: Delete your account and associated data. Available from the "Danger zone" of your settings page.
• Right to portability: Receive your data in a structured, machine-readable format (JSON). Available as one-click export.
• Right to object: Object to specific uses of your data, including marketing emails. Granular controls in notification settings.
• Right to restriction: Pause processing while a dispute is being resolved. Email us to invoke this right.

To exercise any of these rights, visit your account settings or email support@mobilestorepak.com. We respond within 7 business days.

We implement industry-standard security measures including:

• Transport encryption: TLS 1.3 for all connections to mobilestorepak.com
• At-rest encryption: AES-256 for stored personal data and AWS RDS-managed encryption for database content
• Password hashing: bcrypt with cost factor 12 (passwords are never stored in plaintext)
• Two-factor authentication: Available to all users via authenticator apps (TOTP)
• Access controls: Principle of least privilege; only senior engineers have production database access, all queries logged
• Regular audits: Annual third-party penetration testing and quarterly internal security reviews
• Incident response: Defined breach notification procedure; affected users notified within 72 hours of confirmed incidents

While we follow best practices, no system is 100% secure. If you suspect your account has been compromised, change your password immediately and email support@mobilestorepak.com.

MobileStorePK is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we may have collected information about your child, please contact support@mobilestorepak.com and we will delete it within 7 days.

For users between 13 and 17 in Pakistan, parental consent is required to publish reviews or maintain a public reviewer profile. We display reviewer profiles only after age verification at sign-up.

Your data is primarily stored on servers located in Singapore (AWS Asia Pacific region). Some service providers — particularly email delivery (Postmark, located in the United States) — process data outside this region.

Where data leaves Singapore, we ensure equivalent protection through Standard Contractual Clauses (SCCs) and only work with providers that meet GDPR-grade security and confidentiality standards. A list of all subprocessors is maintained at mobilestorepak.com/subprocessors and updated whenever it changes.

We may update this policy from time to time to reflect changes in our practices, technology, legal requirements, or for clarity. When we make material changes:

• We'll email all registered users at least 30 days before the change takes effect
• We'll display a notice at the top of the site for 60 days
• The previous version will remain accessible at mobilestorepak.com/legal/archive
• For non-material changes (typo fixes, link updates), we update the version number and "last updated" date silently

The current version is v3.2, last updated April 28, 2026. Major changes from v3.1: clarified subprocessor list, added explicit AI training opt-out commitment, simplified cookies section.

For privacy-specific questions or to exercise any of your rights:

• Email: support@mobilestorepak.com
• Postal mail: Data Protection Officer, MobileStorePK (Pvt.) Ltd., 3rd Floor Bahria Complex II, M.T. Khan Road, Civil Lines, Karachi 74000, Pakistan
• Phone: +92 21 3500-1234, Mon–Sat, 10:00–19:00 PKT

If you're not satisfied with our response, you have the right to lodge a complaint with the Federal Ombudsman of Pakistan or, if you reside in the EU/UK, your local data protection authority.