1. Information we collect
Depending on the features you use we collect identity and contact information such as your name; email address; phone number; profile image; and saved addresses. Google sign-in provides verified account details and a provider identifier. We do not need to retain your raw Google identity token after server-side validation.
We also process order; cart; favourite; review; rental-booking; delivery-request; lucky-draw; notification; and support information. Business users may provide registration details and verification documents. Payment providers return transaction references and status information; Chitral Market should not receive full wallet or card credentials.
2. Device and usage information
We may collect app version; device and push-notification identifiers; IP address; security events; request identifiers; and diagnostic information. These records help deliver notifications; prevent abuse; investigate failures; and maintain service reliability.
3. How information is used
- Provide and secure accounts; profiles; addresses; and authentication.
- Process orders; bookings; delivery requests; draw entries; reviews; and business verification.
- Send transactional updates; announcements; rewards; and offers according to channel preferences and legal requirements.
- Calculate marketplace activity; improve relevance; operate support; prevent fraud; and enforce platform rules.
- Meet legal; accounting; audit; and dispute-resolution obligations.
4. When information is shared
We share only what is reasonably required for a transaction. A fulfilling store receives its own order and delivery details. A rental provider receives its booking details. Delivery operations receive the sender and recipient details needed to fulfil a request. We may use contracted hosting; email; push; image-storage; analytics; and payment providers subject to appropriate safeguards.
Information may also be disclosed where required by law; to protect users and the platform; or as part of a business reorganisation with appropriate notice and protection. We do not sell personal information.
5. Storage; security; and retention
We use access controls; encryption where appropriate; password hashing; audit records; and operational monitoring. No internet service can promise absolute security. Records are retained only as long as needed for the stated purpose; legal obligations; fraud prevention; or dispute handling. Verification documents and financial records may require different retention periods.
6. Your choices and rights
You may update your profile and addresses; manage optional notification channels; and request account deletion through the app. Some transaction; audit; security; or legal records may be retained or de-identified after deletion. Depending on applicable law you may request access; correction; deletion; restriction; or a copy of your personal information.
7. Children; changes; and contact
Chitral Market is not directed to children who cannot lawfully consent to data processing. We may update this policy as features; providers; and legal requirements change. Material updates will be communicated through an appropriate channel. Privacy questions or requests may be sent to the contact address published in the app or site footer.