Privacy Policy

1. Introduction & Commitment

Badal Lo (Private) Limited ("Badal Lo", "we", "us", or "our"), having its registered head office at Gulberg Center, Main Boulevard, Gulberg III, Lahore, Pakistan, respects your privacy and is firmly committed to protecting your personal data.

This Privacy Policy describes how we collect, store, utilize, and safeguard your personal information when you interact with our mobile application and public web portal at www.badallo.com.

2. Information We Collect

We collect information necessary to deliver our multi-module fashion marketplace safely:

• Account Registration Data: Your name, Pakistani mobile phone number (used for SMS OTP verification), email address, and profile preferences.
• Delivery & Logistics Details: Shipping address, delivery landmark, city, and contact telephone number shared with courier dispatch riders.
• Wardrobe Listings & Media: Photos, videos, brand tags, sizing, condition ratings, and price information of dresses you submit for exchange, rental, auction, or sale.
• Identity Verification for High-Value Sellers: For sellers handling high-value luxury occasion wear or withdrawing funds above regulatory thresholds, we may verify Computerized National Identity Card (CNIC) details in compliance with State Bank of Pakistan Anti-Money Laundering (AML) / Know Your Customer (KYC) guidelines.
• Device & Usage Information: Device model, operating system version, unique device identifiers, IP address, app crash diagnostics, and push notification tokens.

3. Payment & Banking Data (PayFast Compliance)

Badal Lo does NOT store, log, or have access to your full credit/debit card numbers, CVV/CVC codes, or banking passwords.

All electronic card transactions and digital wallet payments are securely redirected to and processed by our licensed Payment Service Provider, Premier Systems (Pvt) Ltd (PayFast), authorized by the State Bank of Pakistan under Payment Systems and Electronic Fund Transfers Act.

PayFast operates in full compliance with Payment Card Industry Data Security Standards (PCI-DSS Level 1) and utilizes 256-bit TLS bank-grade encryption. Badal Lo receives only tokenized transaction confirmation IDs to unlock orders and credit wallet balances.

4. How We Use Your Information

We use your collected personal data strictly for operational, customer service, and security purposes:

• To process purchases, rental bookings, dress-to-dress matches, and auction bids.
• To generate shipping waybills and coordinate courier pickup and drop-off.
• To verify account authenticity and prevent fraudulent or duplicate listings.
• To transmit real-time in-app notifications regarding order status, exchange matches, and auction outbid alerts.
• To provide customer support and mediate transaction disputes.

5. Sharing with Courier & Trusted Partners

We do not sell, rent, or trade your personal data to third-party marketers. We share minimal necessary information only with:

• Partnered Couriers: Recipient name, address, and mobile number are provided to licensed courier services (e.g., Trax, TCS, Leopard Courier) solely for package delivery.
• Law Enforcement: We may disclose information if required by competent Pakistani courts, the Federal Investigation Agency (FIA), or regulatory authorities under applicable statutory law.

6. Data Security & Encryption

We implement rigorous organizational, physical, and digital safeguards. All communication between your mobile app and our servers is encrypted using Transport Layer Security (TLS 1.3). Sensitive database records are protected with AES-256 encryption at rest, and access is restricted exclusively to authorized security personnel.

7. Data Retention Policy

We retain personal data as long as your Badal Lo account remains active and as required to satisfy taxation, financial accounting, and regulatory record-keeping requirements under Pakistani law (typically five years for financial transaction histories).

8. User Rights & Account Deletion

In accordance with Google Play and Apple App Store data governance policies, users possess full authority over their personal data:

• Profile Update: You may edit your profile information at any time within the Badal Lo mobile app under Profile → Edit Account.
• Account Deletion: You may request complete deletion of your account, active listings, and personal data at any time via the in-app settings or via our public Account Deletion Request Portal without needing to log in.

9. Minors & Children's Privacy

Badal Lo is not intended for individuals under the age of 18 without parental consent. We do not knowingly collect personal data from children under 13 years of age. If we learn such data has been collected, we promptly remove it.

10. Policy Updates & Notifications

We may update this Privacy Policy from time to time. When significant changes occur, we will notify you through an in-app banner or via SMS/email prior to the effective date.

11. Data Protection Officer Contact

If you have questions, inquiries, or privacy requests regarding your personal information: