Privacy Policy

We at Asaan Retail respect your privacy and are committed to transparent privacy practices. This “Privacy Policy” describes how we collect, use and share personal information provided to us or otherwise collected by us, including in connection with your use of our website and our services (collectively, the “Services”), and what choices you have concerning the information.

We’ve updated this Privacy Policy version to reflect data protection law changes. In addition, we have worked to make the Privacy Policy clearer and more understandable.

When we refer to “Asaan Retail,” we mean the Asaan Retail entity that acts as the controller or processor of your information, as explained in more detail in the “Types of information collected” section below.

This Privacy Policy applies to (i) any person with a registered account on our Services (a “Customer”) and (ii) those who use the services of a Customer (as an “End User”), for example, placing an order through the e-commerce store of a Customer. Collectively, we refer to these persons as “Users.”

1. Types of "Personal Data" Collected

Data protection laws in certain jurisdictions, like the European Economic Area (EEA), differentiate between “controllers” and “processors” of personal information. A controller decides why and how to process “Personal Data.” A processor processes personal information on behalf of a controller based on the controller’s instructions.

When Asaan Retail handles personal information, we will act as a controller with respect to its Customers in most cases and as a processor in the case of End Users.

• At account creation, we collect information required for account setups, such as your name, company information, shipping address, billing address, email address, phone number, and password.
• Through our services, “Personal Data” such as information about your company, inventory, product details, invoices, orders, shipping information, and customer details are captured and stored.
• We collect contact information and marketing preferences when you reach out to us for support, give us feedback, or participate in events.

2. How we use your "Personal Data"

The use of “Personal Data” is required to provide Asaan Retail’s services. For Customers, Asaan Retail is the data controller for the “Personal Data” needed to set up the Asaan Retail service. For End-Users, Asaan Retail is the data processed for the “Personal Data” we capture about order information, shipping address, and contact information to allow End User orders to be fulfilled and reported.

• To comply with applicable laws, court orders, and government and law enforcement agencies’ requests.
• To send you further information about our services for which we think you may be interested, where it is lawfully permitted.
• With your consent, we will send you further information about our services based on a request we have received from you.
• We aggregate and anonymize your “Personal Data” and use and use this anonymized data for data analytics, product development, and improving our Services for lawful business purposes.

3. How do we share "Personal Data"

We may share data with the third parties that include:

• our subsidiaries and affiliates for purposes consistent with this Privacy Policy;
• Courts, tribunals, regulatory authorities, and law enforcement officers as required by law, in connection with any actual or prospective legal proceedings or to establish, exercise, or defend our legal rights;
• Third parties, including agents or sub-contractors, assist us in providing you with information, products, services, or direct marketing; this may include parties located, or that store data, outside of Pakistan.
• Suppose there is a change of control of our business or a sale or transfer of business assets. In that case, we reserve the right to transfer our user databases and any Personal and non-Personal Information contained in those databases to the extent permissible by law. This information might be disclosed to a potential purchaser.

4. Your Rights

Under certain circumstances, and where we act as data controllers, by law, you have the right to:

• Request access to your personal information (commonly known as a “data subject access request”); this enables you to receive a copy of the “Personal Data” we hold about you and to check that we are lawfully processing it.
• Request correction of the “Personal Data” that we hold about you; this enables you to have any incomplete or inaccurate information we hold about you corrected.
• Request erasure of your “Personal Data”; this enables you to ask us to delete or remove “Personal Data” where there is no legal basis for us continuing to process it. You also have the right to ask us to delete or remove your “Personal Data” where you have exercised your right to object to processing (see below).
• Object to processing your “Personal Data”; you also have the right to object to where we are processing your “Personal Data” for direct marketing purposes.
• Object to automated decision-making, including profiling that is not subject to automated decision-making by us using your “Personal Data” or your profiling.
• Request the restriction of processing of your “Personal Data”; this enables you to ask us to suspend the processing of “Personal Data” about you, for example, if you want us to establish its accuracy or the reason for processing it.
• Request transfer of your personal information in an electronic and structured form to you or to another party (commonly known as a right to “data portability”); this enables you to take your data from us in an electronically useable format and to be able to transfer your data to another party in an electronically useable format.

We may sometimes provide links on our Website to third-party websites, including those owned or managed by our partner networks, affiliates or advertisers. These websites have separate privacy policies, and we cannot accept any responsibility for the content.

Should you be dissatisfied with how we handle your “Personal Data,” you may complain to [email protected] or the data protection regulator in your jurisdiction.

5. How long do we keep your "Personal Data"

“Personal Data” shall be processed and stored for as long as required by the purpose they have been collected for or until consent is withdrawn.

When determining the appropriate length of time for retention, multiple factors are taken into account, including the nature and sensitivity of the personal information and the purpose the information is required.

6. Security

Data security is of the utmost importance to Asaan Retail and its Users. We provide technical and organizational security controls to protect your information. However, while we will do all our power to prevent it, we cannot guarantee the impossibility of unauthorized access, hacking, data loss, or a data breach.

7. Changes to this Policy

If at any time we make a change to this privacy notice, we will update this page to reflect such change. Where we feel it appropriate, we will notify you by email; however, we recommend you review this page periodically to ensure you remain happy with the latest version.

8. Getting in Touch

We welcome any questions or comments about this privacy policy and advise you to send any such communication to [email protected].

9. Changes to Our Privacy Policy

If at any time we make a change to this privacy notice, we will update this page to reflect such change. Where we feel it appropriate, we will notify you by email; however, we recommend you review this page periodically to ensure you remain happy with the latest version.