PRIVACY POLICY

Taqqsit Platform

This Privacy Policy ("Privacy Policy") is issued by IMPK (Private) Limited, a company incorporated under the laws of the Islamic Republic of Pakistan, registered with the Securities and Exchange Commission of Pakistan under number 0102550 ("Taqqsit", the "Company", "we", "us", or "our").

This Privacy Policy explains how we collect, use, store, disclose, and protect Personal Data in connection with the Taqqsit Platform and describes the choices available to you regarding your Personal Data. We are committed to processing Personal Data responsibly, transparently, and in accordance with Applicable Law.

By accessing or using the Taqqsit Platform, creating a Taqqsit Account, placing an Order, or otherwise interacting with us, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy should be read together with our Terms and Conditions, which can be found on this link.

1. Definitions

Capitalized terms used but not defined in this Privacy Policy shall have the meaning given to them in the Terms and Conditions.

Applicable Law: The laws of the Islamic Republic of Pakistan applicable to the processing of Personal Data, including the Prevention of Electronic Crimes Act, 2016, the Electronic Transactions Ordinance, 2002, and any data protection legislation as may be enacted or amended from time to time, together with any other law applicable to Taqqsit.

Authorized Retail Partner: Any retailer, telecommunication operator, electronics chain, point of sale, or other distribution partner authorized by Taqqsit to display Devices, receive Orders, deliver Devices, or assist with customer onboarding in connection with the Taqqsit Platform.

Customer or You: Any natural person who accesses or uses the Taqqsit Platform or who purchases, or requests to purchase, a Device from Taqqsit.

Device: Any mobile handset, smartphone, tablet, wearable device, electronic equipment, accessory, consumer electronic product, or any other product offered for sale by Taqqsit through the Taqqsit Platform from time to time.

Payment Service Provider: Any bank, payment gateway, mobile wallet operator, or other payment services provider through which Instalments or other amounts may be paid to Taqqsit.

Personal Data: Any information relating to an identified or identifiable natural person, including, without limitation, name, identification numbers, contact details, location data, online identifiers, and financial information.

Processing: Any operation performed on Personal Data, whether or not by automated means, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, combination, restriction, erasure, or destruction.

Taqqsit Platform: The software platform developed and operated by Taqqsit, including the Taqqsit App and any related website, through which Devices are listed, Orders are placed and managed, payments are processed, and customer support is provided.

Third Party: Any natural or legal person other than you and Taqqsit.

2. Scope of this Privacy Policy

This Privacy Policy applies to all Personal Data processed by Taqqsit in connection with:

• Your access to and use of the Taqqsit App and any related website;
• The creation and management of your Taqqsit Account;
• Orders, purchases of Devices, and the performance of Customer Agreements;
• Identity verification and fraud prevention;
• Payments and collections;
• Customer support and complaints handling;
• Communications between you and Taqqsit, whether electronic or otherwise; and
• Any other interaction between you and Taqqsit in connection with the Taqqsit Platform.

This Privacy Policy does not apply to the processing of Personal Data by Third Parties acting for their own purposes, including Authorized Retail Partners, Payment Service Providers, and Telecommunication Partners, whose own privacy policies govern such processing.

3. Personal Data We Collect

3.1 Information You Provide

We collect Personal Data that you provide to us directly, including:

• Full name and date of birth;
• Computerized National Identity Card (CNIC) number and copies, or such other identification documents as we may accept;
• Mobile number and email address;
• Residential and delivery addresses;
• Employment and income information, where required to assess your Order;
• Bank account, card, or mobile wallet details used to pay Instalments;
• Photographs or biometric data submitted for identity verification, where applicable;
• Any other information you provide when placing an Order, contacting customer support, or otherwise communicating with us.

3.2 Information Collected Automatically

When you use the Taqqsit Platform, we may automatically collect:

• IP address and approximate location derived from it;
• Device identifiers, including IMEI, device model, and operating system;
• Browser type and settings;
• App usage information, including pages viewed, features used, and session data;
• Cookies and similar technologies, as described in clause 12;
• Precise location data, only where you have enabled location services;
• Crash reports and diagnostic information.

3.3 Information Received from Third Parties

We may receive Personal Data about you from:

• Authorized Retail Partners involved in the display, sale, delivery, or handover of Devices;
• Payment Service Providers, including payment confirmations and transaction status;
• Telecommunication Partners, including verification of your mobile number and subscriber status;
• Identity verification providers, including verification results against official databases such as NADRA, where applicable;
• Fraud prevention and screening providers.

4. How We Use Your Personal Data

We process Personal Data for the following purposes:

• To create, manage, and secure your Taqqsit Account;
• To assess, accept, and process Orders and to conclude and perform Customer Agreements;
• To arrange the delivery or collection of Devices;
• To process payments, issue receipts, and manage Instalments and collections;
• To verify your identity and eligibility;
• To detect, prevent, and investigate fraud, misuse, and security incidents;
• To provide customer support and handle complaints and disputes;
• To operate, maintain, improve, and develop the Taqqsit Platform and our products and services;
• To comply with legal, regulatory, tax, and accounting obligations;
• To establish, exercise, or defend legal claims;
• To conduct internal analytics and reporting; and
• To send you marketing and promotional communications, subject to your consent where required by Applicable Law and to your right to opt out at any time.

We do not sell your Personal Data.

5. Aggregated and Anonymized Information

Taqqsit may aggregate, anonymize, or de-identify information so that it can no longer reasonably identify an individual. Such information does not constitute Personal Data and may be used and disclosed for analytics, research, product development, service improvement, statistical reporting, and other lawful business purposes without restriction under this Privacy Policy.

6. Identity Verification and Fraud Prevention

Before accepting any Order, and at any time thereafter, we may, directly or through Authorized Retail Partners or specialized Third Party providers, carry out identity verification and fraud prevention checks, which may include:

• Verification of your CNIC or other identification documents;
• Verification of your mobile number, including through your Telecommunication Partner;
• Biometric verification, where required or available;
• Screening against fraud prevention and watch lists, where required by Applicable Law; and
• Assessment of information relevant to your eligibility to purchase a Device on an instalment payment basis.

These checks are necessary for us to accept and perform your Order. If verification cannot be completed to our satisfaction, we may decline or cancel your Order in accordance with the Terms and Conditions.

7. Device Management Technology

Certain Devices may incorporate Device Management Technology. Where such technology processes Personal Data or technical information, such processing shall be carried out solely for the purposes described in this Privacy Policy and the applicable Customer Agreement.

8. Sharing of Personal Data

We may share Personal Data, on a need-to-know basis, with:

• Our employees, officers, and advisors bound by confidentiality obligations;
• Our affiliates and group companies, for the purposes described in this Privacy Policy;
• Authorized Retail Partners, to the extent necessary for the display, sale, delivery, or handover of Devices and customer onboarding;
• Payment Service Providers, to process payments and manage Instalments;
• Telecommunication Partners, to the extent necessary for verification and for services associated with the Device;
• Delivery Partners and logistics providers;
• IT, software, cloud hosting, and data storage providers;
• Identity verification and fraud prevention providers;
• Professional advisors, auditors, and insurers;
• Debt collection service providers, in accordance with the Customer Agreement and Applicable Law;
• Regulators, government authorities, courts, and law enforcement agencies, where required by Applicable Law or legal process; and
• Any actual or prospective purchaser or investor in connection with a merger, acquisition, restructuring, or sale of assets, subject to appropriate confidentiality safeguards.

We require Third Party service providers processing Personal Data on our behalf to implement appropriate confidentiality and security measures and to process Personal Data only in accordance with our instructions.

9. International Transfers

Personal Data may be stored or processed on servers located outside Pakistan, including where our service providers, affiliates, or group companies operate in other jurisdictions. Where Personal Data is transferred outside Pakistan, we take reasonable steps to ensure that it receives a level of protection consistent with this Privacy Policy and Applicable Law.

10. Data Retention

We retain Personal Data for as long as necessary to fulfil the purposes described in this Privacy Policy, including:

• For as long as your Taqqsit Account remains active;
• For the duration of any Customer Agreement and until the settlement of all Instalments and the issuance of any clearance;
• For such periods as required by legal, regulatory, tax, or accounting obligations; and
• For as long as reasonably necessary to establish, exercise, or defend legal claims.

When Personal Data is no longer required, we will delete it, anonymize it, or securely archive it in accordance with Applicable Law.

11. Security Measures

We implement administrative, technical, and organizational measures designed to protect Personal Data against unauthorized access, disclosure, alteration, loss, or destruction, including access controls, encryption where appropriate, and staff confidentiality undertakings.

However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for notifying us immediately of any suspected unauthorized use of your Taqqsit Account.

12. Cookies and Similar Technologies

The Taqqsit Platform may use cookies, software development kits, and similar technologies to operate the platform, remember your preferences, maintain sessions, analyze usage, enhance security, and improve our services. You may manage cookies through your browser or device settings; however, disabling certain cookies or technologies may affect the functionality of the Taqqsit Platform.

13. Your Rights

Subject to Applicable Law, you may:

• Request access to the Personal Data we hold about you;
• Request the correction or updating of inaccurate or incomplete Personal Data;
• Request the deletion of Personal Data, where it is no longer required for the purposes described in this Privacy Policy and where we are not required or entitled to retain it;
• Object to certain processing of your Personal Data; and
• Withdraw any consent you have given, without affecting the lawfulness of processing carried out before such withdrawal.

You may exercise these rights by contacting us using the details set out in clause 17. We may need to verify your identity before acting on your request, and we will respond within a reasonable period. Please note that certain requests may be limited where processing is necessary for the performance of a Customer Agreement, the settlement of outstanding Instalments, or compliance with Applicable Law.

14. Third-Party Websites

The Taqqsit Platform may contain links to websites, applications, or services operated by Third Parties. We are not responsible for the privacy practices or content of such Third Parties, and this Privacy Policy does not apply to them. We encourage you to review the privacy policies of any Third-Party websites or services you access.

15. Children’s Privacy

The Taqqsit Platform is intended solely for persons who are at least eighteen (18) years of age. We do not knowingly collect Personal Data from any person under eighteen (18) years of age. If we become aware that Personal Data of a person under eighteen (18) has been collected, we will take reasonable steps to delete such data and to close any associated account.

16. Changes to this Privacy Policy

We may amend or update this Privacy Policy from time to time for operational, legal, regulatory, or commercial reasons. Material changes shall be communicated through the Taqqsit Platform or by other appropriate means and shall become effective on the date specified in the notice. Continued use of the Taqqsit Platform after the effective date constitutes acceptance of the amended Privacy Policy.

17. Contact Information

For inquiries, requests, or complaints regarding this Privacy Policy or the processing of your Personal Data, please contact:

Email: support@taqqsit.pk
Address: IMPK (Private) Limited, Islamabad, Pakistan