Legal
Privacy Policy
Introduction & Scope
At Dhundo ("we," "our," "us," or the "Company"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you access or use our website, mobile applications, and services (collectively, the "Platform").
This Privacy Policy applies to all users of the Platform, including visitors, registered users, and subscribers. By accessing or using our Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Platform.
This Privacy Policy should be read in conjunction with our Terms of Service, which govern your use of the Platform. Capitalized terms not defined in this Privacy Policy have the meanings given to them in our Terms of Service.
Information We Collect
We collect several types of information from and about users of our Platform:
2.1 Personal Information
Information that identifies you as an individual, including:
- Identity Data: Full name, username, and profile information
- Contact Data: Email address, phone number, and mailing address
- Financial Data: Payment card details, billing address, and transaction history (processed securely through our payment providers)
- Account Data: Login credentials, account preferences, and subscription information
2.2 Usage Information
- Search queries and browsing history within the Platform
- Features accessed and actions taken
- Interactions with the Dhundo Strategist AI assistant
- Time spent on pages and click patterns
- Preferences and settings configurations
2.3 Technical Data
- IP address and geolocation data
- Browser type, version, and language settings
- Operating system and device information
- Unique device identifiers
- Session data and access timestamps
- Referring URLs and exit pages
2.4 Cookies and Tracking Technologies
We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing activities. These technologies help us analyze trends, administer the Platform, track user movements, and gather demographic information. You can control cookies through your browser settings, though disabling them may affect Platform functionality.
How We Collect Information
We collect information through multiple channels:
3.1 Direct Collection
- When you create an account or register for our services
- When you complete forms, surveys, or profile information
- When you contact our customer support team
- When you subscribe to newsletters or marketing communications
- When you make purchases or payment transactions
3.2 Automated Collection
- Through cookies and tracking technologies as you navigate the Platform
- Through server logs that automatically record technical data
- Through analytics tools that monitor Platform usage patterns
3.3 Third-Party Sources
- From payment processors when you complete transactions
- From analytics providers such as Google Analytics
- From social media platforms if you choose to link accounts
- From our e-commerce partners (Amazon, eBay, Walmart, Target) when displaying product information
How We Use Your Information
We use the information we collect for the following purposes:
4.1 Service Delivery
- To provide, maintain, and improve our Platform and services
- To process searches and deliver personalized product recommendations
- To power the Dhundo Strategist AI with relevant insights
- To process transactions and manage subscriptions
4.2 Account Management
- To create and manage your user account
- To authenticate your identity and maintain security
- To provide customer support and respond to inquiries
- To send transactional communications (order confirmations, password resets)
4.3 Security and Fraud Prevention
- To detect, prevent, and respond to fraud, abuse, or security incidents
- To verify user identity through two-factor authentication
- To monitor and log security events
- To enforce our Terms of Service and policies
4.4 Product Improvement
- To analyze usage patterns and improve Platform functionality
- To train and improve our AI algorithms and recommendation systems
- To conduct research and develop new features
- To personalize your experience based on preferences
4.5 Communications
- To send promotional materials and marketing communications (with your consent)
- To notify you of updates, new features, or policy changes
- To respond to your comments, questions, and requests
4.6 Legal Compliance
- To comply with applicable laws, regulations, and legal processes
- To respond to lawful requests from public authorities
- To protect our rights, privacy, safety, or property
Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:
- Consent: Where you have given clear consent for us to process your personal data for specific purposes, such as marketing communications.
- Contractual Necessity: Where processing is necessary to fulfill our contractual obligations to you, such as providing the services you have subscribed to.
- Legitimate Interests: Where processing is necessary for our legitimate business interests, such as fraud prevention, security, and Platform improvement, provided these interests do not override your fundamental rights.
- Legal Obligations: Where we are required to process your data to comply with applicable laws and regulations.
Data Sharing & Disclosure
We may share your information in the following circumstances:
6.1 Service Providers
We engage trusted third-party companies and individuals to perform services on our behalf, including payment processing, data analytics, email delivery, hosting services, and customer support. These service providers have access to your personal data only to perform specific tasks and are contractually obligated to protect your information.
6.2 Legal Requirements
We may disclose your information if required to do so by law or in response to valid legal requests by public authorities, including law enforcement agencies, regulatory bodies, or courts of competent jurisdiction.
6.3 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your data.
6.4 Aggregated Data
We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you for research, analytics, or business purposes.
We do not sell your personal information. We do not rent, trade, or otherwise monetize your personal data to third parties for their marketing purposes without your explicit consent.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.
Retention Criteria
- Active Accounts: We retain account data for as long as your account remains active.
- Closed Accounts: Following account closure, we retain certain data for up to 3 years to comply with legal obligations and resolve disputes.
- Transaction Records: Financial and billing records are retained for 7 years as required by tax and accounting regulations.
- Security Logs: Security and access logs are retained for up to 12 months.
- Marketing Data: Marketing preferences are retained until you withdraw consent or unsubscribe.
When personal data is no longer required, we securely delete or anonymize it. Anonymized data may be retained indefinitely for analytical purposes.
Your Rights
Depending on your location and applicable laws, you may have the following rights regarding your personal data:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Correction: You can request that we correct inaccurate or incomplete personal data.
- Right to Deletion: You can request that we delete your personal data, subject to certain legal exceptions.
- Right to Restriction: You can request that we restrict the processing of your personal data under certain circumstances.
- Right to Data Portability: You can request to receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object: You can object to the processing of your personal data for direct marketing or based on legitimate interests.
- Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time.
To exercise any of these rights, please contact us at dhundo.pakistan@gmail.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.
Security Measures
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:
- Encryption of data in transit using TLS/SSL protocols
- Encryption of sensitive data at rest
- Secure, PCI-compliant payment processing
- Two-factor authentication options for user accounts
- Regular security assessments and penetration testing
- Access controls limiting data access to authorized personnel
- Security logging and monitoring for suspicious activities
While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you acknowledge that you provide your information at your own risk.
You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account. Please notify us immediately if you suspect unauthorized access to your account.
International Data Transfers
Your personal data may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction.
When we transfer personal data internationally, we implement appropriate safeguards to ensure that your data remains protected in accordance with this Privacy Policy, including:
- Standard contractual clauses approved by relevant authorities
- Data processing agreements with service providers
- Compliance with applicable data transfer frameworks
By using our Platform, you consent to the transfer of your information to countries outside your country of residence, including the United States, where our servers and service providers may be located.
Children's Privacy
Our Platform is not intended for children under the age of 16. We do not knowingly collect, solicit, or maintain personal data from anyone under 16 years of age. If you are under 16, please do not attempt to register for the Platform or send any personal information to us.
If we learn that we have collected personal data from a child under 16, we will promptly delete that information. If you believe we might have any information from or about a child under 16, please contact us at dhundo.pakistan@gmail.com.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last updated" date at the top of this Privacy Policy
- Post the revised Privacy Policy on our Platform
- Notify you via email or prominent notice on the Platform for significant changes
Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Dhundo Privacy Team
Email: dhundo.pakistan@gmail.com
Address: Plot No.24 -B Street No.6, Sector H-9/1, Islamabad, Pakistan.
We will make every effort to resolve your concerns promptly. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.