Privacy & Data Policy

Effective Date: October 2026

Platform URL: alosho.com

Privacy Office: support@alosho.com

At Alosho, respecting your privacy and protecting your personal data is a foundational commitment. This Privacy & Data Policy explains how Alosho ("we", "us", or "our") collects, uses, stores, processes, shares, and protects your information when you browse our platform, register an account, or purchase items through our digital applications and web storefronts.

This policy is formulated in strict accordance with the Prevention of Electronic Crimes Act (PECA 2016) and applicable digital governance and consumer protection standards in Pakistan.

1. INFORMATION WE COLLECT

We only collect data strictly necessary to facilitate smooth order fulfillment, ensure account security, and enhance customer experience.

1.1. Personal Identification & Contact Data:

  • Full legal name, delivery address, city, postal code, mobile phone number, and email address provided during registration or checkout.
  • Alternate contact details provided for courier delivery coordination.

1.2. Transactional & Order Records:

  • Details of items purchased, order history, transaction references, billing records, delivery preferences, and return/refund claim correspondence.

1.3. Payment Information (Non-Sensitive):

  • Payment method chosen (Cash on Delivery, Debit/Credit Card, Mobile Wallet, or 1Link/Raast).
  • We do not collect or store credit/debit card numbers, CVV codes, or bank account PINs. All payment tokenization is handled securely by licensed third-party payment processors.

1.4. Technical & Device Information:

  • Device model, operating system, unique device identifiers, IP address, browser type, location data (approximate city-level for courier routing), and interactions with our application screens or pages.

1.5. Customer Communications & Support:

  • Records of inquiries, chat transcripts, WhatsApp business interactions, and feedback submitted to our customer care team.

2. HOW WE USE YOUR INFORMATION

We process collected information solely for legitimate operational and business purposes, including:

  • Order Processing & Fulfillment: Verifying, packing, routing, and delivering orders to your designated location.
  • Customer Support & Communication: Providing real-time tracking updates, dispatch notices, OTP verifications, and addressing inquiries or return claims.
  • Fraud Prevention & Security: Monitoring platform integrity, authenticating high-value orders, mitigating bogus COD bookings, and preventing unauthorized account access.
  • Service Optimization: Analyzing browsing behavior and technical logs to improve app performance, platform speed, and catalog search relevance.
  • Legal & Regulatory Obligations: Complying with statutory tax reporting, financial auditing, and lawful requests from Pakistani regulatory authorities.

3. DATA SHARING & THIRD-PARTY DISCLOSURES

Alosho does not sell, rent, trade, or monetize your personal data to any third party for independent advertising or marketing purposes.

We disclose data only to trusted, contractually bound service partners under strict confidentiality agreements, strictly on a need-to-know basis:

3.1. Logistics & Courier Partners:

  • We share your name, delivery address, and phone number with authorized courier and shipping networks (e.g., PostEx, TCS, Speedaf, Trax) solely to execute doorstep delivery and reverse-pickup operations.

3.2. Licensed Payment Processors:

  • Transaction amounts and customer identifiers are securely transmitted to SBP-licensed payment gateways and acquiring banks to complete and reconcile digital card or wallet payments.

3.3. Cloud Infrastructure & Communications:

  • Encrypted customer databases and transactional messaging are hosted on secure, SOC-2 compliant cloud infrastructure and telecom SMS gateway providers for real-time dispatch alerts and OTP delivery.

3.4. Lawful Government Disclosures:

  • We may disclose personal data if required to do so by a competent court of law, law enforcement agency, or statutory body pursuant to valid legal process under the laws of the Islamic Republic of Pakistan (such as PECA 2016).

4. DATA SECURITY & STORAGE PROTOCOLS

4.1. Encryption Standards: All data in transit between your device and our servers is secured using modern TLS 1.3 / 256-bit SSL encryption. Data at rest within our databases is protected behind strict firewall architectures, role-based access restrictions, and continuous vulnerability monitoring.

4.2. Access Control: Only authorized operational personnel who need access to customer contact details to pack parcels, coordinate deliveries, or resolve customer complaints are granted restricted, logged access to personal information.

4.3. Data Retention: We retain personal information only for as long as necessary to fulfill the operational purposes outlined in this policy, manage warranties and returns, maintain statutory tax/financial records, and resolve potential disputes. Inactive account data is routinely archived or anonymized.

5. COOKIES & TRACKING TECHNOLOGIES

Alosho utilizes standard cookies and session tokens to:

  • Remember your session login state and items placed in your shopping bag.
  • Retain language and interface preferences.
  • Measure aggregate platform traffic and interaction metrics to identify system bottlenecks.

You can manage or disable cookies via your browser or mobile device settings; however, disabling certain functional cookies may impair the ordering checkout workflow.

6. YOUR DATA RIGHTS & CHOICES

In alignment with fair data practices, you possess the following rights regarding your information:

  • Access & Review: You can view and update your active profile, delivery addresses, and order history directly within the account settings of the Alosho app.
  • Rectification: You may request corrections to inaccurate, incomplete, or outdated personal information by contacting our support desk.
  • Account Deletion & Data Erasure: You have the right to request the permanent deletion of your Alosho user account and associated personal data. Upon receiving a verified request at support@alosho.com, we will delete your profile data, subject to retaining essential transaction logs required by law for taxation and financial audit purposes.
  • Marketing Opt-Out: You can opt out of promotional SMS alerts or promotional marketing emails at any time by following the unsubscribe link or contacting support. Critical transactional notices (such as order status and OTPs) will continue to be delivered.

7. CHILDREN'S PRIVACY

Alosho does not knowingly solicit or collect personal information from individuals under the age of 18 without verifiable parental consent. If we become aware that personal information of a minor has been collected without parental authorization, we will take immediate steps to delete the records from our servers.

8. UPDATES TO THIS PRIVACY POLICY

Alosho may update this Privacy & Data Policy periodically to reflect changes in our operational procedures, technologies, or legal requirements. Material updates will be notified via prominent notice on our platform along with an updated effective date. Continued use of our platform after updates indicates your acknowledgment of the revised policy.

9. PRIVACY OFFICER CONTACT

If you have questions, feedback, or wish to exercise your data privacy rights, please reach out directly:

  • Data Protection & Compliance Office: Alosho Pakistan
  • Official Support Email: support@alosho.com
  • Operational Address: Alosho Central Hub, Lahore, Pakistan
  • Working Hours: Monday to Saturday, 10:00 AM – 7:00 PM PKT