Privacy Policy

1. Introduction

Fastly (Private) Limited (we, us, our) operates the Mehfoz used phone marketplace platform (the Service). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our Service. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

2. Information We Collect

We collect information you provide directly to us, including: name, phone number, email address, CNIC number (for verification), business information (for verified sellers), listing photos and descriptions, payment information (processed by third-party providers), and chat messages between users. We also automatically collect: IP address, device information, browser type, pages visited, time spent on pages, and location data (with permission).

3. How We Use Your Information

We use your information to: facilitate transactions between buyers and sellers, verify user identities and prevent fraud, process payments via Buyer Protection, provide customer support, send transactional notifications and updates, improve our Service through analytics, comply with legal obligations, and resolve disputes between users.

4. Information Sharing

We share your information only as follows: with other users for transactions you initiate (name, phone, listing info), with the bank that holds the Mehfoz account you transfer to, with inspection service providers when you book inspections, with legal authorities when required by law, and with service providers who help us operate the platform (under strict confidentiality agreements). We never sell your personal data to advertisers or third parties.

5. Data Security

We implement bank-grade security measures including SSL/TLS encryption for all data transmission, encrypted storage of sensitive information (CNIC, payment details), regular security audits and penetration testing, two-factor authentication for sensitive accounts, automated fraud detection systems, and strict access controls for employees. While we strive to protect your information, no method of transmission over the Internet is 100 percent secure.

6. Data Retention

Mehfoz keeps user account, listing, transaction, inspection, protection, support, and audit records for as long as needed to provide services, resolve disputes, meet legal or operational requirements, and protect platform safety. When a chat message is edited, MEHFOZ may retain previous versions for safety, moderation, dispute resolution and audit purposes. You may contact support for account or data requests, subject to applicable laws and platform security requirements.

7. Your Rights

You have the right to: access your personal information stored by us, correct inaccurate information, delete your account and associated data, opt out of marketing communications, request a copy of your data in a portable format, and lodge a complaint with relevant authorities. To exercise these rights, contact us at privacy@mehfoz.pk.

8. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our Service and store certain information. Cookies help us understand how you use our platform, remember your preferences, and provide personalized experiences. You can instruct your browser to refuse cookies or alert you when cookies are being sent, but some parts of our Service may not function properly. We use Google Analytics, a web and app analytics service provided by Google, to understand how visitors find and use Mehfoz. Google Analytics uses cookies and similar identifiers to measure visits, pages viewed and general device and approximate location information, and this information is collected and processed by Google in accordance with the Google Privacy Policy at https://policies.google.com/privacy. We do not send your name, phone number, email address, CNIC or any other information that identifies you personally to Google, and we do not use Google Analytics for advertising personalization. Visitors in the European Economic Area, the United Kingdom and Switzerland are measured without any identifier being stored on their device. You can opt out of Google Analytics on any website by installing the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout.

9. Meta (Facebook) Advertising and Measurement

We use Meta (Facebook) advertising and measurement tools to understand how people find Mehfoz and to measure the results of our advertising. These tools work in two ways.

In your browser, the Meta Pixel uses cookies and similar identifiers to record pages you view, listings and seller profiles you open, the words you type into search, listings you save, taps on a seller's call or WhatsApp button, and listings you share.

On our servers, the Meta Conversions API reports confirmed actions only: completing registration, logging in, posting an ad and that ad going live, starting a chat with a seller, making an offer, requesting an inspection or Buyer Protection, and completing seller verification. Where you are signed in, this report includes your email address, phone number and account identifier in an irreversible hashed form (SHA-256), along with your IP address and browser user agent, so Meta can match the action to an existing profile. It also includes details of the item involved: the listing identifier, brand, model, city and price. Where one action is reported from both your browser and our servers, the two reports share a single event identifier so the action is counted only once.

Unlike Google Analytics, these Meta tools are used for advertising: Meta may use this information to measure our advertising, to show you Mehfoz ads, and to build audiences similar to our users. We do not send Meta your name, CNIC, home address, payment or bank details, the content of your chat messages, your photographs, or your email address or phone number in readable form, and we never sell your personal data. Meta processes what it receives under its own terms as an independent controller; see the Meta Privacy Policy at https://www.facebook.com/privacy/policy, and you can review or disconnect the activity Meta receives about you from other businesses in your Meta account settings. Refusing cookies in your browser, or using your device's tracking controls, stops the browser Pixel; the server reports described above are tied to actions you take in your Mehfoz account.

10. Childrens Privacy

Mehfoz is not intended for use by anyone under 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can remove it from our records.

11. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the Last updated date. For significant changes, we will send email notifications. You are advised to review this Privacy Policy periodically.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at: Email: privacy@mehfoz.pk, Phone: 0321 00 11 222, Address: 1st Floor, Fazal Tower, Kohinoor City, Faisalabad.