What does this privacy policy include?
Nayum PK deeply values your privacy. We’re fully dedicated to protecting your personal data (as outlined in more detail below). We believe in being open with you regarding the ways we gather and utilize your personal data while providing access to our website and mobile apps (the “Platform”). This also includes informing you about your privacy rights and how legal protections apply to you.
This Privacy Policy explains how Nayum PK gathers and uses your personal data when you interact with our platform.
By accessing and using the platform, you consent to the gathering, utilization, and sharing of your personal data as described in this privacy policy.
This Privacy Policy includes the following aspects:
Who we are and how to reach us
Personal Data we collect from you
Personal Data We Gather from Other Sources
How We Utilize Your Personal Data and the Reason Behind It
Who We Share Your Personal Data With
How We Protect Your Personal Data
How Long We Retain Your Personal Data
Your Rights Concerning Your Personal Data
Marketing Communications
Policy Regarding Minors
Links to Third-Party Websites
Modifications to this Privacy Policy
We may update this Privacy Policy occasionally, with or without informing you in advance. When that occurs, the updated version will be posted on this page.
This privacy policy might be available in multiple languages. In case of any discrepancies between them, the English version will take precedence.
Who we are and how to reach us
Who We Are
The Platform is operated by Nayum PK, which also acts as the data controller for your personal data (referred to throughout this Privacy Policy as “______”, “____”, “”, or “___”). Our office is located in Gulzar-e-Hijri, Scheme 33, Karachi, Pakistan.
How to contact us
If you wish to reach out, you can do so by emailing: admin at nayum dot pk
Personal data we collect from you
The types of personal data we obtain from you directly are listed in the table below.
“Personal Data” refers to any information related to an individual that either directly identifies them or can be used to identify them. This does not include ‘anonymised data’ (data where the individual’s identity has been permanently erased). However, it does include ‘pseudonymised data’ (information that doesn’t identify an individual on its own, but could do so when combined with other data).
| Category of Personal Data | Explanation |
| Identity Data | Include your first name, last name, username, or any similar identifier, along with your profile picture. If you choose to verify your account through our “Nayum pk Verified” option, we will collect and process an image of your Identification Card, including all information on it—such as your ID number, birthdate, nationality, and gender. We implement strict security protocols to safeguard this information and prevent fraudulent or malicious actions like identity theft, phishing, or payment fraud. If you test-drive or buy a car via Nayum pk Cars, we will also gather further details, such as information on your driver’s license. |
| Contact Data | Includes your email address and phone number(s). |
| Location Data | Your approximate location, if you choose to enable location sharing via your device. |
| Listings Data | Information related to your current and past listings on the Platform, as well as listings of other users you’ve viewed and any offers made on those listings. |
| Marketing Data | Includes your preferences regarding receiving promotional messages from us. |
| Chat Data | Information from your conversations with other users through the Platform’s ‘Chat’ feature, including any additional Personal Data you might provide in those messages. |
| Call Data | Recordings of calls between you and our support teams, which are used for training and quality assurance purposes. |
| Behavioural Data | Information inferred or assumed about your behavior and interests based on how you use the Platform. These insights are often aggregated into segments. |
| Technical Data | Includes your IP address, login credentials, browser type and version, time zone and location, browser plug-in details, operating system, platform, and any other technical data related to the devices you use to access our website or services. |
Aggregated Data
We also gather, utilize, and share ‘aggregated data’—this refers to statistical or demographic information collected for multiple purposes. Although aggregated data may originate from your Personal Data, once it’s compiled in aggregate form, it no longer qualifies as Personal Data since it doesn’t reveal your identity, either directly or indirectly. For instance, we might compile your Behavioural Data to determine the percentage of users engaging with a specific feature on the Platform. However, if we ever combine or associate aggregated data with your Personal Data in a way that could identify you directly or indirectly, we will treat such combined data as Personal Data and handle it in line with this Privacy Policy.
Special Categories of Personal Data
We do not intentionally collect any ‘special categories of personal data’ about you. This includes data such as your race or ethnicity, religious or philosophical beliefs, political views, health details, genetic or biometric information, and records of criminal activity or convictions.
We advise that you refrain from sharing any of these categories of data with us—whether through our support chat or in messages exchanged with other users via the platform’s chat system. However, if you choose to disclose this information to us or other users, you agree that we may process it according to the terms outlined in this Privacy Policy.
What if you don’t provide the required personal data?
You are not obligated to submit any personal data to us. That said, when we require certain personal data to give you access to the platform or to meet legal obligations, and you choose not to provide it upon request, we might not be able to offer you access to the platform. For example, to create your account on the platform, we need your email address.
Personal Data We Gather from Other Sources
Apart from the personal data we obtain directly from you (as outlined in the previous section), we also acquire some of your personal data through third-party sources. These sources and the categories of data collected from each are listed below:
| Third-Party Source | Categories of Personal Data |
| Social Media Platforms | Identity Data, Contact Data |
| Our Affiliates | Identity Data, Contact Data, Marketing Data, Behavioural Data, Technical Data |
| Analytics Providers | Behavioural Data, Technical Data |
| Advertisers | Behavioural Data, Technical Data |
How We Utilize Your Personal Data and the Reason Behind It
We will utilize your Personal Data strictly for the specific purposes for which it was collected, as outlined below. However, if we determine that it is necessary to use your Personal Data for a different purpose that aligns reasonably with the initial intent, we may proceed accordingly. Should the need arise to use your Personal Data for an unrelated objective, we will revise this Privacy Policy and provide clarification on the lawful basis permitting such use (please see the ‘Changes to this Privacy Policy’ section later in this document).
What Grounds Do We Have for Handling Your Personal Data?
For every purpose we use your Personal Data for, the relevant privacy laws require us to ensure that we are acting on a valid ‘legal basis’. In most instances, the legal grounds we depend on will include one of the following:
- When the processing of your Personal Data is required for us to fulfill a contract with you (for instance, providing access to the Platform) (“Contractual Obligation”).
- When it is necessary for us to handle your Personal Data to meet legal or regulatory responsibilities (“Legal Compliance”).
- When you have explicitly given us permission to process your Personal Data for a specific reason (“Consent”).
Below is a table that outlines the legal justifications we rely upon when handling your Personal Data:
| Purpose | Categories of Personal Data | Reason for Processing | Legal Basis |
| Account Registration | Identity Data, Contact Data | To create your user profile on the Platform and manage your account. | Contractual Obligation |
| Verification Process | Identity Data, Contact Data | To authenticate your account via the optional Nayum pk “Verified’ feature. | Contractual Obligation |
| Service Delivery | Identity Data, Contact Data, Location Data, Listings Data, Chat Data, Call Data | To maintain the safety and stability of our Platform and systems. | Contractual Obligation |
| Data Analysis | Behavioural Data, Technical Data | To evaluate user activity and categorize our audience for marketing strategies. | Contractual Obligation |
| Promotional Messaging | Contact Data, Marketing Data | To deliver marketing communications if you’ve opted in. | Consent |
| Technical Troubleshooting | Technical Data | To identify and fix issues that arise on our Platform. | Contractual Obligation |
| Security & Fraud Control | Identity Data, Contact Data | To maintain safety and stability of our Platform and systems. | Legal Compliance |
Who We Share Your Personal Data With
The following table outlines the entities with whom we may share your Personal Data and the reasons for sharing it.
We ensure that all parties who receive your Personal Data apply appropriate security measures to protect it, in line with our policies and the relevant data security regulations we are bound. We do not allow third-party service providers who process your data to use it for their own purposes. They can only process your Personal Data for specific purposes based on our instructions.
| Recipients | Reason for Sharing |
| Other Platform Users | We share some of your Personal Data with other users when you wish to engage in transactions with them on the Platform. |
| If you post an advertisement or leave a review/rating, that information, along with any Personal Data connected to your account (such as your username, profile picture, and Nayum pk Verified status), will be publicly available to all users. This information could also appear in third-party search engine results (such as Google). Ensure you’re comfortable with this before posting on our Platform. | |
| Service Providers | We share your Personal Data with service providers who assist in the Platform’s operations, such as IT, system admin, or marketing services. |
| Affiliates | Public authorities might request we to disclose user data in certain situations where the law requires it, such as during a police investigation. |
| Professional Advisers | Our lawyers, accountants, bankers, auditors, insurers, and other professionals may require access to your Personal Data in order to provide us with legal, financial, insurance, and advisory services. |
| Public Authorities | Public authorities might request we disclose user data in certain situations where the law requires it, such as during a police investigation. |
| Acquirer(s) | In the event of a reorganization, merger, sale, or other business transactions involving all or part of our business, we may share your Personal Data with third parties, including potential acquirers, so they can continue running the Platform. We will make sure that such parties handle your data according to this Privacy Policy. |
Data Transfers
There may be instances where we need to transfer your Personal Data to countries outside of your location. These countries might not offer the same level of data protection as the one in your home country. Such transfers will only occur when necessary for the purposes outlined in this Privacy Policy. We will ensure that any international transfers of your Personal Data are in full compliance with applicable legal requirements.
How We Protect Your Personal Data
We have implemented appropriate security measures to safeguard your Personal Data against accidental loss, alteration, or unauthorized access and use.
Access to your Personal Data is restricted to those employees and personnel who require it for business purposes. All individuals with access are bound by a confidentiality agreement.
We have established procedures to address any real or suspected Personal Data breaches. If such an event occurs, we have systems in place to minimize the impact on your privacy and to collaborate with the relevant authorities.
How Long We Retain Your Personal Data
We will retain your Personal Data only for as long as it is necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is mandated by law (for instance, for regulatory purposes).
In certain cases, we may anonymize your Personal Data, making it impossible to link it back to you. Anonymized data may be stored indefinitely.
Our data retention practices are regularly reviewed to ensure compliance with all applicable regulations.
Your Rights Concerning Your Personal Data
Your Rights
In certain situations, you may have specific rights concerning your Personal Data. For instance, you may have the right to:
- Request access to your Personal Data: This allows you to obtain a copy of the Personal Data we hold about you and verify that we are processing it lawfully.
- Request correction of your Personal Data: You can ask us to correct any incomplete or inaccurate information we hold about you.
- Request the deletion of your Personal Data: You can request that we delete or remove your Personal Data from our systems if there is no valid reason for us to continue processing it.
- Object to the processing of your Personal Data: You can object to our processing of your Personal Data for certain purposes (e.g., marketing).
- Request the transfer of your Personal Data: You may request that we transfer your Personal Data in a structured, commonly-used, machine-readable format, either to you or a third party designated by you.
- Withdraw your Consent: This right applies only where we rely on your consent to process your Personal Data. If you withdraw your consent, we may no longer be able to provide certain features of our Platform. We will inform you if this is the case when you withdraw consent.
Please be aware that not all of the above rights may be available to you, and some rights may only apply in specific circumstances.
How to Exercise Your Rights
To exercise any of the rights listed above, please contact us.
To verify your identity and confirm your right to access your Personal Data (or exercise any other rights), we may ask you for specific details. This is a security measure to ensure that Personal Data is not disclosed to anyone who is not authorized to access it. We may also request additional information from you to speed up our response.
We aim to respond to all legitimate requests within one month of receiving them. In certain cases, if your request is particularly complex or if you have submitted multiple requests, it may take us longer than one month. In such cases, we will notify you and keep you updated on the progress.
While we generally do not charge a fee for exercising your rights, we reserve the right to charge a reasonable fee in certain situations (for example, if your request is excessive or unreasonable).
Complaints
If you wish to file a complaint regarding this Privacy Policy or how we handle your Personal Data, please reach out to us. We will respond to your complaint as quickly as possible.
If you are not satisfied with how we address your complaint, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
Marketing Communications
You can request to stop receiving marketing messages at any time by logging into the Platform and adjusting your marketing preferences by checking or unchecking the appropriate boxes or by clicking the “Unsubscribe” link found at the bottom of any marketing email you receive from us.
Policy Regarding Minors
This Platform is not designed for use by minors, and we do not actively monitor the age of our users.
However, if you become aware of a minor using the Platform in violation of this restriction, please reach out to us if you would like us to remove their Personal Data from our systems.
Links to Third-Party Websites
The Platform may contain links to third-party websites and applications. Clicking these links will redirect you away from the Platform, and third parties may collect or share your Personal Data. We do not control the privacy practices of these third-party websites and applications and are not responsible for how they handle your data. We recommend that you review the privacy policies of any websites or applications you visit once you leave our Platform.
Modifications to this Privacy Policy
We retain the right to update this Privacy Policy at any time, with or without prior notice to you.
In such cases, we will update this page with the revised Privacy Policy and may, in some instances, notify you (for example, via email).
Any changes to this Privacy Policy will take effect immediately once they are posted on this page.