Privacy Policy

Last updated: November 3, 2026

1. Introduction

ITSAAL ("Company," "we," "us," or "our") is committed to protecting the privacy of all users ("User," "you," or "your company") of our B2B marketplace platform ("Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access or use the Platform.

By accessing, registering on, or using the Platform, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, you must not access or use the Platform.

This Privacy Policy applies to all Users, including manufacturers, suppliers, wholesalers, and buyers. It should be read in conjunction with our Terms and Conditions, which govern your use of the Platform.

2. Information We Collect

We collect several types of information from and about Users of the Platform. This includes information you provide directly to us, information we collect automatically as you use the Platform, and information we receive from third parties.

Information you provide directly includes your business name, owner name, business address, contact number, email address, contact person details, and business licenses or certifications. For Sellers, we collect product catalogs, pricing information, inventory levels, bank account details for payouts, shipping and warehouse locations, and quality certifications. For Buyers, we collect purchase history, order details, payment method information, shipping addresses, delivery preferences, and credit application information.

Information we collect automatically includes your IP address, device information, browser type and version, pages visited, time spent on the Platform, search queries and filters used, website logs, communication records, and cookies and similar tracking technologies. This information helps us improve the Platform and provide a better user experience.

3. How We Use Your Information

We use the information we collect for various purposes, including facilitating transactions between Buyers and Sellers, verifying business identities, tracking payments, preventing fraud and ensuring security, improving Platform features, sending service notifications, complying with legal requirements, and resolving disputes between parties.

4. Information Sharing and Disclosure

We share your information with other Users as necessary to facilitate transactions. When you transact on the Platform, Sellers receive the Buyer's business name, shipping address, order details, and payment confirmation. Buyers receive the Seller's business name, location, verified certifications, product specifications, pricing, and ratings from other Buyers.

We may share your information with third-party service providers, including payment processors, shipping carriers, verification services, cloud hosting providers, and analytics providers. These service providers are contractually obligated to protect your information and may only use it for the purposes for which it was disclosed.

We may disclose your information to comply with legal obligations or court orders, to protect our rights, property, or safety, during business transfers such as mergers or acquisitions, or to enforce our Terms and Conditions.

We never share your bank account details with other Users, your personal contact information without consent, your negotiation strategies or price thresholds, or your proprietary business data.

5. Data Retention

We retain your information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Account information is retained until account deletion plus thirty days. Transaction records are retained for one year for tax and legal compliance. Communication logs are retained for two years for dispute resolution. Usage analytics are retained for two years for Platform improvement.

6. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information. These include the right to access a copy of your information, the right to correct inaccurate information, the right to request deletion of your account, the right to export your data, the right to restrict how we use your information, and the right to opt out of marketing communications.

To exercise any of these rights, please contact us using the information provided at the end of this Privacy Policy. We will respond to your request within 15 days.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on the Platform. Essential cookies are necessary for Platform operation, including login and shopping cart functionality. Functional cookies remember your preferences. Analytics cookies help us understand how you use the Platform. Marketing cookies are used to deliver promotional content.

You can control cookies through your browser settings. However, disabling essential cookies may affect the functionality of the Platform.

8. International Data Transfers

If you access the Platform from outside Pakistan, your information may be transferred to and processed in Pakistan. We use appropriate safeguards for international data transfers, including standard contractual clauses approved by relevant authorities. By using the Platform, you consent to the transfer of your information to Pakistan and other countries where we operate.

9. Children's Privacy

The Platform is intended for business-to-business use only. We do not knowingly collect information from individuals under eighteen years of age. If we become aware that we have collected information from a minor, we will take steps to delete such information promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be notified via email or notification. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated Privacy Policy.

11. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data transmission, encrypted databases with access controls, two-factor authentication options, twenty-four-seven security monitoring and breach detection, daily encrypted backups, and role-based access controls for employees.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security.

12. Contact Information

For questions about this Privacy Policy or to exercise your rights, please contact us any time.