Privacy Policy

ROOHLY (SMC-PRIVATE) LIMITED ("Roohly", "we", "us") is the data controller in respect of personal data processed through the Roohly website and mobile applications (the "Platform"). We understand that a matrimonial platform necessarily handles information of a highly personal and sensitive nature.

1. Legal Framework

As at the date of this Policy, Pakistan has not enacted a comprehensive personal data protection statute. Our processing is governed by Article 14 of the Constitution of Pakistan, the Prevention of Electronic Crimes Act, 2016 (as amended), and other applicable law. Roohly voluntarily aligns its practices with internationally recognised data-protection principles, including lawfulness, purpose limitation, data minimisation, accuracy, storage limitation, integrity, confidentiality, and accountability.

2. Information We Collect

2.1 Information you provide

Category	Examples
Account data	Name, email address, mobile number, password (hashed), date of birth, gender.
Profile / biodata	Marital status, sect, education, profession, income range, city, country, nationality, family details, caste/biradari (optional), height, complexion, hobbies, written introduction.
Partner preferences	Age range, location, education, sect, and other criteria you specify.
Photographs	Profile and additional photographs you choose to upload.
Verification documents	CNIC/NICOP/passport, educational certificates, employment letters, divorce decree or death certificate, selfie/liveness image.
Communications	Expressions of interest, messages with other Members, and correspondence with our support team.
Transaction data	Subscription plan, amount, date, transaction reference. We do not store your card number, CVV, wallet PIN, or banking password.
Reports	Any report, complaint, or evidence you submit about another Member.

2.2 Information collected automatically

Device identifiers, IP address, browser and operating-system type, approximate location derived from IP address, pages viewed, features used, referring URLs, timestamps, crash logs, and cookie identifiers.

2.3 Sensitive information

Certain data — including religious sect, marital and divorce history, caste, national identity documents, and photographs — is sensitive personal data. We collect it only where you voluntarily provide it. We do not collect information from persons under 18 years of age.

3. Purposes of Processing

We process personal data in order to:

• create and administer your account;
• display your profile to other Members;
• operate matching, search, and recommendation features;
• enable Member-to-Member communication;
• carry out identity and document verification;
• process Subscription payments;
• detect, investigate, and prevent fraud and misuse;
• moderate content and provide customer support;
• send service and marketing communications (with consent);
• analyse usage and improve the Platform;
• comply with legal obligations; and
• establish, exercise, or defend legal claims.

4. Visibility of Your Profile

4.1. Information you place on your profile will be visible to other registered Members. You control, through your privacy settings, whether your photographs are visible to all Members or restricted.

4.2. We do not display your email address, mobile number, home address, CNIC number, or verification documents to other Members at any time.

5. Disclosure of Personal Data

We do not sell, rent, or trade your personal data. We disclose personal data only:

• to other Members (as described in Section 4);
• to service providers acting on our instructions under confidentiality obligations;
• to professional advisers under duties of confidentiality;
• to law-enforcement agencies, courts, or regulators where required by law;
• to an acquirer in the event of a merger or sale of assets; and
• with your express consent in any other case.

6. Security

We implement encryption in transit (TLS/HTTPS), encryption of verification documents at rest, hashing of passwords, role-based access control, and periodic review.

7. Retention

Data	Retention period
Active account data	For as long as your account remains active.
Deactivated account	90 days to permit reactivation, then deleted or anonymised.
Verification documents	12 months from verification, or until account deletion, whichever is earlier.
Transaction and tax records	Six (6) years as required under the Income Tax Ordinance, 2001, and the Companies Act, 2017.
Abuse reports and evidence	Retained as long as necessary to prevent re-registration and defend legal claims.
Backups	Purged within 30 days after deletion.

8. Your Rights and Choices

Subject to applicable law, you may: access the personal data we hold; correct inaccurate data through your profile settings or by writing to us; delete your account and associated personal data (subject to retention exceptions); withdraw consent to optional processing; control visibility of your profile through your privacy settings; and complain to us at info@roohly.com. We will respond within thirty (30) days.

9. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified through the Platform or by email.

11. Contact — Data Protection

ROOHLY (SMC-PRIVATE) LIMITED
Suite No. 1, 6th Floor, M-30 Moon Tower, M Block, International Market,
Model Town, Lahore, Punjab, Pakistan
CUIN: 0343183  ·  NTN: J405536
Email: info@roohly.com  ·  Phone: +92 320 000 5499