Privacy Policy

MarkitMall (markitmall.com) is an online marketplace for Pakistan. Independent stores list products on the Platform, shoppers buy them with cash on delivery or pay online, and delivery is handled through our warehouses and courier partners.

MarkitMall is a product of Code Scrapper. The Platform is owned and operated by Code Scrapper, a software house registered in Pakistan (IT software, mobile app and website development) owned by Mehtab Kazmi, with its registered address at 3, Street, Road, Lahore, Pakistan. For the purposes of this policy, Code Scrapper is the controller of the personal data described below. Our contact details are at the end of this page.

• •Account information: your name, email address, mobile number and password (stored only as a secure hash).
• •Order and delivery information: the items you order, delivery and billing addresses, recipient name and phone number, and the status of each order.
• •Store and seller information: your store name, store details, payout account details, and the KYC information described in section 3.
• •Support information: complaints, return requests, dispute messages and any photos or documents you attach to them.
• •Technical information: IP address, browser and device type, and pages you visit on the Platform, collected through cookies and similar technologies (see section 7).
• •Communications: emails and notifications we send you about orders, account and security, and your preferences for marketing messages.

Anyone who wants to open a store on MarkitMall must complete identity verification before the store can go live. Buyers do not need to complete KYC.

• •For sellers we collect your CNIC number, images of the front and back of your CNIC, and a selfie, together with your date of birth and address as recorded on the CNIC.
• •This information is used to verify identity and age, to meet our obligations as a marketplace that pays sellers money, and to prevent fraud and impersonation.
• •CNIC numbers are masked in the areas of the Platform where they are displayed (for example in admin verification screens), and are never shown publicly on your store page.
• •Your KYC documents are not shared with other users. They may be shared with the acquiring bank and payment partners only where this is required to enable payouts to you.

• •To create and secure your account, and to sign you in.
• •To process orders: confirming them, arranging delivery, collecting cash on delivery, and handling returns and refunds.
• •To pay sellers: calculating earnings and platform fees, and settling payouts to your payout account.
• •To operate the Offer (referral) programme, including verifying entries and issuing rewards.
• •To provide customer support and to respond to complaints, returns and payment issues.
• •To detect, investigate and prevent fraud, fake accounts, fake payment proofs and abuse of the Platform.
• •To meet legal, tax, accounting and regulatory obligations.
• •To send you service messages about your account and orders, and — only where you have agreed — marketing messages, which you can stop at any time.

• •You can pay by cash on delivery (COD) or online. For a COD order we share the recipient's name, phone number and address with the courier so the parcel can be delivered and the cash collected.
• •Online payments by debit or credit card, bank account or mobile wallet are processed by Safepay (getsafepay.com), a payment gateway operating in Pakistan, and its partner banks. You enter your card number, expiry date and security code on Safepay's own secure checkout page — they are never sent to or stored on MarkitMall's servers.
• •To start an online payment we share the order reference and amount with Safepay. Safepay processes your payment details under its own privacy policy and the rules of the card networks and the State Bank of Pakistan.
• •We do, however, receive and store payment result data — such as the transaction reference, the amount, the payment method type and whether the payment succeeded — so that we can reconcile orders and process refunds.
• •We do not sell your personal data, and we do not use your payment details for any purpose other than processing your transaction, refunding you, and meeting legal record-keeping requirements.

We share personal data only where it is needed to run the marketplace, and only with parties who are bound to protect it:

• •Courier and logistics partners — to deliver your order and collect cash on delivery.
• •Our warehouses — to receive, store, pick, pack and dispatch stock and orders.
• •Payment and banking partners — to process transactions, settle payouts and handle refunds and disputes.
• •Stores you buy from — the seller needs the order details (items, quantities and delivery city) to fulfil it. Sellers do not receive your payment credentials.
• •Technology providers — hosting, cloud storage, email and notification delivery, and analytics, under agreements that limit their use of the data to providing that service to us.
• •Authorities — where we are required to do so by law, court order, or a lawful request from a regulator, or where disclosure is necessary to investigate fraud or to protect the rights and safety of our users.

We use cookies and similar technologies to keep you signed in, remember your cart and preferences, understand how the Platform is used, and — where you allow it — measure marketing. See our Cookie Policy for the categories we use, and the Cookie Preferences page to change your choices at any time.

• •Account and profile data is kept while your account is open, and for a reasonable period afterwards so that we can resolve disputes and meet record-keeping duties.
• •Order, payment, payout and refund records are kept for as long as tax, accounting and financial rules require.
• •KYC records are kept while you sell on the Platform and for the period required by applicable anti-fraud and record-keeping rules afterwards.
• •Complaint and return records are kept long enough to handle the case and to detect repeat abuse.
• •Where you ask us to delete data and we have no legal reason to keep it, we delete or irreversibly anonymise it.

• •Passwords are stored as one-way hashes, never in plain text.
• •Data is encrypted in transit between your browser and our servers, and access to production data is restricted to staff who need it to do their job.
• •Uploaded KYC documents are stored in private object storage and served through time-limited, signed links rather than public URLs.
• •We monitor for abuse such as fake accounts, fake payment proofs and fraudulent return claims.
• •No method of transmission or storage is completely secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

• •Access and correction: you can view and update most of your account details from your profile, and ask us for a copy of the personal data we hold about you.
• •Deletion: you can ask us to delete your account and personal data. We will do so unless we are required to keep particular records — for example completed order and payment records.
• •Marketing: you can opt out of marketing messages at any time. Service messages about your orders, account and security will still be sent.
• •Cookies: you can change or withdraw cookie consent from the Cookie Preferences page, and control cookies through your browser settings.
• •Withdrawing consent: where we rely on your consent, you may withdraw it. This does not affect processing carried out before you withdrew it.
• •To exercise any of these rights, contact us using the details below. We may need to verify your identity first.

MarkitMall is not intended for children. You must be at least 18 years old to open a store or take part in the Offer programme, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy as the Platform or the law changes. When we do, we update the date shown at the top of this page. If a change is significant, we will tell you through the Platform or by email before it takes effect. Continuing to use MarkitMall after a change means you accept the updated policy.

For any question, request or complaint about privacy, contact us at no-reply@markitmall.com (phone +92 325 1777167) or through the Help & Support page. We aim to respond within 7 working days.

If you are not satisfied with our response, you may also raise the matter with the relevant Pakistani authority.