How done44 Handles Your Personal Information
At done44, we handle your personal data with care and clarity. This policy explains what we collect when you open an account, how we use it, and the...
What This Privacy Policy Covers and How It Applies
This policy applies to all accounts opened through done44.net where local law permits. When you transact through JazzCash, Easypaisa, SadaPay, or Raast, we receive only the confirmation reference your payment provider shares — we do not store your mobile wallet credentials or PIN. Data you submit during account creation, including your name, contact details, and preferred currency, is held on encrypted servers
and accessed only by authorised done44 personnel with a documented operational need. We retain transaction logs for the period required by applicable regulations, then delete or anonymise them.
Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.
Privacy Practices Backed by Verifiable Standards
We do not make claims we cannot demonstrate. Below are the concrete practices done44 applies to protect your personal information every time you interact with our platform in...
Encrypted Storage
All personal account data is stored using AES-256 encryption at rest. Backups follow the same standard and are tested quarterly...
Minimal Data Collection
We collect only what is operationally necessary — name, contact, payment reference, and session identifiers. We do not purchase or...
No Credential Storage
done44 never stores your JazzCash, Easypaisa, SadaPay, or Raast login credentials. Payment flows redirect to your provider's own secure environment...
Staff Access Controls
Internal access to personal data is role-gated. Support agents see only what is needed to resolve your query, and all...
Policy Review Cycle
Our privacy policy is reviewed at least once per year and whenever a regulatory change in Pakistan affects data handling...
Data Retention Limits
Account data is held for the period required by applicable Pakistani and international regulations, after which records are anonymised or...
How This Policy Aligns With Our Other Legal Pages
Our privacy, terms, and cookie policies are written to work together, not in isolation. The commitments you read here are reflected consistently across every legal document on done44.net...
| Terms of Service | Our terms reference this policy directly for data-handling clauses, ensuring the same definitions of personal data and consent apply site-wide. |
|---|---|
| Cookie Policy | Cookie categories — functional, analytics, and preference — map to the data purposes described here so you can match cookie consent choices to this policy. |
| Account Security Page | Password and two-factor authentication guidance on the security page is consistent with the access-control practices documented in this privacy policy. |
| Payment Page | The payment page confirms that done44 receives only transaction references from JazzCash, Easypaisa, SadaPay, and Raast, matching the credential-handling commitment here. |
| Support Documentation | Support articles on data requests cite this policy as the governing document, so agents and account holders use the same definitions and timelines. |
| Email Communications | Marketing and transactional emails link to this policy in every footer so the consent basis for contacting you is always one click away. |
| Promotional Pages | Any promotional page that collects an email or contact detail references this policy so data captured there follows the same retention and deletion rules. |
Core Principles Shaping Our Privacy Approach
Our privacy framework is built around four principles: collect less, explain clearly, protect strongly, and respond quickly. Every section of this policy traces back to one...
Clarity First
Every clause in this policy is written in plain Pakistani English so you can read it without legal training and still understand what done44 does with your data.
Purpose Limitation
Data collected for account verification is not repurposed for marketing analytics without a separate, explicit consent step documented in your account settings.
Access on Request
You may request a full export of the personal data we hold on your done44 account at any time by submitting a form through the account portal or emailing our privacy team.
Right to Correction
If any detail we hold — name, contact, address — is incorrect, you can flag it through the support chat or account settings and we will correct it within seven business days.
Transparent Updates
When this policy changes in a way that affects how your data is used, we email you a plain-language summary before the change takes effect so consent remains informed.
Accountability Trail
done44 maintains an internal log of who accessed your data, when, and for what operational reason, creating a clear accountability trail available on regulatory request.