Legal DrafterPAKISTAN
|
Sign inRegister
Legal

Privacy Policy

Last updated: 2026-05-09

Draft template — not yet effective. This document is a working draft prepared for review by qualified legal counsel. It must not be relied upon until finalised and formally adopted.
Effective from: <DATE>

MeraMunshi (LegalLink Pakistan) ("we", "us") respects your privacy and is committed to handling personal data in accordance with applicable Pakistani law, including the Prevention of Electronic Crimes Act, 2016 (PECA) and forthcoming personal data protection legislation. This Policy explains what we collect, why, and the choices you have.

1. Data we collect

  • Account data: name, email, phone, CNIC (where required for verification), Bar Council enrolment, firm details.
  • Usage data: pages viewed, features used, device and browser type, IP address, access timestamps, audit-log events.
  • Communications: messages, support tickets, feedback, survey responses, and metadata of email/WhatsApp/SMS notifications.
  • Payment data: billing name, address, transaction identifiers, partial card / wallet identifiers returned by the processor. Full card numbers are not stored on our servers.
  • Content you upload: case files, time entries, client information, drafts, and documents.

2. Purpose of processing

We process personal data to provide the Platform, authenticate users, verify advocates, deliver notifications, process payments, prevent fraud and abuse, comply with legal obligations, and improve the service. Lawful bases include performance of contract, legitimate interests, consent (where applicable), and legal obligation.

3. Retention

We retain account data for as long as your account is active and for a reasonable period thereafter for accounting, audit, statutory, and limitation-period purposes. Audit logs are retained for at least twelve (12) months. You may request deletion subject to legal retention obligations.

4. Sharing and sub-processors

We share data only with vetted sub-processors strictly to operate the Platform:

  • Hosting / infrastructure: our IONOS Pakistan VPS and supporting infrastructure providers.
  • Payment processing: JazzCash, Easypaisa, banks, and other licensed processors regulated by the State Bank of Pakistan (SBP).
  • Communications: email delivery providers, WhatsApp Business API providers, and SMS gateways.
  • Legal / regulatory: disclosure where required by court order, regulator request, or law-enforcement demand under PECA, 2016 or other applicable law.

5. Your rights

Subject to applicable law, you may: (a) access the personal data we hold about you; (b) request correction of inaccurate data; (c) request deletion of data that is no longer required; (d) export data in a portable format; and (e) withdraw consent for non-essential processing. Requests can be made through your account settings or to the contact below.

6. Cookies

We use strictly-necessary cookies for session, authentication, and CSRF protection, and a small set of functional cookies (e.g., language preference). We do not use third-party advertising or cross-site tracking cookies.

7. Security

We use Postgres Row-Level Security, hashed credentials, encrypted transport (TLS), least-privilege roles, and audit logging. No system is perfect — please report suspected incidents promptly.

8. Children

The Platform is not intended for persons under 18. We do not knowingly collect data from minors.

9. Contact / Data Protection Officer

Data protection queries and rights requests may be sent to the Data Protection Officer at the address published on the Platform contact page. Suspected cybercrime may additionally be reported to the Federal Investigation Agency (FIA) Cyber Crime Wing.