Privacy Policy

We handle personal data about three groups of people:

• Merchants: the businesses that ship with us and the people who run them. We decide what to collect and why.
• Consignees: the people merchants send parcels to. We use their details only to deliver, return and account for the parcel the merchant booked.
• Our riders and staff: the people who carry out and manage deliveries.

From merchants

• business name, category and address; the owner's name, mobile number and email address
• CNIC number and photos of both sides of the CNIC, to verify identity before approval
• bank account title, bank, account number and IBAN, a cheque leaf or bank letter, NTN and NTN certificate, to pay COD to the right account
• pickup addresses, products and stock held in our warehouses
• sign-in details: username and password, payment PIN and API keys, all stored only as one-way hashes we cannot read back

About consignees

• name, phone number, delivery address and city
• the order reference, a description of the contents, weight, pieces and COD amount
• at delivery: the name of the person who received it, their signature or a photo, and the reason if delivery failed

From riders

• name, phone number, CNIC and vehicle number
• the location of the rider's phone at the moment they scan a parcel or update its status, used as proof of where it happened. We do not track riders continuously.
• the cash each rider collects and deposits

We do not collect card numbers, and we do not use advertising trackers or sell data. The website uses only the cookies needed to keep you signed in and to keep your payment screens unlocked for a short time after you enter your PIN.

• to verify and approve merchant accounts
• to pick up, store, deliver and return parcels, and to print labels and loadsheets
• to show tracking to the merchant and, on the public tracking page, the parcel's progress to anyone with its tracking number
• to calculate charges, collect COD, pay merchants and keep ledgers
• to send account emails such as verification codes, password resets, approval notices and bank detail changes
• to investigate complaints, claims and suspected fraud, and to meet our legal, tax and accounting duties

Anyone with a tracking number can see the parcel's status, the cities it has passed through, the service type and, if an attempt failed, the reason. The public page never shows the consignee's name, phone number or address, the merchant's details, photos, signatures or exact locations.

• Merchants see the parcels they booked, including delivery proof and a map link to where each status was updated.
• Our staff see what their role needs: riders see the parcels assigned to them, finance sees payments and bank details, head office sees the rest. CNIC, bank and NTN documents are visible to head office only.
• Banks receive the account details and amount needed to make each payment.
• Our service providers: the hosting company that runs our servers and the email provider that sends our emails. They act on our instructions.
• Government authorities, only when the law requires it.

Map links open Google Maps at the recorded coordinates; nothing is sent to Google until someone clicks the link. We do not sell, rent or trade personal data, or share it for marketing.

• All traffic to our website, apps and API is encrypted with HTTPS.
• Passwords, payment PINs, API keys and one-time codes are stored only as hashes. One-time codes expire after 10 minutes and lock after repeated wrong attempts.
• Merchants can turn on a payment PIN so payment and bank screens need a second check.
• Identity documents and delivery proof are not public files. They can be opened only by signed-in people allowed to see them.
• Bank detail changes are recorded with who made them, the reason and the evidence, and the merchant is emailed.

• Delivery photos and signatures may be deleted once a parcel has been delivered or returned for 15 days or more. The status history, remarks and locations stay with the shipment record.
• Shipment, payment and ledger records are kept for as long as tax and accounting law requires us to.
• Merchant identity and bank documents are kept while the account is open and afterwards for as long as we may need them to settle payments, claims or disputes.
• One-time codes are kept only until they are used or expire.

Merchants can see and update most of their business details in the portal, and download their payments and ledger. Tax and bank details are changed by head office on request.

You can ask us for a copy of the personal data we hold about you, to correct it, or to close your account and delete what we are not required to keep. Consignees can ask us the same about their delivery details. Email info@ibelieve12.com from the address on the account, or with the tracking number, and we will reply within 30 days.

Merchant accounts are for adults running a business. We do not knowingly open accounts for anyone under 18.

We will post any change to this policy here with a new date, and tell merchants about important changes in the portal or by email. Questions or requests: info@ibelieve12.com. See also our Terms of Service.