Privacy Policy — FishFarm

1. Introduction

This Privacy Policy explains how FishFarm ("we", "us", "our") collects, uses, shares, and protects information when you use our website and mobile application (collectively, the "Platform"), whether as a Guest, Buyer, Seller/Farmer, or Supplier.

2. Information We Collect

2.1 Account Information

Full name, phone number, email address (as applicable to your chosen sign-in method: phone/OTP, email/password, or Google).
Profile photo, if provided.
For Sellers/Suppliers: business/farm name, business location, category, and other onboarding details submitted for verification.

2.2 Location & Delivery Information

Delivery addresses saved by Buyers to their profile.
City/location selection used to personalize browsing.
Tenant delivery zone (geofence) data configured by Sellers/Suppliers via their CRM.

2.3 Transaction Information

Order history, items purchased, quantities, order status, and payment method preference (e.g., Cash on Delivery or bank transfer).
For Tenants: stock levels, stock adjustments, order fulfillment records, and finance/payout data.

2.4 Communications

Bulk quantity requests and related correspondence between Buyers and Tenants.
Records of contact initiated via the in-app WhatsApp option (note: message content sent via WhatsApp is handled by WhatsApp under its own privacy policy, not stored by FishFarm beyond the fact that contact was initiated).
Reviews and ratings you submit.

2.5 Technical & Usage Information

Device information, app version, and usage analytics (e.g., pages/screens visited, search queries) to improve the Platform.
OTP verification records (for security purposes; OTP codes themselves are not retained beyond their validity window).

3. How We Use Your Information

To create and manage your account and authenticate your identity.
To process and fulfill Orders, including sharing necessary order and delivery details with the relevant Tenant.
To determine delivery eligibility based on Tenant delivery zones.
To send transactional communications (order confirmations, status updates, verification results) via email and/or push notification, and OTPs via SMS.
To review and verify Seller/Supplier business information for the verification badge process.
To generate platform-wide and Tenant-level finance, revenue, and performance reports.
To improve the Platform, including search relevance, recommendations, and app performance.
To detect, prevent, and address fraud, abuse, or violations of our Terms & Conditions.

We share information as necessary to operate the marketplace:

With Tenants, to the extent needed to fulfill an Order (e.g., delivery address, contact number, order details) or respond to a bulk quantity request.
With Buyers, limited Tenant information necessary to complete a transaction (e.g., business name, verification status, delivery area).
With third-party service providers who support Platform operations, including SMS/OTP gateways, payment processors, cloud hosting providers, and analytics services.
With WhatsApp, only when you actively choose to initiate contact via the WhatsApp button.
Where required by law, regulation, legal process, or to protect the rights, safety, and property of FishFarm, its Users, or the public.

We do not sell your personal information to third parties.

5. Data Relating to Sellers & Suppliers

In addition to the categories above, Tenant CRM data — including stock levels, stock adjustment logs, order management records, delivery zone configuration, and finance/reconciliation data — is collected and processed to enable Tenants to operate their storefront and to generate accurate platform-wide reporting. Manually logged finance entries created by Super Admins (e.g., for verification or promotion fees) are also retained as part of platform financial records.

6. Cookies & Analytics (Website)

The FishFarm website may use cookies and similar technologies to remember preferences (such as selected city or language), keep you signed in, and understand aggregate usage patterns through analytics tools. You can control cookie preferences through your browser settings, though disabling cookies may affect some Platform features.

7. Data Security

We implement reasonable technical and organizational measures to protect your information, including secure storage of authentication credentials and access controls limiting internal access to personal data on a need-to-know basis. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Data Retention

We retain personal information for as long as necessary to provide the Platform's services, comply with legal obligations, resolve disputes, and enforce our agreements. Order and finance records may be retained longer where required for accounting, tax, or regulatory purposes.

9. Your Rights & Choices

You may access and update your profile information (including saved addresses) directly within your account settings.
You may request deletion of your account and associated personal data, subject to any legal or operational retention requirements (e.g., completed order/finance records).
You may opt out of non-essential promotional push notifications and emails; transactional notifications (e.g., order status, OTPs, verification updates) are necessary for the service and cannot be disabled.

To exercise any of these rights, contact us using the details in Section 14.

10. Children's Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child's information has been collected without appropriate consent, we will take steps to delete it.

11. International Data Transfers

Where FishFarm uses service providers or infrastructure located outside Pakistan (e.g., cloud hosting), your information may be processed in those locations. We take steps to ensure such providers maintain appropriate data protection standards.

12. Third-Party Services

The Platform integrates with third-party services including Google Sign-In, SMS/OTP providers, payment processors, and WhatsApp. These services have their own privacy policies governing how they handle your information, and we encourage you to review them.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Platform, email, or push notification. Continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.

14. Contact Us

If you have questions about this Privacy Policy or how your information is handled, contact us at support@fishfarm.pk or via WhatsApp through the contact option available in the app.