Privacy Policy

Version 1.8 · effective 16 October 2026

What we collect, why, who sees it and your choices.

This policy explains how Digitec, the operator of HairDrive (a sole proprietorship, 70-E, Pak Arab Housing Society, Lahore), handles personal information. Questions: privacy@hairdrive.pk.

1. What we collect

• Account: your name, mobile number, email, preferred language, a profile photo if you add one, and sign-in codes (codes expire within minutes).
• Bookings: the business, services, times, notes you add, payments, Glow Points and reviews you post.
• Home visits: the address and map pin you give, used to check the professional comes that far, for their journey and for the travel fee.
• ID check for home visits: the first time you book a home visit, your CNIC images (front and back), a live selfie and your CNIC number. We keep the number only as a fingerprint (a code that can't be turned back into the number) and its last 4 digits.
• Reports: what you tell us when you report a business, and your booking with it.
• Location: if you allow it, your approximate location to show businesses near you. We don't track you in the background. If you tap I'm here, we check your location once to confirm you're at the business, and keep only the distance.
• Businesses: owner and staff details, who the business serves, business address and photos, payout account, staff check-in and check-out times, and the owner's CNIC number, kept only as a fingerprint and its last 4 digits. For anyone who visits homes, CNIC images and a live selfie for identity checks. Home visit professionals who tap I've arrived share their location once; we keep only the distance.
• The CNIC gender check: in Pakistan the last digit of a CNIC is even for women and odd for men. Home visits on HairDrive are by women professionals only, so we check that digit, with the CNIC images and the selfie, for anyone who visits homes.
• Support: what you tell us in a support ticket, including messages and any photos or files you attach.
• Payments: the amount, method and reference of each payment. Card and wallet details are handled by the payment provider; we don't store your PIN or card number.
• Device and usage: pages viewed, device type and errors, to keep HairDrive working and improve it.

2. Why we use it

• To run bookings: confirmations, reminders, arrival codes, directions and receipts.
• To remind you about your next visit: a few days after a visit, the HairDrive app may show a 'Book again' card, and about a week after it one app notification if you haven't opened the app since. You can turn these reminders off in the app at any time. We never send them by WhatsApp, SMS or email.
• To keep people safe: verifying businesses, home-visit professionals and customers who book home visits, preventing fraud and abuse (for example the same CNIC, number or device on several accounts), and handling complaints and reports.
• To settle money: deposits, refunds, the HairDrive fee, wallet top-ups and payouts, all through Digitec's accounts.
• To improve HairDrive and, if you agree, to send offers. You can opt out of offers at any time.

3. Who sees it

• The business you book sees your name, number, booking details and notes, and your address for home visits. Businesses may only use this for your booking and their client records. If you add a profile photo, businesses you book with see it on your bookings. Your public reviews show your first name and the first letter of your last name, with your initials. Your photo shows next to your reviews only if you tick "Show my photo with my reviews on HairDrive"; it is off unless you choose it, and you can change it any time in Profile and settings. If you tap I'm here, the business sees how far away you were (for example 40 m), not where you were.
• Your ID check is seen only by HairDrive's reviewers, and every time they open it is logged. The professional sees only that your ID is verified, never your CNIC or your selfie.
• Share my visit: at a home visit, the professional can send a private link to a family member. It shows the visit time, the area and the visit's progress, never your name, number or address, and it stops working 3 hours after the visit.
• Reports you make about a business are seen only by the HairDrive team. The business is never told who reported it.
• Support tickets are seen only by you and the HairDrive team. A ticket you open about a business is not shown to that business. Tickets a business opens are shared with its owners and managers.
• Service providers that help us run HairDrive: hosting and database (Supabase), WhatsApp messages (Meta), email delivery, maps and drive times (Google), and payment providers (Easypaisa first). They act on our instructions.
• Authorities when the law requires it, or to protect someone's safety.
• We never sell your personal information.

4. How long we keep it

• Account and booking records: while your account is open and up to 5 years after, for accounting and disputes.
• Identity documents of businesses: while they are on HairDrive and up to 2 years after they leave.
• Your ID check images: deleted 2 years after your last home visit, or when you delete your account (once any open dispute is closed). Images from a check that was not approved are deleted 30 days after you send new ones.
• Support tickets and their attachments: up to 2 years after the ticket closes, or longer if a dispute needs them.
• Sign-in codes and message logs: up to 90 days, except where needed for a dispute.

5. Security

Data is encrypted in transit, access is limited to people who need it, identity documents are kept in private storage (customers' ID images in their own store that only HairDrive reviewers can open), and admin access needs two-step sign-in.

6. Your choices

• See and update your details in your account. Ask us for a copy of your data, or to correct or delete it, at privacy@hairdrive.pk. Some records must be kept by law (for example, payment records).
• Turn location off in your browser at any time.
• Messages about your bookings are part of the service. They are discreet: they name the business and the time, never the treatment; the details are in the app or on the website. (WhatsApp messages switch to this wording as soon as WhatsApp approves it.) Reminders to book again come only in the app and you can turn them off. Marketing messages (offers) are optional and sent only if you agree.

7. Children

HairDrive is for adults. Bookings for children must be made by a parent or guardian.

8. Changes

We'll publish any change here with its date, and tell you in the app if it matters to you.