Privacy Policy

Account information: your name, email address and password (stored only as a secure hash). If you sign in with Google, we receive your name, email address and profile picture from Google.

Phone number: a mobile number you provide and verify with a one-time code. We need it before introducing a buyer and a seller.

Listing information (sellers): details of the business you list, including category, location, price, sales and profit ranges, rent and lease terms, licences, photos, and confidential details such as the business name, exact address, owner contact, actual figures and supporting documents (for example rent agreements, licences, bank or wallet statements, POS exports).

Buyer activity: NDAs you accept (with the date and IP address), introduction requests, messages and any budget you share, and listings you save.

Enquiry and valuation forms: your name, phone, email, city, business type and message when you request a valuation or contact our desk.

Technical information: IP address, browser and device type, and the pages you request, recorded in security and server logs. We use only the cookies needed to keep you signed in and secure; we do not use advertising cookies.

• To create and secure your account and keep you signed in.
• To publish listings, show the public parts to everyone and the confidential parts only to permitted people.
• To verify listings (site visits, document and sales-evidence checks) and prepare valuations.
• To qualify buyers, arrange introductions and support a sale through to handover.
• To send service emails and notifications (for example account verification, listing status, enquiries and alerts you ask for).
• To prevent fraud, spam and misuse, and to keep an audit trail of staff actions.
• To comply with legal obligations and respond to lawful requests.

If you choose "Continue with Google", we request only your basic profile (name, email address, profile picture) to create and sign in to your account. We do not access your Gmail, contacts, Drive or any other Google data.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this information, use it for advertising, or share it except as needed to run your account.

We do not sell personal information. We share it only as follows:

• Public listing details (category, area, price, ranges, photos you approve) are visible to everyone.
• Confidential listing details are shown only to the seller, our authorised team, and buyers who accept that listing's NDA.
• Contact details are exchanged between a buyer and a seller only when our team arranges an introduction that both sides agree to.
• Service providers who host or process data for us under contract: Vercel (website hosting), Amazon Web Services (file storage), CloudClusters (database hosting), SMTP2GO (email delivery), Inngest (background jobs) and Google (sign-in). Some of these process data outside Pakistan.
• Legal reasons: where required by Pakistani law, a court order or a lawful request from authorities, or to protect the rights and safety of our users and team.
• Business transfer: if BusinessForSale.pk is reorganised or sold, information may transfer to the new operator under this policy.

Data is encrypted in transit (HTTPS) and documents are stored in private, encrypted storage that can only be opened through short-lived links. Access by our team is limited by role and by city or category, and staff actions are recorded in an audit log. No system is perfectly secure, so please use a strong password and keep your account details private.

We keep account and listing information while your account is active. Sold listings remain on the site with a "Sold" label but without confidential details. We keep NDA, enquiry and audit records for as long as needed to resolve disputes and meet legal obligations, and delete or anonymise information we no longer need. You can ask us to delete your account at any time (see below).

• See and update your account and listing details from your dashboard.
• Ask for a copy of the personal information we hold about you, or ask us to correct it.
• Withdraw a listing, or ask us to delete your account and personal information, subject to records we must keep by law or to resolve disputes.
• Opt out of optional emails and alerts at any time; service emails about your account still apply.

To make a request, email privacy@businessforsale.pk. We will respond within a reasonable time and may need to verify your identity first.

BusinessForSale.pk is for adults. We do not knowingly collect information from anyone under 18.

We may update this policy as the service develops. We will change the "Last updated" date and, for significant changes, tell signed-in users.

Questions or requests about privacy: privacy@businessforsale.pk. General support: support@businessforsale.pk. Postal address: [Registered business name], [Registered office address], Lahore, Pakistan. See also our Terms of Service.