Who is responsible for your data
Shahid Bahader IT Services, a sole proprietorship owned by Shahid Bahader and trading as SB IT Services, is the controller of the personal data described here. Our address is Flat No. A-79/3 Shaheen Camp, 25000, Peshawar. For any privacy question or request, email support@bahaderloyalty.com.
What we collect and why
When you email us
We keep your email address, your message and our replies, so we can answer your question about the plugin, a licence or a refund. Legal basis: our legitimate interest in replying to you, or performing our contract with you if you are a customer.
When you buy Bahader Loyalty Pro
Paddle.com processes your order and payment as Merchant of Record. Paddle shares with us your name, email address, country, what you bought and the order status. We never see your full card details. To manage your licence, we store your licence key and the website addresses where it is activated. When Bahader Loyalty Pro checks your licence or looks for updates, it sends us your website address, the plugin version and the licence key. Legal basis: performing our contract with you.
The free Bahader Loyalty plugin does not send any data to us.
When you visit this website
We count page views without cookies. For each view we store the page, the website you came from, your device type (mobile, tablet or desktop) and, when available, your country. To count unique visitors we use a code that changes every day and cannot be turned back into your IP address; we do not store the IP address itself. Legal basis: our legitimate interest in understanding how the website is used.
This website loads its fonts from Google Fonts, so your browser sends your IP address to Google when a page loads.
Cookies
We only use cookies that the website needs to work: a session cookie and a security token that protect its forms. We do not use advertising or tracking cookies, so there is no cookie banner.
Who we share data with
- Paddle.com, our reseller and Merchant of Record, for orders, payments, invoices, tax and refunds. See Paddle's privacy notice.
- Our hosting and email providers, who store this website, our database and our email.
- Professional advisers, such as accountants, where needed for our business.
- Authorities, such as tax authorities, where the law requires it.
We do not sell your personal data.
International transfers
We are based in Pakistan, and our service providers may store data in other countries. If you are in the UK or the European Economic Area, your data is transferred to Pakistan, which does not have an adequacy decision. We make that transfer because it is necessary to answer your request or carry out our contract with you, and we protect your data as described in this policy.
How long we keep data
- Support emails: up to 2 years after our last contact.
- Order records, including invoices: 6 years after the end of the licence, as tax law requires.
- Licence records: while the licence is active, then 6 years.
- Page view statistics: 13 months, then deleted automatically.
Your rights
Depending on where you live, you can ask to see the personal data we hold about you, correct it, delete it, limit how we use it, object to our use of it, or receive a copy to give to someone else. Where we rely on your consent, you can withdraw it at any time. We reply within one month. If you are not happy with our answer, you can complain to the data protection authority where you live, such as the ICO in the UK.
Security
The website uses HTTPS. Account passwords are stored hashed and other access keys encrypted, access to our systems is protected, and we only collect what we need.
Children
Our website and products are for businesses and adults. We do not knowingly collect data from children under 16.
Changes
We may update this policy. The date at the top shows when it last changed.