Last updated 10 Nov 2026 · Operated by [Registered business name] (trading as Archnet)
1. Who is responsible
[Registered business name], trading as Archnet, [Registered office address], [City], Pakistan, is responsible for your personal data. Contact: [email protected].
2. What we collect
- Account details: name, email, password (stored only as a secure hash), phone number and city if you add them.
- Orders and payments: what you bought, amounts, receipts; for payments, the method, the mobile number you entered for JazzCash/Easypaisa, the payment reference and the account title our payment provider reports. We never receive your PIN, OTP, card number or banking password.
- Project information: briefs, files and messages you send us to deliver a service.
- Support: messages you send us and our replies.
- Security logs: IP address, browser type, sign-in times and actions on your account, to keep accounts and payments safe.
Footage, photos and recordings that show you, your staff, customers or premises, and the signed releases of people who appear in them. We use them only to make your project.
3. Why we use it (and our legal basis)
- To provide what you ordered and support you (performing our contract with you).
- To take payments, prevent fraud and money laundering, and keep records for tax and accounting (legal obligations and legitimate interests).
- To keep the Site secure and working (legitimate interests).
- To send you news or offers — only if you opted in. You can opt out at any time from your profile or any such email.
4. Who we share it with
- Our payment provider and the banks/wallets involved, to process payments and refunds.
- Our hosting and email providers, who store and send data for us under contract.
- Professional advisers (lawyers, accountants, auditors) where needed.
- Authorities, when the law requires it — for example tax authorities or the Financial Monitoring Unit.
We don’t sell your personal data or share it for advertising.
5. How long we keep it
- Account data: while your account is open. When you delete your account we remove or anonymise your profile.
- Order, invoice and payment records: for the period tax and anti-money-laundering laws require (generally up to 10 years), even after you delete your account.
- Security logs: up to 12 months. Support messages: up to 3 years.
6. Your rights
You can access, correct, download (Account → Privacy & data → Download my data) or delete your data, object to marketing, and ask us questions about how we use it. If you’re not satisfied with our answer, you may complain to the relevant authority in Pakistan.
7. Security
We use HTTPS everywhere, hash passwords, encrypt sensitive data (such as payment credentials and identity documents) at rest, offer two-factor sign-in, and limit staff access to what they need. No system is perfectly secure; if we learn of a breach affecting you we will tell you without undue delay.
8. Cookies
We use only essential cookies. See our Cookie Policy.
## Footage and releases
Footage and photos are stored on our working drives and on your project page, accessible only to the team on your project. Signed model releases are kept with the project file for as long as the footage may be used. We don’t use footage of you or your customers in our own marketing unless you give written permission.
9. Changes
We’ll post any changes here and update the date at the top. Significant changes will be emailed to account holders.
Questions about this policy? Email [email protected] or write to [Registered business name], [Registered office address], [City], Pakistan.