How PetsFactory handles marketplace data

This policy applies to the PetsFactory.pk website, installable PWA, account features, marketplace listings, chats, shops, orders, and related support and moderation tools. PetsFactory provides the software platform. Transaction information is supplied by buyers, sellers, and shops; listing information may be submitted directly by a user or imported from a public marketplace source.

• Account information: phone number, display name, email when supplied, authentication records used to verify one-time codes and passcodes, account role, preferences, trusted devices, and active sessions. Passcode material is stored in encrypted form; a separately enabled, highly privileged support function can reveal or replace it, and those actions are audited.
• Listing and shop information: titles, descriptions, categories, attributes, prices, photos, location, contact preferences, shop details, inventory, and listing status. Uploaded photo files may retain embedded metadata, including device or GPS information, because metadata removal is not guaranteed.
• Communications: marketplace chat messages, attachments, delivery and read information, reports, and contact inquiries sent through the platform.
• Orders: ordered items, quantities, prices, shop, delivery details, order status, cancellation information, and ratings connected to delivered orders.
• Device and activity data: device identifiers, browser and network information, sign-in events, searches, listing views, favourites, notification preferences, and security events. Search logging can include the search terms, browser information, and a cryptographic hash derived from the network address. Category interest signals can be associated with an account or device to personalise marketplace sections.
• Location: the city, area, or sub-area selected for a listing or feed, coordinates supplied by the browser when a user chooses the current-location feature and grants permission, and any location metadata left inside an uploaded photo file.

PetsFactory can import listings that were publicly available on other marketplace sources. Depending on the source record, an import can include the public seller name and phone number, listing text, photos, price, category, location or coordinates, source identifier, and source URL. The import process can create a local seller record linked to the listing and can publish the listing as active.

An imported listing does not by itself mean that the original seller opened a PetsFactory account or manually selected every PetsFactory contact setting. Source and import metadata may be retained to identify provenance, prevent duplicates, and manage the listing.

• create accounts, verify sign-ins, and manage sessions;
• publish, search, rank, and display marketplace listings;
• connect chat participants and deliver account notifications;
• create and manage shop carts and cash-on-delivery orders;
• review listings, investigate reports, limit abuse, and enforce the Terms of Service;
• maintain, debug, secure, and improve the website, PWA, and related marketplace features; and
• comply with legal obligations and valid official requests.

Active listings are public and can include the seller’s display name, listing text, photos, price, general location, seller type, shop information, and other fields the seller submits for publication. Exact account credentials and private session data are not part of a public listing.

A phone number can be disclosed through the authenticated contact flow when the listing data and product rules permit it. That availability can reflect an imported source record as well as a seller preference. Chat messages are visible to the participants. Authorised administrators can also access account information for support, moderation, security, and legal work, including through a controlled impersonation capability. Administrative actions are role-restricted and audited, but a user notification is not guaranteed for every such access.

For a cash-on-delivery order, the relevant shop or seller receives the order and delivery information needed to fulfil it. The order record also remains available to the buyer and seller through their account tools. Cash on delivery does not require payment-card details for that payment method.

If another payment method is introduced, the checkout flow and an updated policy will explain which payment provider processes the payment and what information is shared.

We may use hosting, database, storage, messaging, email, SMS, security, and infrastructure providers to operate the platform. They receive only the information needed for their service and are expected to handle it under appropriate confidentiality and security obligations.

Information may also be preserved or disclosed when reasonably necessary to comply with law, respond to a valid legal request, protect a person from harm, investigate fraud or abuse, or defend the platform and its users.

We retain information for as long as it is needed to provide the account, listing, chat, order, moderation, and security functions for which it was collected. Some records may be retained after a listing or account changes status when needed for order history, fraud prevention, dispute handling, safety, or legal compliance.

PetsFactory uses technical and organisational safeguards appropriate to an online marketplace, including account verification, session controls, access restrictions, and audit and moderation records. No online service can promise absolute security. Users should protect their passcode and verification codes and report suspicious account activity promptly.

The platform uses cookies and browser storage for sign-in sessions and access tokens, device recognition, saved location, recently viewed listings, preferences, cart state, and service-worker or PWA functions. Some authentication state currently uses browser storage during the platform’s account-system transition. Blocking these technologies may prevent account, cart, location, notification, or offline features from working correctly.

The installed service worker can cache successful API responses on the device, including responses requested while a user is signed in. A logout does not guarantee that every browser or service-worker cache is immediately erased. On a shared device, users should sign out and clear the site’s stored data through the browser when finished.

Photo uploads may preserve embedded EXIF or GPS metadata. Users who do not want that metadata stored with an upload should remove it from the file before submitting the photo.

Depending on the feature, users can update profile and listing data, change seller contact preferences, remove or mark listings, manage notification preferences, review trusted devices, sign out sessions, archive chats, and manage saved addresses. Public listing information may remain visible in search caches after a change.

Requests about access, correction, or deletion may be subject to identity verification and to records we must keep for orders, security, disputes, or law.

The marketplace is intended for people legally able to manage an account and transaction. Anyone who cannot legally enter the relevant agreement should use the service only through a parent or legal guardian. Listing an animal also remains subject to applicable animal-welfare, wildlife, trade, and local laws.

We may update this policy when marketplace features, legal requirements, or data practices change. The current version and its update date will remain available at this URL.

See also the Terms of Service and Legal / imprint page.