This Privacy Policy describes how Milkiyat (“we,” “us,” or “our”) processes personal information when you use our websites, applications, and related services (the “Services”) offered under the milkiyat.com brand in connection with real estate listings, agents, agencies, and developers in Pakistan.

We aim to process personal data fairly, lawfully, and transparently, in line with the direction of Pakistan’s Personal Data Protection Bill (PDPB), where enacted and applicable, and with obligations under the Prevention of Electronic Crimes Act (PECA), 2016, and other applicable Pakistani law. This policy supplements (and does not replace) our Terms of Use or any product-specific terms you accept when using the Services.

This document is not legal advice. A qualified Pakistani advocate should review it before you treat it as binding on your organisation.

2.1 Information you provide

You may provide:

• Identity & contact: full name, email address, mobile / WhatsApp number, city or area, and similar profile fields.
• Verification (KYC): Computerized National Identity Card (CNIC) number and related verification documents or images where required for agent or high-trust onboarding.
• Listings & inquiries: property descriptions, media, pricing, location details, and messages you send through forms, chat, or contact features.
• Payments: payment-related information processed by our payment service providers (we do not store full card numbers on our own servers).

2.2 Automatic information

When you use the Services, we automatically collect or receive:

• Device & network: IP address, browser type, operating system, device identifiers where available, and approximate location derived from IP.
• Usage & diagnostics: pages viewed, searches, interactions with listings, timestamps, and logs used to secure and improve the platform.
• Cookies & similar technologies: cookies, local storage, and pixels for sessions, preferences, analytics, and (where permitted) marketing measurement.

2.3 Third-party & sign-in (OAuth)

If you sign in with a third party (for example, Google), we receive information that provider shares with us according to your settings and their privacy policy. You should review that provider’s terms before connecting your account.

We use personal information to:

• Provide, operate, and improve the Services, including search, maps, and account features;
• Verify identity, prevent fraud, and protect the security of users and the platform;
• Display listings and facilitate communication between users and advertisers;
• Send service messages, security alerts, and (where permitted) marketing communications;
• Comply with legal and regulatory obligations, including tax and anti–money laundering requirements where they apply;
• Enforce our terms and defend our legal rights.

As a real estate marketplace operating in Pakistan, we may be subject to or align with obligations under the Anti-Money Laundering Act, 2010 and related rules, guidance, and sector expectations concerning customer due diligence, record-keeping, and cooperation with competent authorities.

Where the law applies to our activities, we may be required to verify identities, monitor activity for risk indicators, maintain records, and report suspicious transactions to the Financial Monitoring Unit (FMU) or other designated bodies, and to cooperate with the Federal Board of Revenue (FBR) and law enforcement when legally compelled. The scope of these duties depends on our regulatory classification and the nature of each transaction; we do not state that every user interaction triggers a statutory report.

We reserve the right to disclose personal information when we reasonably believe it is required or permitted by law to prevent fraud, money laundering, terrorist financing, tax offences, or other unlawful activity, or to respond to lawful requests from regulators and courts.

Milkiyat is a marketplace. Listings are typically published by independent agents, agencies, or developers (“Advertisers”).

When you click “Call”, “WhatsApp”, “Email”, or submit an inquiry on a property listing, you explicitly consent to our sharing of the contact details and message content you provide with the Advertiser responsible for that listing, so they can respond to you. Advertisers are independent controllers for their subsequent use of your data; their practices are governed by their own policies and any direct agreement with you.

We may also share data with hosting, analytics, communications, payment, and security vendors under contracts that require appropriate confidentiality and security measures.

Data in transit between your browser and our servers is protected using TLS (HTTPS) where the Services are correctly configured.

Sensitive verification materials (including CNIC-related uploads) are stored using industry-standard encryption at rest and access controls, limited to authorised systems and personnel for identity verification (KYC), fraud prevention, and compliance. No online system is completely secure; you should use strong passwords and protect your devices.

We retain personal information only as long as necessary for the purposes described in this policy and to meet legal, tax, and regulatory requirements.

Transaction-related and compliance records (including materials that may be relevant for tax, audit, or anti–money laundering purposes) may be retained for at least five (5) years from the end of the relevant relationship or transaction period, or longer where Pakistani law or a lawful authority requires a longer period.

When retention periods end, we delete or anonymise data where feasible, subject to backup and archival systems that may take additional time to purge.

Subject to applicable law, you may have the right to:

• Access personal information we hold about you;
• Correct inaccurate or incomplete data;
• Request erasure of certain data, subject to legal hold, regulatory retention, and our overriding legitimate interests (for example, fraud prevention or unresolved disputes).

To exercise these rights, contact us using the details in Section 13. We may verify your identity before responding.

We use cookies and similar technologies for essential functions (such as login and security), analytics, and (where you consent) marketing. You can control non-essential cookies through your browser or any cookie banner we provide. Blocking essential cookies may limit functionality.

Our service providers or infrastructure may process data outside Pakistan. Where required, we implement safeguards intended to protect your information in line with applicable requirements.

The Services are not directed to children under the age at which they may validly consent under Pakistani law. We do not knowingly collect personal information from children. If you believe we have done so, please contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may be communicated through the Services or by email where appropriate. Continued use of the Services after changes, where permitted by law, constitutes acceptance of the updated policy.

For privacy-related requests or questions about this policy, contact us at [email protected] or by post at the address shown in our site footer.

This Privacy Policy is provided for transparency and general information. It does not create rights for third parties and is subject to change. Nothing here waives any statutory rights you may have under Pakistani law once applicable data protection legislation is fully in force.