FIA & Google Play Store Compliant

Privacy Policy

Bookat Platform values your data privacy. This policy outlines how we collect, store, process, and protect your personal information in compliance with Pakistan’s Prevention of Electronic Crimes Act (PECA 2016), FIA Cybercrime standards, and Google Play Store User Data Policies.

Effective Date & Last Updated: September 4, 2026

1Information We Collect

When you register, create an account, or book appointments via the Bookat Mobile App or Web Portal, we collect the following types of information:

  • Personal Identification Data: Full Name, Email Address, Mobile Phone Number, Profile Avatar.
  • Booking & Transaction Records: Appointment details, selected services, venue rentals, dates, times, and payment method choices.
  • Device & Notification Data: Device IP Address, Push Notification FCM Tokens (Firebase Cloud Messaging) for automated booking reminders.
  • Business Admin Data: Business Name, Address, Logo, Working Schedules, Service Price Lists, Staff Commissions, and Stock Inventory logs.

2How We Use Your Information

We process your personal information strictly for operational and legal purposes:

Service Delivery
Scheduling appointments, managing venue availability, processing bookings, and sending digital thermal receipts.
Automated Reminders
Sending 24h/2h email & mobile push notification alerts for upcoming appointments and recall follow-ups.
Accounting & Ledgers
Generating cashier POS shifts, Z-Reports, inventory stock audits, and sales ledger statements.
Legal Compliance (PECA/FIA)
Preventing unauthorized access, cyber fraud, and complying with Pakistan law enforcement regulations under PECA 2016.

3Third-Party Services & Data Sharing

We do NEVER sell, rent, or trade your personal data to third-party advertisers. Data is shared exclusively with certified service providers for app functionality:

  • Payment Gateway: Swich PayIn Gateway (Compliant with TLS 1.3 encryption for processing card/wallet transactions).
  • Push Notification Service: Firebase Cloud Messaging (Google FCM) to dispatch appointment notifications.
  • Email Provider: Amazon SES / SMTP servers for sending transactional booking receipts and account verification emails.
  • Law Enforcement & FIA: Information may be disclosed if required by valid legal process or court order under Pakistan PECA 2016 guidelines.

4Data Security & Encryption

We implement industry-standard administrative, technical, and physical security measures. All communications between the Bookat Mobile App, Web Portal, and database servers are protected using SSL/TLS encryption. Sensitive credentials such as passwords are stored using salted cryptographic hashes.

5User Data Rights & Account Deletion Policy

In full compliance with Google Play Store User Data Deletion policies, you have the right to request the permanent deletion of your account and personal data at any time.

Want to delete your Bookat account?
You can request instant data deletion via our web portal without reinstalling the app.

6Contact Us & Data Grievance Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or your data rights, please contact our Data Privacy Team:

Email: privacy@tsgtech.co / support@tsgtech.co
Organization: Bookat Platform / TSG Tech, Pakistan