This Privacy Policy explains how Al-Ameen Parcel Protection ("Al-Ameen", "we", "us") collects, uses, and protects information when you register or use our parcel-protection service.

It applies whether you joined Al-Ameen through our Shopify app (Alameen Protect / Shipz-Alameen Protect) or through our WhatsApp registration flow for sellers on other platforms.

1. Who we are

Al-Ameen Parcel Protection is a parcel-insurance product operated by AL-AMEEN, a Pakistani software house engaged by The Pakistan General Insurance Company Limited (PGI) — the underwriting insurer — to operate and support this product.

AL-AMEEN is registered in Pakistan at Ground Floor, Shafi Court, Mereweather Road, Civil Lines, Karachi South, Pakistan. For privacy questions, contact info@alameen.pk.

2. What data we collect

From merchants (sellers)

• Full name (as on CNIC)
• CNIC number and photos of the front and back
• NTN number and certificate (if applicable)
• Business name and a description of what you sell
• Bank account details (bank name, account title, IBAN) collected at onboarding for KYC verification — claim payouts are currently issued by cheque, not bank transfer
• WhatsApp number
• Email address (Shopify-installed merchants)
• Shopify store domain and OAuth access token (Shopify-installed merchants)

From orders you insure

• Customer's name and shipping address as recorded in your Shopify order, or as you declare via WhatsApp
• Order number, items, and total value
• Dispatch-proof photos (item + shipping label) when you select Enhanced protection

From your team members

• WhatsApp numbers of staff you authorise to dispatch insured orders
• Name and role labels you assign

Automatically

• IP address and basic browser metadata when you visit our website or use the embedded Shopify app
• Timestamps of registration, insurance selections, dispatch submissions, and claim activity
• Shopify webhook metadata for the apps you install (uninstall events, order updates)

3. How we use your data

• To verify your identity (KYC) and decide whether to onboard you
• To process insurance selections on the orders you choose to insure
• To verify dispatches via WhatsApp proof submissions
• To process and pay claims when eligible
• To communicate with you via WhatsApp about onboarding, dispatches, claims, and updates
• To comply with Pakistani regulatory and tax obligations

We do not sell your data, and we do not use it for advertising or profiling.

4. Who we share data with

We share data only with parties necessary to provide the service:

• Our insurance partner — claims data necessary to underwrite and pay claims. Our underwriter is The Pakistan General Insurance Company Limited (PGI).
• Shopify Inc. — for merchants installed via our Shopify app, data flows between us and Shopify as required by the app's scopes (read_orders, read_fulfillments).
• Meta Platforms Inc. — phone numbers and message content pass through the WhatsApp Business API.
• DigitalOcean LLC — our cloud infrastructure provider, where our database and uploaded photos are hosted.
• Pakistani regulators and law-enforcement authorities — only when required by law, court order, or to respond to fraud.

We do not share data with marketing companies, data brokers, or any third party for their own purposes.

5. How long we keep your data

• Active merchants: while you are using Al-Ameen, plus 7 years for tax and regulatory records.
• Uninstalled Shopify merchants: data is deleted within 48 hours of uninstall, per Shopify's data-redaction process.
• Inactive non-Shopify merchants: 24 months from last activity, then deleted.
• Claim records: retained for 10 years after claim closure, per Pakistani insurance regulation.

6. Your rights

You can ask us to:

• Tell you what data we have about you
• Correct any inaccurate data
• Delete your data, subject to claim and regulatory retention requirements

Merchants on Shopify: uninstalling our app from your store triggers automatic deletion of all your data within 48 hours.

Other merchants: contact info@alameen.pk or WhatsApp +92 325 2231459 to request deletion. We process requests within 7–10 business days.

7. Security

• TLS encryption for all data in transit (HTTPS).
• Per-app encryption keys for stored Shopify credentials.
• Access on a need-to-know basis among Al-Ameen staff.
• Industry-standard cloud security via our infrastructure provider.

No system is perfectly secure. If we become aware of a data breach affecting your account, we will notify you and the relevant authorities as required by Pakistani law.

8. Children's data

Al-Ameen is for registered merchants and is not directed at children. We do not knowingly collect data from anyone under 18 years of age.

9. International transfers

Data is primarily hosted on infrastructure with regional presence in or near Pakistan. Some services (Shopify, Meta WhatsApp, DigitalOcean) operate internationally and data may transit through their global data centres. We rely on their standard contractual data-protection commitments.

10. Cookies

Our website uses minimal cookies — session cookies required to keep you signed into our dashboard and preference cookies to remember your settings. We do not use third-party tracking, advertising, or analytics cookies.

11. Changes to this policy

We may update this policy. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated via WhatsApp or email.

12. Contact

• Email: info@alameen.pk
• WhatsApp: +92 325 2231459
• Postal: Ground Floor, Shafi Court, Mereweather Road, Civil Lines, Karachi South, Pakistan