Privacy Policy

1. Who we are

Auto Zoo is a vehicle dealership and import house based in Peshawar, Pakistan. We sell, source, import, inspect and service vehicles including Honda, Toyota, Land Cruiser, Pajero, SUVs and imported models. Auto Zoo is the data controller responsible for the personal information described in this policy.

Registered location: Opposite Runway, University Road, Jamrud Road, Peshawar, 25000, Pakistan.

2. Information we collect

We collect only the information needed to answer your enquiry, arrange a viewing, complete a vehicle sale or import, and support you afterwards. We do not require you to create an account simply to browse vehicles.

We do not collect sensitive categories of personal data such as health, biometric, religious or political information, and we do not build advertising profiles.

3. How we use your information

We use your personal information for the following purposes only:

• To respond to vehicle enquiries and arrange showroom viewings or test drives.
• To prepare quotations, reservations, sale agreements and import orders.
• To complete registration, excise and transfer documentation on your behalf.
• To arrange delivery or covered transport of a purchased vehicle.
• To process payments and, where you request it, support a bank leasing application.
• To provide inspection reports, service history and after-sale workshop support.
• To operate, secure, maintain and improve our website and mobile application.
• To send service messages about an active enquiry, order or delivery.
• To meet legal, tax, customs and record-keeping obligations.

We do not sell your personal information, we do not rent or trade it with data brokers, and we do not use it for purposes unrelated to providing our vehicle sales and service business.

4. Legal basis for processing

We process personal data where at least one of the following applies:

• Performance of a contract — to complete a vehicle sale, import or service you have asked for.
• Consent — for optional permissions such as location or notifications, which you may withdraw at any time.
• Legal obligation — for tax, customs, registration and transfer requirements.
• Legitimate interests — to secure our systems, prevent fraud, and improve our services, balanced against your rights.

5. How we share information

We share personal data only where it is necessary to deliver the service you asked for, and only with parties bound to protect it:

• Government and registration authorities: excise and taxation, customs and vehicle registration offices, as required to transfer or clear a vehicle.
• Banks and leasing partners: only where you ask us to arrange finance, and only with the details needed for that application.
• Payment processors: to complete a payment securely.
• Transport and delivery contractors: your name, delivery address and phone number, so the vehicle can be delivered to you.
• Import agents, shipping lines and clearing agents: where you have placed an import order.
• Service providers: hosting, crash reporting, analytics and messaging providers that help us operate the app and website, under confidentiality obligations.
• Legal authorities: where required by law, regulation or legal process, or to protect the rights, safety and property of our customers or our business.

We never share your data with advertisers or data brokers for their own independent marketing.

6. Device permissions

Our mobile application may request the following device permissions. Each is optional, each is requested in context with an explanation, and each is used only for the stated purpose:

• Location (approximate or precise): to suggest the nearest branch and estimate delivery distance and cost. The app remains fully usable if you decline.
• Camera: only when you choose to photograph a vehicle or document as part of an enquiry or part-exchange.
• Photos & media: only when you choose to attach an existing image to an enquiry.
• Notifications: to send updates about a reservation, import order, delivery or service appointment.
• Phone: to place a call to our showroom when you tap a call button. We do not read your call log or contacts.

You can change or revoke any permission at any time in your device settings without losing access to the rest of the app.

7. Data security

We apply appropriate technical and organisational measures to protect your information. All data transmitted between your device and our services is encrypted in transit using HTTPS/TLS. Access to customer records is restricted to authorised staff on a need-to-know basis, protected by individual accounts, and reviewed periodically. Payment transactions are handled by PCI-compliant processors rather than stored by us.

No method of transmission or storage is completely secure. If a breach occurs that is likely to affect your rights, we will notify affected users and the relevant authorities without undue delay.

8. Data retention

We keep personal data only for as long as it is needed for the purposes set out in this policy:

• Enquiries that do not lead to a sale: up to 12 months, then deleted.
• Sale, import and transfer records: retained for the period required by Pakistani tax, customs and vehicle registration law.
• Service and inspection records: retained for the life of our relationship with the vehicle, so history stays available to you and to future owners.
• App diagnostics and crash logs: retained in aggregated or anonymised form for up to 24 months.

When data is no longer required, we securely delete it or irreversibly anonymise it.

9. Account & data deletion

You may ask us to delete your account and the personal data associated with it at any time. There are two ways to make that request:

• In the app: open Settings → Account → Delete account and confirm. Your account is closed immediately and the associated data is removed within 30 days.
• By contacting us: call or message +92 321 845 6719, email info@autozoopk.com, or write to us at the address in section 15. We verify your identity before acting, and complete the deletion within 30 days.

What is deleted: your profile, contact details, saved vehicles, enquiry history, uploaded photos and app preferences.

What may be retained: records we are legally obliged to keep — completed sale, import, tax and vehicle transfer documentation — for the statutory period. These are retained in restricted archive storage and are not used for any other purpose. Anonymised statistics that cannot identify you may also be retained.

10. Your rights & choices

Subject to applicable law, you have the right to:

• Access the personal data we hold about you and request a copy.
• Request correction of inaccurate or incomplete data.
• Request deletion of your account and associated personal data (see section 9).
• Withdraw consent for optional permissions such as location or notifications.
• Object to or request restriction of certain processing.
• Ask us to stop sending service or promotional messages.

To exercise any of these rights, contact us using the details in section 15. We respond to all requests within 30 days and never charge a fee for a reasonable request.

11. Children's privacy

Our services are intended for adults who are legally able to enter into a vehicle purchase agreement, and our app is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

12. Third-party services

Our app and website rely on a small number of trusted third-party services — including cloud hosting, crash reporting and analytics, messaging platforms, map and location providers, and payment gateways. Each processes data under its own privacy policy, and we encourage you to review those policies. We are not responsible for the privacy practices of services we do not control.

Our website and app may link to external sites. Following such a link takes you outside our control, and this policy no longer applies.

13. International transfers

Some of our service providers, and some import partners, operate outside Pakistan. Where personal data is transferred internationally, we take reasonable steps to ensure it remains protected to a standard consistent with this policy, including contractual confidentiality and security commitments from the receiving party.

14. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, technology or legal obligations. When we make a material change, we update the “Last updated” date above and, where appropriate, notify you in the app before the change takes effect. Continued use of our services after that point constitutes acceptance of the revised policy.

15. Contact us

If you have any question, concern or request regarding this Privacy Policy, your personal data, or account deletion, please contact us: