Privacy Policy

This policy explains what personal information gerage.pk collects from people who use the platform (drivers, workshop owners, parts shops), why we collect it, how we use it, who we share it with, and what rights you have over it. It applies to everything under gerage.pk and its subdomains.

1. What we collect

We collect the minimum needed to operate the service. In practice that means:

• Phone number — required for OTP sign-in. We never ask for a password.
• Display name — you choose what to call yourself. A real name is optional, never enforced.
• Vehicle profile — make, model, year and registration if you add them to your account.
• Bookings + receipts — the workshops you booked with, the services performed, the receipts issued.
• Grievances + messages — what you wrote when you filed a complaint or contacted support.
• Approximate location — only when you ask the site to show shops near you. We do not track location in the background.
• Operational logs — IP address, device type, browser, referrer, errors. Kept for security and debugging.

2. What we don't collect

• We don't collect or store payment-card details. Bookings on the platform are free for customers; cash settles between you and the workshop.
• We don't buy or rent personal information about you from third-party brokers.
• We don't fingerprint you across sites. Our analytics are aggregate-only.

3. How we use what we collect

• To run the service — sign you in, confirm bookings, route messages, render your vehicle history.
• To keep it safe — detect abuse, OTP fraud, fake listings, scraping.
• To improve it — aggregate usage data tells us which services to add and which cities to focus operations in next.
• To talk to you — booking confirmations, grievance updates, OTP delivery. We do not send promotional SMS or email without opt-in.

4. Who we share it with

gerage.pk does not sell personal information. We share data only in these limited cases:

• Workshops you book with— they see the phone number and name on the booking, plus the vehicle you bring in. Without that the booking can't be honoured.
• Infrastructure providers — hosting, email and SMS gateways, error monitoring. Each is bound by a contract limiting use to what is needed to deliver the service.
• Law enforcement — only when compelled by a valid Pakistani legal order and only the minimum information that order requires.

5. How long we keep it

• Account data — for as long as the account is open, plus 90 days after closure.
• Receipts + service history — retained for 7 years so you can pull a record of any past job (and so workshops can defend disputes).
• Operational logs — typically 30–90 days, rolling.
• OTP codes — minutes, then discarded.

6. Your rights

You can ask us, at any time, to:

• Export every piece of personal data attached to your account.
• Correct anything that's wrong.
• Delete the account and the data tied to it.
• Stop sending you a particular kind of message.

Email [email protected] from the address or phone tied to the account and we will action it within 30 days. We may need to verify identity first for export and deletion requests.

7. Children

gerage.pk is not directed at children under 13. We don't knowingly collect their information; if a parent or guardian believes a child has signed up, write to [email protected] and we will remove the account.

8. Security

All traffic is HTTPS-encrypted. Personal data is encrypted at rest on our database hosts. Access inside the company is limited to the small set of people who need it to run the platform; every access is logged.

9. International transfers

Primary hosting is in the EU; CDN edges serve content worldwide. If you use the site from outside Pakistan, your request may be routed through one of those edges; the data itself is stored in the EU.

10. Changes

When this policy changes materially, we update the date at the top and post a banner on the site for two weeks. Continued use after that constitutes acceptance.

11. Contacting us

Privacy questions: [email protected].
Anything else: /contact.