Privacy Policy

PropCarers (“we”, “us”) provides property management and brokerage services in Pakistan, operating from Punjab. This policy covers the PropCarers web application and the services delivered through it.

For any question about your information, contact us through the app or at the address published on propcarers.com.

Pakistan has no comprehensive data protection statute in force. The Personal Data Protection Bill has been through several drafts and has not been enacted. We state that plainly rather than implying protections that do not yet exist in law.

The rules that do apply to us include:

• the Prevention of Electronic Crimes Act 2016, which makes unauthorised access to your data and its unlawful disclosure criminal offences;
• the Electronic Transactions Ordinance 2002, under which the records and consents you give electronically here have legal effect;
• the Anti-Money Laundering Act 2010 and the rules for Designated Non-Financial Businesses and Professions, under which estate agents must identify their customers, keep those records, and report suspicious transactions;
• the Punjab Rented Premises Act 2009, the Punjab Land Revenue Act 1967, the Registration Act 1908 and the Stamp Act 1899, which govern tenancy and the transfer of property in Punjab and determine what we must record and retain;
• the Income Tax Ordinance 2001, including withholding obligations on rent, and Punjab Revenue Authority requirements on agency services.

Where this policy promises you more than Pakistani law currently requires, we intend to be held to the promise.

We do not collect payment card details, and we do not use advertising or third-party analytics trackers.

This is the part most people actually want answered.

• PropCarers staff can see everything you enter, including your CNIC, your nominee and your bank details. That access exists so we can verify you, pay you, and broker your sale. It is limited to staff who need it.
• Other users can never see your identity. When your property is listed for sale, buyers see the property, its size, its price and its photographs. They do not see your name, your phone number, your email, or the land-record numbers that would identify you in the revenue record.
• If you enquire about a property, the owner is not told who you are. Your enquiry and your contact details go to our team, who make the introduction.
• Your nominee, bank details and CNIC are never shown to another user under any circumstances.

We share your information outside PropCarers only:

• with you, or with someone you instruct us in writing to deal with;
• where the law requires it — including a court order, a lawful request from the Federal Board of Revenue, the Financial Monitoring Unit, the Federal Investigation Agency, or a Punjab revenue or registration authority;
• with professionals acting for a specific transaction of yours, such as a valuer preparing a report you requested, or a lawyer handling a transfer;
• with our email provider, solely to deliver messages such as a password reset.

We do not sell your information, and we do not share it for anyone else’s marketing.

Your data is stored on a server located in Finland, operated by our hosting provider. Documents you upload are stored on the same server. Access requires authentication, and traffic is encrypted in transit.

We keep backups so your records survive a failure. Backups are retained for a limited period and then destroyed.

While your account is open, we keep your information so the service works. After you close your account we delete what we can, but we must retain some records:

• identity and transaction records for at least five years, as required of estate agents under the Anti-Money Laundering Act 2010;
• records relevant to tax for the period required by the Income Tax Ordinance 2001;
• documents evidencing a completed sale or tenancy, for as long as a dispute over it could still arise.

Anything not covered by those obligations is deleted.

• See what we hold. Most of it is visible in the app. Ask us and we will provide the rest.
• Correct it. You can edit your details, nominee and bank information yourself in Settings at any time.
• Withdraw a listing. You can take your property off the market yourself, without asking us.
• Ask us to delete your account. We will, apart from the records listed in section 7, and we will tell you what we had to keep and why.
• Refuse. You do not have to give us your CNIC, nominee or bank details. Without your CNIC and bank details we cannot pay money to you, so parts of the service will not work.

Passwords are stored hashed with argon2id and are never readable by us or recoverable in plain text. Sessions use signed, HTTP-only cookies. Traffic is encrypted. Access to your records is restricted by role, and administrative actions are recorded.

No system is immune. If your personal data is exposed in a way likely to harm you, we will tell you what happened, what was affected and what we are doing about it, without waiting for a law to compel us.

The service is for adults holding property in their own name. We do not knowingly collect information from anyone under 18.

If we change this policy in a way that affects how we use information you have already given us, we will tell you in the app before it takes effect.