1. Introduction
THE BURGER & CO ("we," "us," or "our") operates the website burgetcopk.com and the associated mobile application (collectively, the "Services"). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our Services. We are committed to protecting your privacy and complying with applicable data protection laws, including the requirements of the Google Play Developer Program Policies and Pakistan's Personal Data Protection framework.
By using our Services, you agree to the collection and use of information in accordance with this Policy.
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: Name, email address, phone number, and password when you create an account.
- Order Information: Delivery address, items ordered, special instructions, and payment details.
- Communications: Messages, feedback, and support requests you send us.
2.2 Information Collected Automatically
- Device Information: Device model, operating system version, unique device identifiers, and mobile network information.
- Log Data: IP address, browser type, pages visited, time and date of visit, and time spent on pages.
- Location Data: Approximate or precise location (with your permission) to enable delivery, restaurant locator, and personalized offers.
- Cookies and Similar Technologies: To remember your preferences and analyze site traffic.
2.3 Permissions Requested by the Mobile App
- Location: To calculate delivery fees and show nearest branch.
- Camera: Optional — to upload a profile picture or scan promotional QR codes.
- Notifications: To send order status updates and offers.
- Storage: To cache menu images for faster loading.
You may revoke any of these permissions at any time via your device settings.
3. How We Use Your Information
- To process and deliver your orders.
- To create and manage your account.
- To send transactional messages (order confirmations, receipts, delivery updates).
- To provide customer support.
- To improve our menu, application performance, and user experience.
- To send promotional communications (only where you have opted in).
- To detect, prevent, and address fraud, security, or technical issues.
- To comply with legal obligations in Pakistan and applicable jurisdictions.
4. How We Share Your Information
We do not sell your personal information. We share information only in the following limited situations:
- Service Providers: Payment processors, delivery riders, SMS/email providers, hosting, and analytics services who process data on our behalf under confidentiality obligations.
- Legal Requirements: When required to comply with a court order, subpoena, or applicable law.
- Business Transfers: If we are involved in a merger, acquisition, or asset sale, your information may be transferred.
- With Consent: For any other purpose disclosed at the point of collection with your explicit consent.
5. Data Security
We implement industry-standard technical and organizational safeguards — including TLS encryption in transit, hashed password storage, and restricted server access — to protect your data. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
6. Data Retention
We retain personal information only as long as necessary for the purposes outlined in this Policy, or as required by law. Account data is retained while your account is active and for up to 24 months after deactivation for regulatory and accounting purposes.
7. Your Rights and Choices
- Access: Request a copy of the personal information we hold about you.
- Correction: Update inaccurate or incomplete data.
- Deletion: Request deletion of your account and associated personal data.
- Opt-out: Unsubscribe from marketing emails or push notifications at any time.
- Data Portability: Request your data in a machine-readable format.
8. Account Deletion
You may delete your account and associated personal data at any time by:
- Selecting Settings → Delete Account inside the mobile app; or
- Emailing privacy@burgetcopk.com with the subject "Account Deletion Request".
Deletion is permanent and takes effect within 7 business days. Certain transaction records may be retained where required by tax or regulatory law.
9. Children's Privacy
Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly. Parents or guardians who believe their child has provided us information may contact us at privacy@burgetcopk.com.
10. Third-Party Services
Our Services may contain links to or integrations with third-party services (such as payment gateways and mapping providers). Their privacy practices are governed by their own policies. We encourage you to review those policies before use.
11. International Data Transfers
Your data is primarily stored on servers located in Pakistan and Singapore. Where data is transferred internationally, we ensure appropriate safeguards are in place consistent with applicable data protection laws.
12. Changes to This Privacy Policy
We may update this Policy from time to time. Material changes will be notified via email, in-app notice, or a prominent notice on our website at least 14 days before taking effect. The "Last Updated" date at the top reflects the latest revision.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:
- Email: privacy@burgetcopk.com
- Phone: +92 321 768 5412
- Address: Plot No. C-9, Services Road, Karachi, 74200, Pakistan