Privacy Policy

1. Who we are

Nelamy operates a technology platform for auctions and Buy Now listings in Pakistan. What Nelamy sells to vendors is membership (listing tools and quota). Nelamy is not the buyer or seller of listed goods, not an escrow agent, not a bank, and not a party to product sales between users.

Nelamy does not collect payment for products. Product money is paid by the buyer directly to the seller. Information about those payments is primarily between those two users. Nelamy is not responsible for how they use or store each other’s details.

Address for notices: Executive Business Center, Hall No. 2, Basement Floor, commercial plot no. 1, 2, 3 & 4, FECHS, Sector E-11/2, Pakistan.

2. No extra privacy obligations

To the fullest extent permitted by Pakistani law:

• Nelamy does not undertake to process data only for listed purposes, to keep it accurate, to delete it on request, to notify you of incidents, or to honour “do not sell / do not share” style requests, except where a mandatory law that applies to us actually requires that and cannot be excluded;
• nothing on the Platform (including phrases such as “we never share your details”) is a binding promise, indemnity, or guarantee;
• Nelamy has no duty to monitor other users, to police how they use information they receive from you, or to compensate you if they misuse it;
• third-party tools (hosting, authentication, storage, email, analytics, payments, social login) operate under their own terms. Nelamy is not liable for their acts or omissions;
• you use the Platform at your own risk as regards confidentiality, integrity, and availability of information.

Where a mandatory law imposes a duty we cannot exclude, that duty applies only to the minimum extent required, and only to personal data that we actually control as operator of the Platform — not to data held solely by a buyer, seller, bank, JazzCash, Easypaisa, courier, or other third party.

3. Information we may collect

We may collect information you provide, information generated by your use of the Platform, and information from third parties. We are not required to collect only the items below, and we may collect more or less as operations require.

3.1 Account and profile

Name, email, password or Google sign-in identifiers, mobile number, city, role (buyer / seller / admin), store details, and similar account fields.

3.2 Listings and media

Titles, descriptions, categories, prices, cities, photos, videos, payment-method labels you choose to show buyers, and other listing content. Listing content is intended to be public.

3.3 Bids, orders, and messages

Bid amounts, Buy Now orders, delivery name, phone, city, address, notes, in-app messages, and related timestamps. These are shared with the other party to the listing or conversation as needed to run the Platform.

3.4 Membership and support

Plan chosen, payment confirmations or receipts you send us (for example on WhatsApp), contact-form submissions, emails, and support correspondence. Product payments to sellers are not processed by Nelamy.

3.5 Device and usage

IP address, browser type, device identifiers, pages viewed, language choice, cookies or local storage, log data, crash or error information, and approximate location derived from IP if a provider supplies it. We may use analytics tools.

3.6 Information from others

Google (if you use Google sign-in), Firebase and related Google Cloud services, email providers, payment or messaging apps you contact us on, and other users (for example a report about you, or a buyer’s order details).

4. How we may use information

We may use information for any purpose we reasonably consider useful to operate, protect, improve, or market the Platform, including without limitation to:

• create and administer accounts, listings, bids, orders, stores, and membership;
• show listings publicly and connect buyers with sellers;
• send transactional notices (bids, wins, orders, membership, password reset) by email, in-app inbox, or other channels;
• review listings and vendors, prevent fraud, abuse, spam, and illegal activity;
• respond to enquiries, disputes, and legal process;
• analyse usage, fix faults, and develop features;
• send service or promotional messages (you may ignore them; we are not obliged to offer an unsubscribe mechanism except where a mandatory law requires it);
• transfer the business or enforce our Terms.

We do not need a separate consent for each use. Using the Platform is sufficient acknowledgement.

5. Public information

Live listings, store pages, usernames or seller names, bid counts, prices, cities, photos, and similar marketplace content are public (or visible to other users). Search engines and third parties may copy them. Nelamy has no obligation to keep public listing data private, to un-index it, or to stop other people from screenshotting or re-posting it.

Do not put in a listing or message anything you are not willing to have seen by other users, Nelamy staff, or the public.

6. When we may share information

We may share information, without further notice to you, with:

• Other users — as needed for a listing, bid, Buy Now order, store page, or message (for example seller payment labels, buyer delivery details, your display name);
• Service providers — hosting, databases, authentication, file storage, cloud functions, email, analytics, recaptcha / abuse tools, and similar processors (currently including Google Firebase / Google Cloud and email tools such as EmailJS). They process data under their own rules;
• Payment and messaging apps you choose — JazzCash, Easypaisa, banks, WhatsApp, and similar. Product money never sits with Nelamy; those providers are not our sub-processors for product settlement;
• Authorities and advisers — if we believe disclosure is useful for law, regulation, court order, investigation, safety, or to protect Nelamy’s rights;
• Business transferees — if we sell, merge, finance, or reorganise the Platform or related assets;
• Anyone you ask us to, or anyone we reasonably think you have authorised by using a feature.

We have no obligation to obtain your prior consent for these disclosures, to give you a copy of what was shared, or to notify you after the fact, except where a mandatory law that applies to us actually requires it.

7. Third-party services (not our responsibility)

The Platform relies on independent providers, including Google (Firebase Authentication, Firestore, Cloud Storage, Cloud Functions, Analytics, and Google sign-in) and email / messaging vendors. Their privacy policies and security practices apply to data they hold. Nelamy does not control those systems and accepts no responsibility for outages, breaches, international transfers, retention, or use by those providers.

Links to other websites, WhatsApp, social networks, or seller payment pages are provided for convenience. Their privacy practices are not ours.

8. Cookies and local storage

We may use cookies, local storage, session storage, and similar technologies for login, language, interface state, listing cache, and similar functions. You can block or clear them in your browser. If you do, parts of the Platform may stop working. We are not obliged to obtain a separate cookie consent banner except where a mandatory law that applies to us requires it.

9. Security — no guarantee

We may take steps we consider reasonable (for example encrypted connections and access controls). No method of transmission or storage is fully secure.

Nelamy does not warrant that information will not be accessed, disclosed, altered, lost, or destroyed without authorisation. You are responsible for your password, device, and for what you choose to publish or send to other users. Nelamy has no obligation to notify you of a suspected incident except where a mandatory law that applies to us requires notification and cannot be excluded.

10. Retention

We may keep information for as long as we consider useful for operations, disputes, fraud prevention, backups, analytics, legal holds, or membership records — including after you stop using the Platform. We have no obligation to delete data on a fixed timetable, to honour a deletion request, or to remove copies from backups, logs, or other users’ inboxes, except where a mandatory law that applies to us requires it and technically feasible deletion is reasonably within our control.

11. Requests about your information

You may email support@nelamy.com to ask about your account. We may, at our discretion, correct an obvious error, close an account, or withhold information. We are not obliged to:

• provide a portable copy of all data;
• delete listings, bids, orders, messages, or logs that other users or the Platform still need;
• identify every processor or every copy;
• restrict processing while we review a request;
• respond within a set number of days.

We may refuse requests that are unfounded, excessive, identity-uncertain, or that would harm security, other users, or our legal position. Closing an account does not unwind product sales or membership records we keep.

12. Children

The Platform is for persons 18 years or older. We do not knowingly offer accounts to children. If you believe a child has submitted information, you may tell us; we may delete the account if we choose, without admitting any duty.

13. Storage location

Information may be stored and processed in Pakistan and in other countries where our providers operate (including outside Pakistan). By using the Platform you accept that transfer. Nelamy does not guarantee that foreign laws will be equivalent to Pakistani law and has no obligation to implement additional cross-border safeguards except where a mandatory law that applies to us requires it.

14. Other users

When you bid, buy, sell, or message, the other user receives information about you. Nelamy does not control their devices, inboxes, screenshots, or later use of that information. They are not our agents. Any complaint about how a buyer or seller handles your data must be taken up with that person. Nelamy is not liable for their disclosure, loss, or misuse of your information.

15. Disclaimer and liability

Information on the Platform is provided “as is”. To the fullest extent permitted by Pakistani law, Nelamy disclaims all warranties regarding privacy, security, accuracy, and availability of data.

Nelamy is not liable for: unauthorised access; leakage by a user or a third-party provider; loss of listing photos or messages; failure of email or push delivery; search-engine copies of public listings; or any indirect, incidental, special, or consequential loss, including lost profits or lost data.

If, despite this Policy, a court finds Nelamy liable in connection with personal data, our total liability is limited as set out in the Terms & Conditions (membership fees actually paid to us in the three months before the claim, where that cap is allowed). Nothing here excludes liability that cannot be excluded by law (including fraud).

16. Changes

We may change this Policy at any time by posting a new version on this page. The effective date at the top is the version that applies. We have no obligation to email you about a change. Continued use after the new date is acceptance. If you do not agree, stop using the Platform.

17. Governing law

This Policy is governed by the laws of the Islamic Republic of Pakistan. Courts at Islamabad have exclusive jurisdiction, unless a mandatory law says otherwise. Rights that exist only under foreign privacy statutes (including the EU GDPR, UK GDPR, or California CCPA/CPRA) are not granted by this Policy and are not accepted as applying to Nelamy merely because you can reach the website from abroad.

18. Contact

Questions about this Policy may be sent to the address below. Sending a question does not create a duty to act, to investigate, or to reply, except where a mandatory law that applies to us requires a response.