Privacy Policy

1. Introduction

Haya Naturals (SMC-Private) Limited (“Haya Naturals,” “we,” “us,” or “our”) is committed to protecting the privacy of our business clients. This Privacy Policy outlines how we collect, use, and protect the data associated with the provision of our B2B digital integration and IT solutions.

2. Scope of Policy

This policy applies solely to the business data and professional contact information of our verified corporate clients. As we do not onboard public consumers, this policy does not address personal consumer data.

3. Data We Collect

We collect necessary information to establish and maintain our B2B technology service agreements. This may include:

• Business Identification Data: Legal business name, registration number, business address, and compliance documentation.
• Professional Contact Data: Names, job titles, business email addresses, and phone numbers of authorized company representatives.
• Technical Integration Data: API access credentials, technical specifications, and logs necessary for secure, compliant, and reliable system connectivity. This does not include access to, or storage of, end-user payment or consumer data.

4. How We Use the Data

We use the collected data exclusively to:

• Verify the identity and compliance status of our business clients.
• Provide, maintain, and secure our API integration services and IT solutions.
• Communicate critical service updates, technical changes, and billing information.
• Ensure full transparency and compliance with our single-layer review structure.

5. Data Sharing and Disclosure

We do not sell or rent the business data of our clients. Data is only shared with third parties under the following conditions:

• Service Delivery: Where strictly necessary to integrate with approved digital payment infrastructures as part of our contracted service.
• Legal Compliance: When required by law, regulation, or mandatory governmental request from Pakistan authorities.

6. Data Security

We implement robust technical and organizational security measures to protect business data from unauthorized access, alteration, disclosure, or destruction. Access to data is restricted to authorized personnel who require it to perform their official duties.

7. Changes to the Policy

We reserve the right to modify this policy. Any significant changes will be communicated to our clients via email or through a notice on our platform.