PRIVACY & DATA

Your information, used with purpose.

CashKar uses personal and device information to quote, verify, diagnose, sell, repair and support iPhones. This policy explains what we collect, why we need it, who may process it and the choices available to you.

Policy version 1.0•Updated 24 September 2026•Applies online and in person
1
Purpose-limitedData linked to a stated service
ID
No Apple passwordUnlock the device yourself
↻
Separate erasureInspection doesn't authorize wipe
✓
Privacy choicesAccess, correction and opt-out
01 · Scope and principles

One policy for the full CashKar journey.

It covers the CashKar website and portal, Experience Centre interactions, iPhone purchases, trade-ins, inspections, CashKar Device Passport™, repairs, warranty, returns, Guaranteed Buy Back™ and support communications.

PrincipleWhat it means
Minimum necessaryCollect what the service needs.We should not ask for unrelated personal data or unrestricted access to your device.
Clear purposeExplain why information is used.Quoting, diagnostics, fulfilment, fraud prevention, claims and legal records are kept distinct.
Controlled accessLimit access by role and need.Device, customer and payment records should be available only to authorized personnel and service providers.
Time limitedKeep records only as long as needed.Legal, tax, fraud, warranty and dispute records may need longer retention than an incomplete enquiry.
02 · Information collected

The data depends on the service you choose.

Not every category applies to every customer. CashKar should collect data directly from you, from the device being assessed and from authorized verification or service providers.

IDENTITY & CONTACT

Who you are and how to reach you

  • Name, phone, email and address
  • Account, signature, consent and OTP records
  • CNIC/passport details only where identity, ownership, payment or compliance verification requires them
  • Authorized representative details
ORDER & PAYMENT

Your transaction record

  • Quote, order, invoice, product and service history
  • Delivery, pickup, appointment and custody details
  • Payment status, bank/wallet destination and transaction references
  • Refund, financing, tax and accounting records
DEVICE & DIAGNOSTICS

Identity and technical condition

  • IMEI/serial, model, storage, colour, iOS and activation status
  • Battery health/cycles and supported functional tests
  • Parts & Service History and repair/OEM-part signals
  • PTA/DIRBS, blacklist, network, finance, lock and ownership-verification results
CONDITION & CUSTODY

Evidence about the physical phone

  • Device photographs or video
  • Cosmetic grade and disclosed damage
  • Accessories, packaging and handover records
  • Warranty, return, repair and tamper evidence
WEBSITE & ACCOUNT

How digital services are used

  • IP address, browser, device and operating-system details
  • Cookie identifiers, session, security and activity logs
  • Pages viewed, referrals and form progress
  • Account preferences and authentication events
COMMUNICATIONS

What you share with us

  • Support messages, emails and WhatsApp conversations
  • Complaint, review and claim evidence
  • Marketing preferences and unsubscribe records
  • Any photos, documents or comments you submit
Where information comes from: you; the phone presented for inspection; CashKar personnel and systems; Phonecheck and other authorized technology providers; payment, courier and communication providers; and lawful PTA/DIRBS, lost/stolen, blacklist, ownership, fraud-prevention or public-authority sources. CashKar should not obtain information by bypassing a device lock or accessing an account without authority.
03 · How information is used

Each use must support a defined purpose.

CashKar may combine relevant records when needed to complete a transaction, confirm a device, resolve a claim or protect customers and the business from fraud.

₨

Quote, buy, sell and fulfil

Generate a provisional trade-in value, create orders, confirm inventory, collect or issue payment, arrange delivery/pickup and provide transaction documents.

✓

Diagnose and certify

Run authorized checks, create the CashKar Device Passport™, calculate CashKar Health Score and CashKar Score, and document sale-time condition.

ID

Verify identity and ownership

Match customer, device and payment details; check IMEI/PTA/DIRBS and relevant lost, stolen, lock, finance or fraud indicators.

↻

Handle after-sales service

Manage repairs, returns, warranty, Guaranteed Buy Back™, complaints, custody and evidence-based decisions.

⚙

Operate and improve services

Secure the website and portal, troubleshoot, measure performance, train authorized teams using controlled records and improve products or processes.

§

Meet legal and risk obligations

Maintain tax, accounting, audit and transaction records; respond to lawful requests; investigate misuse; and establish or defend legal claims.

Why CashKar is permitted to process data: depending on the activity and applicable law, processing may be necessary to take steps you request or perform a contract, meet a legal obligation, protect legitimate business and customer interests, or act on your consent. Marketing consent is separate from service communications and can be withdrawn for future messages.
04 · Device inspection privacy

Diagnostics are not permission to explore your phone.

CashKar and Phonecheck-supported tools may access technical information needed for assessment. Inspection does not by itself authorize repair, opening, iOS update, factory reset, secure erasure or ownership transfer.

LIMITED INSPECTION ACCESS

Technical evidence, not personal content.

Authorized staff should restrict access to supported tests, device identifiers, account/lock status, condition evidence and the information needed to verify the transaction.

Staff may incidentally see a notification, wallpaper, contact name or other on-device content during ordinary testing. CashKar should not copy or use that content unless it is necessary for the requested service, safety, fraud prevention or a legal obligation.
Unlock it yourselfYou may be asked to unlock the device for testing. Do not disclose your Apple Account password; CashKar does not need or retain it.
Back up firstBack up important data, remove the physical SIM/accessories and hide sensitive notifications before handover.
Supported testingDisplay, touch, cameras, audio, buttons, charging, battery, sensors, biometrics, cellular, Wi‑Fi, Bluetooth, GPS and other available functions.
Identifiers and historyIMEI/serial, model/storage, iOS, battery, locks, Parts & Service History, diagnostic results and condition photographs.
Separate authorizationOpening, repair, reset, erasure, software update or ownership transfer requires the applicable separate consent or transaction document.
Test communicationsA test call, SMS or mobile-data session may be used where necessary; ordinary carrier charges may apply.
!

Data erasure is a separate controlled step

If secure erasure is included after an accepted trade-in or separately authorized service, CashKar may use a Phonecheck-supported process and retain an erasure result/certificate. No technology can justify an absolute “zero risk” promise. Customers should still back up what they need, remove accounts and follow the handover instructions.

05 · Sharing and service providers

Information is shared only for the relevant job.

CashKar may disclose the minimum necessary information to vetted recipients that help deliver, verify, support or protect the service.

Diagnostics and technology

Phonecheck, portal, hosting, cloud, security, CRM and communication providers may process identifiers, diagnostics, logs or support information.

Payments and finance

Banks, wallets, gateways, refund and financing providers receive transaction details needed to authorize, settle, reverse or reconcile payments.

Delivery and custody

Authorized couriers, pickup partners and Experience Centre teams receive contact, address, order and custody details needed for handover.

Verification and compliance

PTA/DIRBS and other authorized verification, fraud, blacklist, ownership or law-enforcement sources may receive device/customer details where lawful and necessary.

Repair and after-sales

Authorized technicians, parts/service partners, insurers or advisers may receive the case, device and evidence required to assess or complete the service.

Legal and business events

Auditors, professional advisers, authorities and a genuine successor in a merger, financing or asset transaction may receive records subject to lawful safeguards.

CashKar does not sell personal data as a product or provide it to data brokers for money.

Service providers should be contractually limited to the relevant service, confidentiality, security, retention and lawful-use requirements. They may also have independent legal duties explained in their own privacy notices.

06 · Retention and deletion

Different records have different useful lives.

CashKar keeps information for the shortest period reasonably needed for the purpose, then deletes, anonymizes or securely archives it unless a legal, fraud, safety or dispute hold applies.

Enquiries & incomplete requestsFor follow-up, customer support, abuse prevention and a limited operational audit period.
Orders, invoices and paymentsFor fulfilment and the applicable accounting, tax, audit, refund, chargeback and legal-record period.
KYC, ownership and IMEI checksFor lawful transaction verification, fraud prevention, traceability, disputes and authority requests.
Device Passport & service evidenceFor certification, warranty, return, repair, Buy Back™, resale traceability and the relevant claim/audit period.
Marketing preferencesUntil you opt out or the record is no longer needed; a minimal suppression record may remain to respect the opt-out.
Cookies, logs and CCTVAccording to the stated cookie life, security need or on-site notice; incident evidence may be preserved longer.
07 · Cookies and communications

You should be able to control optional tracking.

Cookies and similar technologies may keep the site secure, remember settings, measure performance and—only where configured and permitted—support advertising or campaign measurement.

REQUIRED

Essential

Security, session, checkout, authentication, load balancing and fraud prevention. The service may not work correctly without these.

OPTIONAL

Preferences

Remember language, location, form progress or display choices when that functionality is offered.

OPTIONAL

Analytics

Understand site performance and aggregated user journeys. Non-essential analytics should follow the available consent settings.

OPTIONAL

Marketing

Measure campaigns or personalize advertising where CashKar uses such tools and you have the applicable choice.

Marketing choices: Transactional messages about a quote, order, appointment, device, payment, safety or claim are not marketing. Promotional email, SMS, WhatsApp or calls should provide an opt-out. You can unsubscribe without losing an unrelated CashKar service.
08 · Security and international processing

Reasonable safeguards, with honest limits.

CashKar should apply administrative, physical and technical controls appropriate to the sensitivity of customer, identity, payment and device records.

People and access

Role-based access, confidentiality duties, staff training, approval controls and logging for sensitive actions.

Systems and records

Secure configuration, authentication, encryption where appropriate, backups, monitoring, patching and controlled deletion.

Physical custody

Intake IDs, device/IMEI matching, condition records, controlled work areas and logged handovers while a phone is held.

Processing outside Pakistan: Phonecheck, cloud, communication, analytics or other providers may process information in countries outside Pakistan. CashKar should assess those providers and use contractual, access, security and minimization measures appropriate to the transfer. Local laws in another country may differ from Pakistani law.

No website, transmission, device or storage system can be guaranteed completely secure. If CashKar identifies a security incident, it should investigate, contain and remediate it, preserve necessary evidence and notify affected people or authorities where applicable law requires.

09 · Your choices and requests

Ask what CashKar holds and how it is used.

Subject to applicable law and necessary verification, you may request action on personal information connected with you.

AccessAsk for a summary or copy of relevant personal information CashKar holds about you.
CorrectionAsk CashKar to correct inaccurate or incomplete contact, account or transaction information.
DeletionAsk for deletion where the record is no longer necessary and no legal, fraud, contract or claim exception applies.
Withdraw consentWithdraw a consent for future processing without affecting processing already completed lawfully.
Marketing opt-outStop promotional communication using the unsubscribe option or by contacting support.
Question or complaintAsk for an explanation or raise a concern about collection, sharing, retention or device handling.
10 · Frequently asked questions

Practical answers about your data and phone.

Privacy works best when the purpose is clear.

Tell us which CashKar service, order, phone or interaction your request relates to.

This policy should be read with the relevant CashKar quotation, invoice, consent, warranty, return, repair, trade-in or Guaranteed Buy Back™ terms. If CashKar materially changes how information is used, the updated policy should be posted with a new effective date and, where required, additional notice or consent. Nothing in this policy limits rights that cannot lawfully be excluded under applicable Pakistani law.

Value My iPhone