ISH SAF Privacy Policy
Last updated: 21 September 2026
This policy explains how ISH SAF handles information in the ISH app and its business services.
Information we collect
- Account and business details, including your name, phone number, email where supplied, CNIC where supplied, city, market, shop or workshop name, and address.
- Orders, payments, payment-slip images, claims, QR scans, points, and reward or cash-redemption details, including payout account details.
- Location, with your permission, for staff attendance and shop directions. Scan requests may include location or device information for security.
- Technical request and error information needed to operate and secure the service.
Camera, photos, and location
The camera is used to scan QR codes and capture payment slips. Selected photos are used to read QR codes or upload payment proof. Staff location is used when starting or ending a work day and viewing shop directions. You can control these permissions in device settings; denying a permission may prevent the related feature from working.
How we use and share information
We use this information to manage accounts, orders, payments, loyalty rewards, staff attendance, support, and fraud prevention. Relevant information is available to authorized ISH teams and business partners involved in your transactions. Hosting providers process information needed to deliver the service. We do not sell your personal information.
Account deletion and retention
In the app, open Profile and select Delete Account. Confirm using your current password. This permanently removes your account identifiers and personal profile details from the active database, removes staff location history, and prevents further sign-in. This is irreversible.
De-identified internal references and transaction history remain to preserve accounting and reward records. Shared business records and financial documents, including payment proofs and claims, may be retained for accounting, dispute resolution, or applicable legal obligations. Deleting one account does not delete other users' accounts or shared organizations. Backup copies may remain until the backups expire under our backup retention practices; they are not used to restore access to a deleted account.
Your choices
You can change your password in the app, manage device permissions, delete your account, or contact us to request access to or correction of your personal information. If you cannot access your account, contact us; we may verify your identity before processing a request.
Security and children
We use HTTPS for network communication, password hashing, and access controls. The service is intended for business partners and staff, not children under 13.
Contact
For privacy questions or data requests, email info@ish-motorcycleparts.com.