Privacy Policy

MOBILISTAN (PRIVATE) LIMITED (“Mobilistan”, “we”, “us”) sells mobile phones on a Sharia-compliant Musawamah deferred sale. We are incorporated in Pakistan with the Securities and Exchange Commission of Pakistan (CUIN 0269128, incorporated 12 September 2024), and we are responsible for the personal information described in this policy.

Registered office: Flat No. 5, Opposite Umer Masjid, Faiz Muhammad Road, Zarghoon Town, Quetta, Balochistan. Head office: Al Sami Plaza, Art School Road, Quetta. Email support@mobilistan.pk, telephone +92 317 8600078.

This policy applies when you visit mobilistan.pk, use a Mobilistan app (including the MPay payment app), apply for or buy a phone at a Mobilistan branch or a partner shop, pay an instalment, or contact us.

It also explains how we handle information about people you name in an application, such as your guarantor and reference. The Mobilistan Team app used by our own staff and partner shops is covered by separate staff notices.

We handle personal information in accordance with the laws of Pakistan, including the Prevention of Electronic Crimes Act, 2016, the Electronic Transactions Ordinance, 2002, and, for credit reports, the Credit Bureaus Act, 2015. Where a comprehensive personal data protection law comes into force in Pakistan, we will comply with it, and we already follow the principles it is expected to require: collecting only what we need, using it only for stated purposes, keeping it secure and respecting your rights.

• To confirm your identity and prevent fraud and identity theft
• To assess your application, including by contacting your guarantor and reference and, with your consent, checking your credit history
• To conclude your Musawamah sale, hand over the phone and keep a record of your Sale Agreement
• To run your account: calculate what is due, record payments and show you your schedule
• To send verification codes, payment reminders, final notices before a phone is restricted, and receipts, by WhatsApp, app notification, SMS or telephone
• To operate device security as described in section 6
• To follow up unpaid instalments courteously, and to establish or defend legal claims
• To keep accounting and tax records and meet our other legal obligations
• To allow our Sharia advisor to review sample transactions, confirming our sales follow the approved Musawamah structure
• To keep our systems secure and improve our website and apps

Every phone sold on instalments has device security installed before hand-over. It is the phone maker’s own device-management service, provided through our official partnerships with Samsung, OPPO, Infinix, TECNO, itel and Villaon.

To operate it, we share the phone’s IMEI and its payment status with the device-security service for your phone’s brand. It lets us show reminders on the phone and, as set out in section 7 of our Terms & Conditions, restrict the phone if an instalment remains unpaid, and release it once you pay. It is not used to access your messages, photos, calls or contacts. It is removed permanently when the total sale price has been paid.

When you apply, we ask for your consent to check your credit history. With your consent, we share your CNIC number, name, father’s or husband’s name, date of birth, city, address, monthly income and the amount of your application with a credit bureau licensed by the State Bank of Pakistan, and receive your credit report.

We use the report only to decide your application and manage your account. We keep it with the same protections as your other documents and never sell it. You may ask for a copy of the credit information we hold about you.

We share personal information only where needed, and only with:

• JazzCash, to process payments you make to us. It receives the amount, the reference and the wallet number used.
• The device-security service for your phone’s brand, as described in section 6.
• A credit bureau licensed by the State Bank of Pakistan, with your consent, as described in section 7.
• The partner shop or branch that handles your application and sale, limited to what it needs for that sale.
• Our Sharia advisor, Al Hijrah Sharia Advisory Services, which may review sample transactions under a duty of confidentiality.
• Our technology providers: Google (cloud hosting, database and file storage, app notifications, reCAPTCHA, Play Integrity and Analytics) and Meta (WhatsApp messages and, where used, advertising measurement). They process information on our behalf.
• Our professional advisers, such as accountants, auditors and lawyers, under a duty of confidentiality.
• Courts, the police or regulators, where the law requires it or where it is needed to establish, exercise or defend legal rights.
• A buyer or successor of our business, if the business or its accounts are transferred, subject to this policy.

We do not sell personal information, and we never share your CNIC, your documents or your payment records with advertisers or data brokers.

Our database and the documents and photographs you give us are stored on Google Cloud in its Doha, Qatar region. The website is served from Google’s Singapore region, and some of our service providers process information in other countries. We may keep protected backup copies in other Google Cloud regions for a limited period. Wherever it is held, your information is protected in line with this policy. By using our services, you understand that your information may be processed outside Pakistan.

We use encrypted connections, access-controlled storage and role-based permissions, so each member of staff and each partner shop can see only what their role requires. Our systems check that requests come from our genuine website and apps, and limit repeated attempts to sign in, request codes or search.

No system is completely secure. Keep your verification codes private. We will never ask you for a verification code, a password, or your JazzCash MPIN or PIN by telephone, WhatsApp or email. If anyone claiming to be from Mobilistan asks for one, do not share it and contact us.

We keep records of each sale, including the Sale Agreement, payments and related documents, for at least seven years after the account closes, to meet accounting and tax requirements and to deal with any dispute or warranty claim.

If an application does not lead to a sale, we keep it only for as long as we need it to deal with the application, prevent fraud and answer any related query, and then delete or anonymise it.

You may ask us to:

• give you a copy of the personal information we hold about you;
• correct information that is wrong or out of date;
• delete information we no longer need to keep;
• stop sending you marketing messages; and
• stop contacting you on WhatsApp, in which case we will use SMS or telephone instead.

You can ask us to delete your Mobilistan login at any time, on WhatsApp or by email, as set out at mobilistan.pk/delete-account (contact details below). This removes your login, profile and app notifications. It does not remove the records of a sale or its payments, which we must keep by law, and it does not end what is owed under a Sale Agreement.

Contact support@mobilistan.pk or +92 317 8600078. We may need to confirm your identity first, and we reply within thirty days.

When you give us your WhatsApp number, you consent to receiving verification codes, application updates, payment reminders, final notices before a phone is restricted, and receipts on WhatsApp, including on any alternate number you give us.

You may withdraw consent at any time by replying STOP, by blocking our number, or by contacting us. We will then send the same notices by SMS or telephone. In the MPay app, you can turn notifications off in your phone’s settings.

We send marketing messages about offers and new phones only if you have agreed to receive them, and every such message tells you how to stop them. Messages about your application, payments and account are not marketing and continue while your account is active.

mobilistan.pk uses cookies and similar browser storage for three purposes:

• Essential: to keep you signed in, remember your language and application progress, and keep the website secure, including the reCAPTCHA check. The website cannot work properly without these.
• Analytics: Google Analytics, to understand in aggregate how the website is used, so we can improve it.
• Advertising measurement: where used, the Meta Pixel, to learn whether people who saw our adverts on Facebook or Instagram visited our website. Meta handles this under its own privacy policy.

We never place your CNIC, documents or payment details in analytics or advertising cookies. You can clear or block cookies in your browser; if you block essential cookies, signing in and applying may not work. You can opt out of Google Analytics with Google’s opt-out add-on.

Our services are for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe we have, contact us and we will delete it.

We may update this policy. The date at the top shows when it last changed. We will tell you about significant changes by WhatsApp or in the app before they take effect.

For any question or complaint about your personal information, contact MOBILISTAN (PRIVATE) LIMITED, Al Sami Plaza, Art School Road, Quetta, Balochistan, Pakistan, at support@mobilistan.pk or +92 317 8600078. We acknowledge complaints within three working days and aim to resolve them within thirty days.