Privacy policy

1. What we collect

You give us: name, date of birth, gender, height, marital status, children, city, area, country, residency status, religion, sect, caste, mother tongue, education, occupation, employer type, income band, family background, partner preferences, About text, photographs, mobile number, email address, guardian name and number, and identity documents where you submit them for verification.

We record automatically: IP address, browser and device type, pages viewed, searches run, requests sent, accepted and declined, and login times.

We do not collect: your card number. Payments are handled by the payment provider; we receive only a confirmation and the last four digits.

2. Photographs and contact numbers

This is the part that matters most, so it is stated plainly.

• Photographs are stored encrypted at rest and are never publicly accessible.
• No photograph is released to another member except on your explicit acceptance of a specific request.
• Unlocked photographs are watermarked with the viewing member's ID and served at reduced resolution.
• Your mobile number is never displayed. It is released only to a member whose request you have accepted, or, if you chose a guardian, their number is released in place of yours.
• Every unlock and every view is logged, and you can see and revoke that access from your dashboard.
• Our staff cannot release your photographs or number to anyone. There is no administrative override.

3. Why we process your data

• To create and display your profile to other members (performance of our contract with you).
• To operate the request and matching system.
• To verify identity and prevent fraud (legitimate interest and, for identity documents, your consent).
• To take payment and issue invoices (contract and legal obligation).
• To send service notifications, and marketing only where you opted in.
• To respond to reports, complaints and lawful requests from authorities.

4. Who we share with

We do not sell, rent or trade member data. We share only with:

• Payment processors, to take your payment.
• Email and SMS providers, to deliver notifications.
• Cloud hosting and storage providers, who store the data on our instruction.
• Law enforcement, where legally compelled.

Other members see only what your profile shows, plus whatever you release by accepting a request.

5. Identity documents

We do not collect identity documents. We do not ask for a CNIC, a passport, or a mobile number, and we have no facility to upload one. The only identifier we hold for your account is your email address.

6. How long we keep data

• Active profiles: for as long as your account exists.
• Deleted profiles: removed within 30 days, including photographs.
• Request and access logs: 12 months, for dispute resolution and abuse investigation.
• Payment records: 7 years, as tax law requires.
• Identity documents: we do not collect them. If you email one to us by mistake, it is deleted on receipt.

7. Your rights

You may access, correct, export or delete your data, withdraw consent, object to processing, or complain to a supervisory authority. Members in the UK and EU have these rights under UK GDPR and the GDPR respectively; we extend the same rights to all members regardless of where they live.

Most of this is self-service: edit your profile, revoke access, pause, or delete your account from Account Settings. For anything else, email support@byahme.com and we will respond within 30 days.

8. International transfers

Our members are worldwide and our infrastructure may store data outside your country. Where data leaves the UK or EEA we rely on standard contractual clauses or an equivalent safeguard.

9. Cookies

We use cookies that are strictly necessary for login and security, plus analytics cookies to understand how the site is used. We do not use advertising or cross-site tracking cookies. You can refuse analytics cookies from the banner without losing any functionality.

10. Children

The service is for adults aged 18 and over. We do not knowingly collect data from anyone under 18, and any such profile found is deleted immediately.

11. Security

Data is transmitted over HTTPS and stored encrypted. Access to member data by our staff is restricted, logged and limited to what a support task requires. No system is perfectly secure, and we will notify affected members and the relevant authority promptly in the event of a breach that presents a risk.

12. Contact

Privacy questions or requests: support@byahme.com