1. Introduction
This Data Policy explains how MrBankers collects, uses, and protects your personal data in compliance with applicable data protection laws, including the Pakistan Protection of Personal Data Act and the General Data Protection Regulation (GDPR) for European users.
Our Promise: We are committed to transparency, accountability, and protecting your privacy. This policy outlines our data practices in clear, understandable terms.
2. Data Controller
MrBankers is the data controller for the personal data you provide to us. We are responsible for ensuring that your data is processed lawfully, fairly, and transparently in accordance with applicable data protection laws.
3. Data We Collect
3.1 Personal Information You Provide
- Account Data: Name, email address, phone number, username, password (hashed)
- Profile Data: Bio, location, profile photo, cover photo, social media links
- Content Data: Posts, comments, messages, stories, poll responses
- Communication Data: Messages sent to other users or administrators
- Transaction Data: Information related to financial tools and calculators usage
3.2 Data We Collect Automatically
- Usage Data: Pages viewed, time spent, interactions, clicks, navigation patterns
- Device Data: IP address, browser type, operating system, device type, screen resolution
- Location Data: Approximate location based on IP address
- Cookies: We use cookies to enhance your experience
- Activity Logs: Your actions on the platform for feed algorithms and personalization
4. How We Use Your Data
- Platform Operation: To provide, maintain, and improve our services
- Content Personalization: To customize your feed, recommendations, and notifications
- Notifications: To send you updates, alerts, and important messages
- Analytics: To understand how users interact with our platform
- Security: To protect your account and prevent fraud
- Legal Compliance: To comply with applicable laws and regulations
- Research: To improve our algorithms and user experience
5. Legal Basis for Processing
We process your data based on the following legal grounds:
- Contract: To fulfill our contract with you (providing platform services)
- Consent: When you have given explicit consent (e.g., for marketing)
- Legal Obligation: To comply with legal requirements
- Legitimate Interest: For our legitimate business interests (e.g., analytics)
6. Data Sharing
We do not sell your personal data. We may share data with:
- Service Providers: Hosting, email delivery, analytics, and other services
- Other Users: Public profile information is visible to other users
- Legal Authorities: When required by law or to protect our rights
- Business Transfers: In case of merger, acquisition, or sale of assets
7. Data Retention
- Active Accounts: Data is retained while your account is active
- Deleted Accounts: Data is deleted within 30 days of account deletion
- Content: Posts and comments remain visible unless deleted
- Logs: Activity logs are retained for 90 days for security
- Backups: Data may be retained in backups for up to 30 days
8. Data Security
- Encryption of data in transit (SSL/TLS)
- Encryption of sensitive data at rest
- Secure password storage (bcrypt hashing)
- Regular security audits and vulnerability scanning
- Access controls and authentication mechanisms
- Employee training on data protection and privacy
9. Your Rights
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Restrict processing of your data
- Portability: Receive your data in a portable format
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent at any time
- Lodge Complaint: Lodge a complaint with a data protection authority
10. Exercising Your Rights
To exercise your rights, contact us at privacy@mrbankers.com. We will respond within 30 days. You may need to verify your identity for security purposes.
11. Data Protection Officer
If you have concerns about how we handle your data, you can contact our Data Protection Officer at dpo@mrbankers.com.
12. International Data Transfers
Your data may be transferred to and processed in countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses.
13. Children's Privacy
Our platform is not intended for children under 13. We do not knowingly collect data from children. If we become aware of such data, we will delete it promptly.
14. Updates to This Policy
We may update this Data Policy periodically. We will notify you of significant changes via email or platform notification. Continued use of the platform constitutes acceptance of the updated policy.