Privacy Policy

01Scope

This policy explains what Dopamine Club (“we”, “us”) collects when you use the marketplace at dopamineclub.pk and its related services (the “Platform”), why we collect it, who else sees it, and what you can do about it. It sits alongside our Terms of Service.

Dopamine Club is based in Lahore, Pakistan, and is the controller of the personal data described here.

02What we collect

You give us

• Account — full name, email address, password (stored only as a hash), and phone number if you add one.
• Profile — username, bio, city and country, gender if you choose to set it, avatar and cover image.
• Listings — title, description, price, category, condition, brand and model, specifications, photos, the city and area of the item, and the contact number, WhatsApp number or email you put on the ad.
• Dealer stores — store name, description, logo and banner, business hours, city, address, website and contact number.
• Verification documents— business or identity documents you upload when you apply for verification, plus our reviewer’s notes and decision.
• Reviews and reports — ratings and text you write about other users or stores, and the reason and detail you give when you report something.
• Waitlist — the email address you enter to be notified about a feature that has not launched yet.
• Support — anything you send us by email.

We collect automatically

• Usage — pages and listings viewed, searches and filters, saved ads, and a daily per-ad view count that tells a seller how their listing is doing.
• Technical — IP address, browser and device type, approximate location derived from IP, timestamps, and error and performance data from our servers and hosting providers.

From third parties

If you sign in with Google, Google gives us your name, email address, a profile picture URL and a stable account identifier. We never receive your Google password.

03What is public

04How we use it

• to create and secure your account and keep you signed in;
• to publish your listings, profile and store, and to power search and filters;
• to show sellers view counts and reputation, and buyers ratings and badges;
• to run verification reviews and issue or withdraw badges;
• to moderate the marketplace: investigating reports, detecting fraud, spam and abuse, removing listings and suspending accounts;
• to send service email you cannot opt out of while you have an account: verification, password resets, security notices and important changes to these policies;
• to send product news and marketing only if you opt in, or waitlist notifications for a feature you signed up for. Every one of these carries an unsubscribe link;
• to measure and improve the Platform in aggregate, and to comply with our legal obligations.

We do not sell your personal data, and we do not share it with advertisers for their own marketing.

05Who we share it with

We share data with service providers who process it on our behalf, under contract, only for the purposes below:

We also disclose data where the law requires it, in response to a valid legal request, to investigate fraud or a threat to someone’s safety, to enforce our Terms, or as part of a merger or acquisition. In that last case we will tell you before your data becomes subject to a different policy.

06Cookies and browser storage

We keep this light. We use:

• A session cookie — an HttpOnly, secure cookie that keeps you signed in. Strictly necessary; without it you cannot stay logged in. Your access token itself is held in memory only, never in browser storage.
• Local storage — remembers small preferences such as your light or dark theme.
• Analytics— our host’s privacy-oriented traffic and performance measurement, which reports in aggregate and does not build an advertising profile of you.

We do not run third-party advertising or cross-site tracking cookies. You can clear or block storage in your browser, but blocking the session cookie will sign you out.

07How long we keep it

• Active accounts — for as long as your account exists.
• Deactivated accounts — kept intact but hidden from public view, so you can sign back in and restore everything.
• Deleted accounts — your profile is anonymised and your listings are withdrawn from the marketplace. Deletion is permanent and cannot be undone.
• Verification documents — kept while the badge stands and for a limited period after a decision, so we can justify it if challenged.
• Moderation and fraud records — kept after deletion where we need them to stop a banned user simply coming back, or to meet a legal obligation.
• Server logs and aggregate analytics — kept for a short period, and aggregate figures may be retained indefinitely because they no longer identify you.

08Your choices and rights

• See and correct — most of what we hold is editable in your profile and settings.
• Email preferences — turn marketing and notification email off in settings, or unsubscribe from any such email.
• Hide yourself — deactivate your account to take your profile, store and listings out of public view without losing them.
• Delete — delete your account from settings, or ask us to do it.
• A copy of your data, or an objection to how we use it. Email us and we will respond within 30 days.

Write to support@dopamineclub.pk for anything you cannot do in the product. We may ask you to confirm your identity before acting on a request about an account.

09Security

Passwords are stored hashed, never in plain text. Traffic is encrypted in transit. Sessions use HttpOnly cookies, and changing your password or signing out everywhere invalidates tokens issued earlier. Optional two-factor authentication is available on your account.

No system is perfectly secure. If you believe your account has been accessed by someone else, change your password and tell us at support@dopamineclub.pk immediately. If you have found a vulnerability, please report it to the same address rather than disclosing it publicly.

10International transfers

Our hosting, storage, image and email providers operate data centres outside Pakistan, so your data is processed abroad. We use providers that offer recognised safeguards and contractual protections for that transfer.

11Children's data

The Platform is built for adults. Someone under 18 may only use it with a parent or guardian who has accepted the Terms on their behalf and who supervises the account, including anything published on it, such as a contact number on a listing.

We do not knowingly collect data from a child using the Platform without that supervision. If you are a parent or guardian and want an account and its data removed, write to support@dopamineclub.pk and we will remove it.

12Changes to this policy

We update this policy as the Platform changes. The effective date at the top of this page always reflects the current version, and for material changes we give notice in the product or by email before they take effect.

13Contact us

Privacy questions, data requests and complaints: support@dopamineclub.pk.

Dopamine Club · Lahore, Punjab, Pakistan.