1. Information you give us
When you create an account, we collect:
- Full name: so we can address you properly
- Nickname: your unique display name on the platform
- Email address: for verification, password reset and important updates
- WhatsApp number: for course support and enrollment help
- Date of birth: to confirm age suitability of content
- Password: stored only as an encrypted hash, never in readable form
When you use our contact form, we receive the name, email, WhatsApp number, topic and message you submit. When you message us on WhatsApp, we receive your message and your phone number.
2. Information collected automatically
Like most websites, our hosting server keeps standard technical logs such as IP address, browser type and pages visited, for security and troubleshooting. We use a session cookie to keep you logged in while you browse. We do not run advertising trackers and we do not sell behavioural data.
3. How we use your information
- To create and secure your account and verify your email
- To let you reset your password if you forget it
- To answer your questions and provide course support
- To send occasional updates about new free courses, which you may stop at any time
- To prepare quotes and deliver services you ask for
- To protect the platform against abuse and unauthorised access
4. When you message us on WhatsApp
We run our own support inbox for WhatsApp. If you message our business number, this is what happens to that message.
- It is stored. Your message, your phone number, and the name shown on your WhatsApp profile are saved so we can carry on the conversation later instead of asking you the same things twice.
- Software may draft the reply. We use Google Gemini to read the conversation and suggest an answer. The message text is sent to Google for that purpose. It is not used to advertise to you and it is not shared with anyone else.
- A person is always in charge. You can ask to speak to a human at any point and the automated replies stop immediately.
- We keep notes. Things you tell us that matter for your work, such as which course you are interested in or what your business does, are saved so you do not have to repeat them. You can ask us to delete these at any time.
If you would rather not have your messages handled this way, email us at info@dogarzada.com instead.
5. Our Facebook and Instagram Pages
We run a Facebook Page and an Instagram account under the DogarZada name. When we publish there, Meta gives us anonymous figures about how a post performed, such as how many people saw it and how many reacted. These are counts, not names, and we cannot tell who you are from them.
If you comment on a post or send us a message on those platforms, we can see your public profile name and what you wrote, in the same way any Page owner can. Anything you send us there is covered by Meta's own privacy policy as well as this one.
6. Service providers we rely on
We use a small number of companies to run our systems. Each one may handle limited data on our behalf, and none of them are allowed to use it for their own purposes.
For the website:
- Hostinger: website hosting and the account database
- FormSubmit: delivers contact form messages to our inbox
- Google Fonts: loads the typefaces used in our design
For our support inbox and business tools:
- Supabase: the database that stores conversations, contacts and notes
- Vercel: hosting for the application that runs the inbox
- Google (Gemini API): reads a conversation to draft a suggested reply
- Meta (WhatsApp Business Platform): delivers the messages themselves
7. Where your data is kept
Our providers are based in the United States and store or access data there, and in the data centre region we have selected for our database. This means your information may be processed outside Pakistan. We only use providers that offer standard contractual protections for data handled on our behalf.
8. How we protect your data
- The entire website and application run over HTTPS encryption
- Passwords are stored as one-way hashes, so even we cannot read them
- Database queries use prepared statements to prevent injection attacks
- Our database enforces row level security, so a team member can only open the conversations assigned to them
- Access keys are kept on the server and are never sent to your browser
- Every action a team member takes on your record is written to an audit log
No online system can promise perfect security, but we take these protections seriously and improve them as the platform grows.
9. How long we keep it
We keep your account information for as long as your account exists. Support conversations are kept while they are useful for serving you, and are reviewed periodically so old ones do not sit around without reason. Verification and password reset codes expire quickly and are deleted after use. If you ask us to delete your account, we remove your personal details from our active database.
10. Your rights and choices
- Access: see your stored details any time on your profile page, or ask us for a copy of your support conversation
- Correction: update your name, nickname, WhatsApp number or date of birth from Edit Profile
- Deletion: email info@dogarzada.com from your registered address and we will delete your account
- Opt out: tell us to stop sending updates and we will
- Object: ask us to stop using automated replies on your conversation, and a person will take over
We answer these requests within 30 days. There is no charge.
11. Requests from courts and public authorities
Sometimes a government body, regulator or court asks a business to hand over information about the people it serves. We take that seriously, and this is how we deal with it.
- We check that it is lawful. Before we respond, we look at whether the request is properly issued and whether the authority actually has the power to make it.
- We push back when it is wrong. If a request looks unlawful or asks for far more than it needs, we will challenge it or ask for it to be narrowed.
- We give the least we can. We disclose only the specific information named in the request. We do not hand over a whole account because one detail was asked for.
- We write it down. Every request, our reasoning and our response are recorded and kept.
- We tell you where we can. If the law allows it, we will let you know that your information was requested.
We have not received any national security request for user data.
12. Children
Our courses are intended for learners aged 13 and above. Younger children should use the platform only with a parent or guardian involved. If we learn that we have collected data from a young child without such involvement, we will delete it.
13. Changes to this policy
If we change how we handle data, we will update this page and change the date shown at the top. If the change is a significant one, we will say so on the site rather than quietly editing the text.
14. Contact
Any privacy question or request: info@dogarzada.com or WhatsApp +92 346 3727254.
The person responsible for the data described in this policy is the owner of DogarZada, based in Pakistan.