Privacy policy

This policy explains what WheelMela collects about you, how we use it and the choices you have.

What we collect

• Account details: your name, phone number, optional email, city and password (stored only as a secure hash).
• Content you post: ads and their photos, Demand Board requests, chat messages, forum posts and reviews.
• Orders: delivery name, phone and address, items bought and order history.
• Payment proofs: transaction numbers and receipt images you upload for bank transfers. These are stored

privately and only our finance staff can view them.

• Technical data: IP address, device and browser type, and pages visited, kept in server logs for security.

How we use it

• To run your account, publish your ads and deliver chat messages.
• To process and deliver store orders and verify payments.
• To keep the platform safe: review ads, investigate reports, and prevent fraud and spam.
• To contact you about your ads, orders and payments. We do not send marketing messages without your consent.

What other users see

Your first name, city and the date you joined appear on your ads and seller page. Your phone number is shown on an
ad only if you choose to show it. Chat lets buyers reach you without seeing your number.

Who we share it with

• Couriers receive the delivery name, phone and address for store orders.
• Service providers that host our servers or send SMS codes, only as needed to provide the service.
• Authorities when required by Pakistani law, for example under the Prevention of Electronic Crimes Act 2016.

We do not sell your personal data.

Cookies and storage

We use a session cookie to keep you logged in, a cookie to remember a guest shopping cart, and local storage for your
light or dark theme. We do not use advertising cookies.

How long we keep it

Account data is kept while your account is open. Sold and expired ads are kept to power price guides, without your
contact details. Orders and payment records are kept for as long as tax and accounting rules require. Server logs are
kept only for a limited time for security and troubleshooting.

Your choices

• Edit your profile and delete your ads at any time from your account.
• Log out of every device from account settings.
• Ask us for a copy of your data or to delete your account through the contact page.

Security

Passwords are hashed, connections are encrypted, and staff access is limited by role and recorded in an audit log.
No system is perfectly secure, so please use a strong, unique password.

Changes

We will update the date above when this policy changes, and tell you on the site about important changes.