

TRUZH is built around trust, and trust starts with how we handle your data. This page summarises our practices in plain language; the legal clauses for this domain are set out in full below.
Last updated: 26 September 2026 · Pakistan · Contractual commitments: Pakistan has not yet enacted a general data protection law

Everything we do with your data follows these commitments.
Manage notifications, personalisation and consent from your TRUZH account at any time.
Encrypted connections, access controls and regular security reviews protect your data at every layer.
We collect data only where it is necessary. When it is no longer needed, we delete or anonymise it.
TRUZH (SMC-PRIVATE) LIMITED, CUIN 0319206, having its registered office at H#E157/24A, St#5A, Madina Colony, Walton Road, Lahore Cantt, Lahore, Punjab, determines the purposes and means of processing personal data collected through truzh.pk. Data protection enquiries are received at privacy@truzh.com.
Pakistan has not yet enacted a general data protection statute. The commitments set out in this Policy are given contractually by TRUZH (SMC-PRIVATE) LIMITED and are enforceable as terms of the contract between the company and the User. The company applies the standards described below voluntarily, and will align this Policy with the Personal Data Protection Bill upon its enactment.
General enquiries
contact@truzh.comData protection
privacy@truzh.comLegal name
TRUZH (SMC-PRIVATE) LIMITED
Address
H#E157/24A, St#5A, Madina Colony, Walton Road, Lahore Cantt, Lahore, Punjab, Pakistan
We collect only the data necessary to operate the marketplace and provide our services to you.
name, email address, profile photograph, preferences, phone number (optional)
institutional email domain
photographs, descriptions, prices, item condition
Messages exchanged through the in-app chat system
Support requests and correspondence
Transaction and reservation activity
IP address, browser type, operating system, timestamps
Usage analytics and interaction data
Geolocation data, where location features are enabled by the User
TRUZH does not process payments. Buyers and sellers settle payment directly between themselves, so TRUZH never receives your card or bank details.
Every processing activity is justified on one of the bases below:
| Purpose | Legal basis | Reference |
|---|---|---|
| Creating and administering User accounts | Necessary to perform the User agreement | Contractual |
| Operating listings, chat, and marketplace functionality | Necessary to perform the User agreement | Contractual |
| Community verification through institutional email domain | Necessary to perform the User agreement | Contractual |
| Platform security, fraud prevention, and content moderation | Legitimate business interest of the company | Contractual |
| Support and dispute resolution | Legitimate business interest of the company | Contractual |
| Analytics and personalisation | User consent, withdrawable at any time | Consent |
| Disclosure to authorities | Compliance with a lawful demand under PECA 2016 or the Income Tax Ordinance, 2001 | Statutory |
We do not sell your personal data.
We share data only with the service providers below, which process it on our behalf under written agreements, and with public authorities where the law requires it:
Hostinger (servers) and Cloudflare (content delivery, security and approximate location from your connection).
Google Firebase (account sign-in), Brevo (transactional email) and Meta WhatsApp (phone verification codes, only if you add a phone number).
Cloudinary (listing and profile images) and Microsoft Azure AI (automated screening of listings and images for prohibited content).
Google Maps and OpenStreetMap (maps on delivery pages) and Google Translate (page and message translation when used).
Google AdSense (serves contextual and personalised ads based on your prior visits to this and other websites; uses cookies and web beacons). You can opt out of personalised advertising at Google Ads Settings (https://adssettings.google.com) or www.aboutads.info.
Courts, police or regulators, only where we are legally required to disclose data.
None today. TRUZH does not process payments; if online payments are introduced, the provider will be named here beforehand.
We use cookies and similar technologies that are needed to run TRUZH and, with your consent, to serve relevant advertisements. You control any optional ones.
As a matter of contract, the company affords every User the ability to access a copy of their personal data, to correct inaccurate data, to request deletion of their account and associated data, to object to analytics processing, and to withdraw consent at any time. Requests are addressed to privacy@truzh.com and answered within thirty days.
Obtain a copy of the personal data we hold about you.
Have inaccurate data corrected.
Ask us to delete your account and the data associated with it.
Opt out of analytics processing at any time.
Withdraw consent at any time, without affecting earlier processing.
To exercise any of these rights, write to privacy@truzh.com
No independent data protection supervisory authority is presently constituted in Pakistan. A User dissatisfied with the company's handling of a request may escalate in writing to legal@truzh.com for review by the Chief Executive, and may pursue remedies before the courts at Lahore.
When data is no longer needed, it is securely deleted or anonymised.
Platform infrastructure is hosted outside Pakistan. Personal data of Pakistani Users is therefore processed on servers located abroad. Processors are engaged under written agreements imposing confidentiality, security, and purpose-limitation obligations equivalent to those the company owes to Users.
We use encryption in transit, role-based access controls, regular security reviews and incident-response procedures. No system is completely secure; if you suspect a problem, contact privacy@truzh.com immediately.
TRUZH uses automated systems to help detect fraud, screen listings and images for prohibited content, and order search results. These systems support, but do not replace, human judgement. We do not take decisions based solely on automated processing that produce legal or similarly significant effects for you.
If an automated system contributes to a moderation decision about your account or listing, you can ask for a human review at privacy@truzh.com.
The Platform is intended for persons aged 18 and over, being the age of contractual capacity under the Majority Act, 1875. Personal data is not knowingly collected from minors. Where the company becomes aware that a minor has registered, the account is suspended and the associated data deleted without undue delay.
We may update this Privacy Policy to reflect changes in our services, technology or the law. We will tell you about material changes by email or by a prominent notice on the platform before they take effect. The date at the top of this page shows the current version.
Write to us with any privacy question, request or concern.
General enquiries: contact@truzh.com