This Privacy Policy explains what personal information Origo Family collects, how it is used, and how it is protected.

1. Information We Collect

For members: full name, phone number, email address, and optionally CNIC, address, and city.

For partner businesses: business name, category, contact person, phone, email, address, city, and optionally website/social links.

We do not collect payment card details on this platform — payments are recorded manually by an administrator (e.g. cash, bank transfer, or mobile wallet reference) and no card numbers ever pass through or are stored on this site.

2. How We Use Your Information

We use your information to: create and manage your membership or partner account; verify your identity and membership status when you or a partner scans your digital card; determine eligibility for free delivery and partner discounts; and communicate service-related updates to you.

3. Your Digital Card & QR Code

Your QR code encodes a random, unique verification token — not your name, phone number, or any other personal detail. The token is stored on our server only in cryptographically hashed form, meaning even we cannot reconstruct the original token from what is stored in the database. QR generation happens entirely within your own browser; it is never sent to or generated by any third-party service.

4. What Partners Can See About You

When a partner verifies your membership (by scanning your card or entering your Member ID), they are shown only your name, Member ID, membership plan, and membership status/validity dates. Your phone number, email address, CNIC, and home address are never shared with partner businesses.

5. Data Storage & Security

Your information is stored in this website's WordPress database. Sensitive values (such as your verification token) are stored using industry-standard hashing and encryption rather than as plain text. Access to administrative screens is restricted to authorized administrators only.

6. Data Retention & Deletion

We retain your information for as long as your account is active, and afterward as needed to maintain accurate transaction, payment, and delivery records. If you request deletion of your account, we will remove your personal record where we are able to do so — accounts with existing transaction, payment, or delivery history cannot be permanently deleted, since doing so would compromise the accuracy of financial and audit records; in that case, your account will instead be deactivated so it is no longer active or usable.

7. Third Parties

We do not sell your personal information to third parties. We do not use any external analytics, advertising, or tracking service on this platform. QR code generation and scanning happen entirely within your own browser using code that runs locally — no image or video data is ever transmitted anywhere.

8. Cookies

This site uses standard WordPress session and login cookies necessary to keep you signed in. We do not use third-party advertising or tracking cookies.

9. Your Rights

You may request access to, correction of, or deletion of your personal information at any time by contacting us. We will respond within a reasonable timeframe.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us through the details provided on this site.