BaadMay
Support Get the app
Home / Privacy Policy

Privacy Policy.

Last updated: April 2026. We are committed to protecting your personal information and being transparent about how we use it.

1. Who we are

BaadMay Financial Services (Pvt.) Ltd. ("BaadMay", "we", "us", or "our") operates the BaadMay Buy Now, Pay Later platform, including our website, mobile applications, and merchant integrations. We are registered and regulated by the Securities and Exchange Commission of Pakistan (SECP).

For privacy-related enquiries, contact us at [email protected].

2. Information we collect

We collect information you provide directly, information collected automatically when you use our services, and information from third parties.

  • Identity data: Full name, CNIC number, date of birth.
  • Contact data: Mobile number, email address, mailing address.
  • Financial data: Bank account details, debit/credit card information (tokenised), transaction history.
  • Device & usage data: IP address, device identifiers, app usage logs, browser type.
  • Transaction data: Purchase history, order amounts, merchant information, installment schedules.

3. How we use your information

  • Assess your eligibility for BaadMay financing.
  • Process transactions and manage your installment schedule.
  • Verify your identity and prevent fraud.
  • Send payment reminders and account notifications.
  • Improve our products and services.
  • Comply with legal and regulatory obligations under SECP and applicable Pakistani law.

4. Sharing your information

We do not sell your personal data. We share it only with:

  • Partner merchants — limited to order and identity data necessary to fulfil your purchase.
  • Payment processors — to handle debit/credit transactions securely.
  • Credit bureaus — where required by regulation.
  • Regulatory authorities — SECP and other bodies when legally required.
  • Service providers — cloud hosting, analytics, and fraud prevention partners under strict data processing agreements.

5. Data retention

We retain your personal data for as long as your account is active and for up to seven (7) years after account closure, as required by Pakistani financial regulations. You may request deletion of data that is no longer legally required to be retained.

6. Your rights

  • Access a copy of the personal data we hold about you.
  • Correct inaccurate information.
  • Request deletion of data where legally permissible.
  • Withdraw consent for marketing communications at any time.
  • Lodge a complaint with the SECP or relevant data protection authority.

To exercise any of these rights, email us at [email protected].

7. Security

We use bank-grade encryption (TLS 1.2+), tokenisation for payment credentials, and strict access controls to protect your data. Please keep your BaadMay PIN and OTPs confidential.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notification. Continued use of BaadMay after changes take effect constitutes acceptance of the updated policy.

Questions? Contact us at [email protected] or visit our support page.