Privacy Policy

1. Information we collect

We collect only the information needed to operate and improve our Services. The categories of information we may collect include:

Information you provide directly

• Contact details — such as your name, email address, phone number and company name when you submit an enquiry, request a quote, or contact our trade and wholesale team.
• Message content — the contents of any form, email or correspondence you send to us.
• Account information — if our mobile application offers an account, the credentials and profile details you choose to provide.

Information collected automatically

• Device & technical data — device model, operating system version, app version, language settings, and unique identifiers where applicable.
• Usage data — pages or screens viewed, features used, and interactions, used to understand performance and improve the experience.
• Log & diagnostic data — IP address, crash reports and performance logs to maintain stability and security.

We do not knowingly collect sensitive personal information, and we do not sell your personal information.

2. How we use information

We use the information we collect to:

• Provide, operate and maintain the Services;
• Respond to your enquiries, orders and support requests;
• Process and manage trade, wholesale and distribution relationships;
• Improve and personalise the Services and develop new features;
• Monitor usage, diagnose technical issues and prevent fraud or abuse;
• Comply with legal obligations and enforce our terms.

3. Legal bases for processing

Where applicable law requires it, we process personal information on the following bases: your consent; the performance of a contract with you; compliance with a legal obligation; and our legitimate interests in operating and improving the Services, provided those interests are not overridden by your rights.

4. How we share information

We share personal information only in the following limited circumstances:

• Service providers — trusted vendors who process data on our behalf (for example hosting, analytics, crash reporting and communications), under contractual confidentiality and data-protection obligations.
• Legal & safety — where required by law, regulation, legal process, or to protect the rights, property or safety of GRAM (B) FOODS, our users or the public.
• Business transfers — in connection with a merger, acquisition or sale of assets, subject to this Policy.

We do not sell or rent your personal information to third parties, and we do not share it for third-party advertising.

5. App permissions

If you use our mobile application, it may request certain device permissions. Each permission is requested only for a clearly described feature, and you may decline or revoke it through your device settings:

• Internet / network access — required to load content and communicate with our servers.
• Storage — only if needed to save content you choose to download.
• Camera or photos — only if you choose to upload or attach an image to an enquiry.

We do not access permissions in the background or for purposes other than those disclosed to you at the time of the request.

6. Data retention

We retain personal information only for as long as necessary to fulfil the purposes described in this Policy, to comply with our legal obligations, resolve disputes and enforce our agreements. When information is no longer required, we securely delete or anonymise it.

7. Data security

We implement appropriate technical and organisational measures — including encryption in transit, access controls and secure storage — to protect personal information against unauthorised access, loss or misuse. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

8. Your rights & choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your personal information;
• Object to or restrict certain processing;
• Withdraw consent at any time, where processing is based on consent;
• Request a copy of your data in a portable format.

To exercise any of these rights, please contact us using the details below. You may also request deletion of your account and associated data, and we will action it in line with applicable law.

9. Children's privacy

Our Services are not directed to children under the age of 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

10. International data transfers

We are based in Pakistan. If you access our Services from outside Pakistan, your information may be transferred to and processed in countries whose data-protection laws may differ from those of your country. Where required, we apply appropriate safeguards to protect your information.

11. Third-party services

Our Services may rely on third-party platforms — such as cloud hosting, analytics and crash-reporting providers, and the Google Play platform — that process limited data under their own privacy policies. We encourage you to review those policies. We are not responsible for the privacy practices of third parties we do not control.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Services after an update constitutes acceptance of the revised Policy.

13. Contact us

If you have questions, concerns or requests regarding this Privacy Policy or your personal information, please contact us:

• GRAM (B) FOODS
• Phone: +92 321 746 5819
• Address: 495 Huma Block, Allama Iqbal Town, Lahore, 54000, Pakistan