Privacy policy
Last updated:
This policy explains what personal information DOBUY collects, why, who it is shared with and what you can ask us to do with it. It covers visitors to dobuy.pk and people who use DOBUY apps.
Who we are
DOBUY is delivery and multi-vendor commerce technology built and run by FRESME. It includes customer, vendor and rider apps, a buyer website, vendor and rider portals and an admin panel.
DOBUY is white-label technology, so who is responsible for your information depends on the platform you use:
- On dobuy.pk and in the DOBUY-branded apps, FRESME (the company named below) decides how your personal information is used and is responsible for it.
- When a business runs its own delivery or marketplace platform on DOBUY technology under its own name, that business is responsible for the information of its customers, vendors and riders. FRESME stores and processes that information on the business’s behalf and only on its instructions. The business’s own privacy policy applies, so please send requests about your data to it first; if you write to us, we will pass your request on.
DOBUY is a product of Fast Resources and Management for Information Technology Company (FRESME) (CR 7048765916, VAT 312839635300003), Al Madinah, Kingdom of Saudi Arabia, which operates this site and issues our invoices.
On dobuy.pk (visitors and businesses)
When you request a demo, fill in our contact form or write to us, we collect:
- your name, company, email address and phone number;
- your message and anything else you choose to tell us about your business;
- the page you sent the form from, and the site region and language you were using;
- how you reached us, where your browser tells us: the referring website and any campaign tags in the link you followed (UTM).
Like any website, our hosting provider processes standard technical data such as IP address, browser type and request times, so the site can be delivered and kept secure.
We also count page views, clicks on our WhatsApp, call, email and demo buttons, and technical errors on the site. These are kept as totals per page, region and language, without names, contact details or anything that identifies you.
Google Analytics and Microsoft Clarity load only if you click “Accept” in the cookie banner. Until then they do not run and set no cookies. You can change your choice at any time with “Cookie settings” at the bottom of every page; your choice is remembered in your browser.
If you use the WhatsApp button, the chat happens in WhatsApp (Meta) and the message names the page you came from.
If you use “Ask Osama”, the AI assistant on this site, your questions are sent to Google Gemini (Google) to write the answers. We save each question and answer, with the page and site region you used, to improve the answers. We remove e-mail addresses, phone numbers and card numbers first, and we do not save your IP address. Please do not type payment or other sensitive details into the chat. The conversation stays in your browser tab until you close it.
In DOBUY apps (customers, vendors and riders)
Depending on your role and the features the platform uses, the apps collect:
- Account details: your name, phone number and email address.
- Delivery addresses you save or enter, and the location you choose for delivery.
- Orders: what you ordered, from whom, amounts, delivery status and order history.
- Payment status: whether an order was paid online or in cash, and whether the payment went through. Card payments are handled by the payment provider; DOBUY does not store your card details.
- Rider location: the rider app collects precise location while a rider is on duty, including when the app runs in the background, so orders can be assigned and customers can follow their delivery. Collection stops when the rider goes off duty.
- Delivery tracking: customers see the assigned rider’s location while their order is on the way.
- Rider sign-up details: the ID details and documents a rider provides to register.
- Vendor details: business name, store address, contact details, menus or product listings and prices.
- Photos you upload, such as proof-of-delivery photos and signatures, product images and sign-up documents.
- Push-notification tokens, so the app can tell you about your orders.
- Device and log data: device model, operating system, app version, IP address, and error and usage logs.
The app asks for your permission before it uses your location, camera, photos or notifications. You can turn these permissions off in your phone’s settings, though some features (such as delivery tracking for riders) will not work without them.
How we use it
- to reply to your enquiry, arrange a demo and prepare the proposals you ask for;
- to create and manage app accounts;
- to take, prepare, deliver and track orders, and show each party the information it needs;
- to calculate vendor payouts, rider earnings and platform fees, and keep financial records;
- to send service messages and push notifications about orders and accounts;
- to verify riders and vendors, prevent fraud and misuse, and keep the platform secure;
- to fix problems and improve the apps and the site;
- to meet legal, tax and accounting obligations.
We do not sell your personal information, and we do not use it for automated decisions that have legal or similarly significant effects on you.
Why we are allowed to use it
Depending on the situation and the law where you are, we rely on:
- providing the service you signed up for or asked about (for example, delivering your order or replying to your demo request);
- our legitimate interests in running, securing and improving DOBUY, where these do not override your rights;
- your consent, for example for location, camera and notification permissions and for analytics on the website (you can withdraw consent at any time);
- legal obligations, for example keeping invoices and tax records.
Who we share it with
We share information only where it is needed:
- Within an order: the vendor sees what was ordered and the delivery details it needs; the rider sees the pickup and delivery addresses and the customer’s name and phone number; the customer sees the rider’s name and live location while the order is on the way.
- With the business that runs the platform you use, where that is not FRESME.
- With the payment provider that processes online payments.
- With service providers that help us run DOBUY, such as map and location, push-notification and email services, only for that purpose.
- With Google, which runs Gemini, the AI model behind Ask Osama: only the questions you type there (with contact details removed), to write the answers.
- With authorities, courts or professional advisers where the law requires it, or to protect rights and safety.
We do not sell or rent personal information to advertisers or data brokers.
How it is kept
Enquiries sent through dobuy.pk and the records our team keeps about them are held by our database provider. Emails about your enquiry are sent through our email provider, and our team receives an internal alert on Telegram that contains no names or contact details. If you accept analytics, Google and Microsoft process that data under their own terms.
When a business runs its own platform on DOBUY technology, where that platform’s data is hosted is agreed with the business in writing. Service providers such as map or notification services may process limited data to provide their service.
How long we keep it
We keep personal information for as long as needed for the purposes above or as required by law. App account information is kept while the account is open. Order, invoice and payment records may be kept longer where tax and accounting laws require it. When information is no longer needed, we delete it or make it anonymous.
Enquiries sent through dobuy.pk are kept while we discuss or deliver work with you, and for as long as we need business records afterwards. We do not delete them automatically on a timer: they stay until our team deletes them, or until you ask us to delete your information (see Data deletion). The same applies to technical error logs and to questions asked in Ask Osama.
Security
We use reasonable technical and organisational measures to protect personal information, including encrypted connections and role-based access, so that staff and admin users see only what their role needs. No system is completely secure, so we cannot guarantee absolute security.
Your rights and choices
Depending on where you live, you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong or incomplete;
- delete your account and personal information (see data deletion);
- stop or limit certain uses of it;
- withdraw your consent, where we rely on it.
Email info@dobuy.pk. We may need to confirm your identity first, for example by asking you to write from your registered email address or to give your registered phone number. If your account is on a platform run by another business, we will work with that business to answer your request.
Children
dobuy.pk is for businesses, and the DOBUY-branded apps are for users aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.
If you are in another country
The global site is run by FRESME’s Saudi company named under “Who we are”. The data protection law where you live may give you more rights than this policy describes; we will answer your request under that law.
Contact info@dobuy.pk to use your rights. You can also contact the data protection authority in your country.
Changes and contact
We may update this policy when DOBUY or the law changes. The date at the top shows the current version.
Questions or requests about privacy: info@dobuy.pk.