ORAAN's PRIVACY POLICIES

Privacy Policy

Our goal is to keep our Privacy Policy simple and transparent - but, if you still have questions, our service channels listed below are at your disposal

This Privacy Policy describes the personal data we collect, how it is used, stored and shared and your rights in relation to that data. We recommend carefully reading it.

Prominent disclosure: This app collects information like contacts, installed application, calendar, storage, registered accounts and web history & browser bookmarks for our third party provider, credolab pte ltd, to provide credit scores so that your Oraan committee applications can be approved.

 
Privacy Policy

This Privacy Policy (“Policy”) outlines Oraan Tech (Private) Limited’s (“Oraan”, “we”, “us”, or “our”) practices and conduct in relation to the storage, usage, processing, and disclosure of personal data that you have chosen to share with us when you use our products and services including but not limited to www.oraan.com (“Website”), the Oraan mobile phone application (“App”) and all other Oraan products and services as may be made available from time to time (the Website, App and products and services are hereinafter collectively referred to as the “Platform”), or personal data that we may have access to in relation to your use of the Platform.

 

This Policy is to be read in consonance with our Terms and Conditions available on our Website and App and may be updated from time to time. This Policy, as amended, shall apply to you as and when updated and the most current version of this Policy shall be available for your review on our Website and App.

By using the Platform, you agree that you have read, understood, and are bound by this Policy and the Terms and Conditions and that you comply with the requirements listed herein. If you do not agree to the entirety of this Policy and the Terms and Conditions or are not willing to or unable to comply with the requirements specified herein, please do not access the Platform.

 

Note: Capitalized words in the Policy are terms with a specifically defined meaning. Whenever there is mention of the terms “we” or “our”, we are referring to Oraan as defined hereinabove; likewise, whenever there is mention of the terms "you", "your", “yours” we are referring to our customers. Please read this Policy in consonance with Oraan’s terms and conditions available on our website, www.oraan.com. By agreeing to this Policy, you hereby consent to all the terms as detailed throughout this Policy.

Introduction

By using the Oraan Platform and signing up as a member or user of Oraan, you are required to provide us with your personal data in order to facilitate Oraan in providing you with the best customer experience.  At Oraan, privacy, security, and transparency are fundamental values ​​and we will always adopt best practices to guarantee the confidentiality and integrity of your personal data. By using our products or services, you agree to the collection, storage, usage, analyzing, accessing, and dissemination of your data in accordance with this Policy. 

Prominent disclosure: This app collects information like contacts, calendar, storage, registered accounts and web history & browser bookmarks, and installed apps for credolab pte ltd to provide credit scores

Application

This Policy is applicable to all Oraan customers using the Platform in Pakistan or outside of Pakistan. Oraan will process your personal information in accordance with this Policy and all applicable laws in Pakistan. Please note:

  • We are transparent on how we handle your personal information;

  • We process your personal information for legitimate purposes such as assessing your creditworthiness and building your financial identity along with assessing your risk profile;

  • We allow you to choose not to answer or provide Oraan with any information that you deem unnecessary to provide which may or may not lead to availing  Oraan’s services and Platform usage;

  • We ensure your data is protected and handled with the highest security measures;

  • We will notify you of any changes to the Policy and your rights should they be altered or affected as a result of any changes and/or updates.

 

This Policy applies specifically to: 

  • Oraan customers: natural persons who effectively avail or access Oraan’s Platform (either for yourself or for your legal entity);

  • Oraan prospects: any natural person who has already requested to avail Oraan’s Platform, but has not become an Oraan customer for any reason.

  • Data Collected by Oraan:

  1. When you access or use Oraan’s Platform, we collect the personal information and data you provide us with and said data may be analysed and processed by third parties in Singapore or any other jurisdiction. Oraan begins collecting your personal information and data from the moment you download the application on your smartphone and/or web device. In some cases, you directly provide your personal data to Oraan, and then we ask permissions to access your contacts, installed app, calendar, storage, registered accounts and web history & browser bookmarks for our third party provider, credolab pte ltd, to provide credit scores.
     

  2. This Policy is also applicable to other forms of collection of personal data by Oraan, which allow the provision or improvement of our services. For example, we may collect information through partners or relating to our technologies. Oraan receives certain personal data sent by current or future partners such as the National Database and Registration Authority (NADRA) and CredoLab that we contract with for specific purposes such as to strengthen our control against potential fraud carried out by customers. This is to ensure that Oraan can comply with legal obligations or applicable regulations (as detailed below).
     

  3. By accepting the terms of this Policy, you expressly agree to provide only true, current and accurate personal data and not to change your identity or personal data in any way when accessing and using our products or services. You will be solely responsible for any false, outdated or inaccurate information that you provide directly to Oraan.
     

  4. These are your personal data processed by Oraan, divided into categories: a) Personal data provided to Oraan by the customer

  • Registration data, such as: name, identification documents, nationality, address, date of birth, affiliation, gender, among others.

  • Contact details, such as phone and email   

  • Company you work for

  • Profession

  • Declared income and proof

  • Biometric data, such as the photo of your identification document and your face
     

b) Personal data Oraan will collect from third parties/partners:

  • Registration data, such as: name, affiliation, date of birth, telephone number, address, among others

  • Data on financial restrictions, such as: negatives, amounts due, due dates, number of consultations, among others

  • Credit history information

  • Score generated by CredoLab

  • Information on debts to be due or past due, co-obligations and guarantees


c) Navigation and device data:

We collect data from your phone to provide a segmented risk profile and generate aggregated statistical information to pass it to Credolab. To protect your identity, Oraan removes all personal identifiers (if any) and such information may be pseudonymised. Any metadata processed in this way cannot be used to reproduce the original data collected. This data is only used for the purpose outlined above and is protected from unauthorized usage and disclosure. CredoLab’s privacy policy is available at https://www.credolab.com/privacy-policies/gdpr-privacy-policy

Below is the data we will collect from your smartphone and/or web device:

  • Photo Gallery/Camera Roll;

  • Contact list;

  • History of text messages/SMS

  • Calendar, 

  • Storage, 

  • Registered accounts 

  • Web history & browser bookmarks

  •  Installed Application

Prominent disclosure: This app collects information like contacts, installed apps, calendar, storage, registered accounts and web history & browser bookmarks for credolab pte ltd to provide credit scores

 

COLLECTION OF DATA
What data is collected?

We collect data from your phone to provide a segmented risk profile and generate an aggregated statistical information. To protect your identity, we remove all personal identifiers (if any) and pseudonymised such information. Any metadata processed in this way cannot be used to reproduce the original data collected. This data is ONLY used for the purpose outlined above and is protected from unauthorized usage and disclosure.

Is the data collected shared with any third party?

The data collected is shared with permissions like contacts, installed app, calendar, storage, registered accounts and web history & browser bookmarks with selected providers of data analytics services.

The service providers are described below: 

CredoLab Pte Ltd: Oraan Tech Pvt. Ltd. uses CredoLab service to assess user’s credit worthiness. Metadata accessed, collected and shared are as follows: Contacts List, Calendar, Web History & Browser Bookmarks, and Installed apps. CredoLab’s privacy policy is available at https://www.credolab.com/privacy-policies/gdpr-privacy-policy

 Why is the data collected?

We use the data as part of our decision process to assess your creditworthiness for oraan committee with us. We may also use your data to assess your interest in receiving financial services through algorithms and mathematical modelling.


d) Public data:

  • We may collect information about you that is publicly available or that has been made public by you;

  • Information about mentions or interactions with Oraan;

  • Testimonials related to Oraan posted on profiles and pages on social media networks, along with your name and image (including profile photos).

 

3. How Oraan uses your personal data 

(a)  Oraan uses your personal data in order to provide high quality service and products and continually develop its Platform. Below are the details of the purposes for which Oraan uses your personal data:

(1)   Personal data informed by the holder:

Purposes:

  • Provision of services and products

  • Identification, authentication and verification of requirements for contracting Oraan’s Platform

  • Authentication of financial transactions

  • Answering requests and doubts

  • Contact by phone, email, SMS, WhatsApp, or other means of communication, including sending notifications to use Oraan’s Platform

  • Sending your debit card and communications in general

  • Eligibility to take part in Oraan campaigns

  • Improvement of the Platform provided by Oraan, including the crossing of information on products contracted by individuals and legal entities to offer new products and services

  • Marketing, prospecting, market research, opinion and promotion of our products and services, or of our partners, including viable offers and sending information about products, services, news, features, content, news and other relevant events for maintaining the relationship with you

  • Periodic reassessments about eligibility to be a Oraan customer, enabling the eventual proactive invitation to prospects

  • Credit protection, including credit granting and limit raising

  • Prevention and resolution of technical or security problems

  • Investigations and measures to prevent and combat illicit acts, fraud, financial crimes and guarantee the safety of Oraan customers and the financial system

  • Regular exercise of Oraan's rights, including presenting documents in judicial and administrative proceedings, if necessary

  • Collaboration or compliance with a court order, competent authority or supervisory body

  • Compliance with legal or regulatory obligations

  • To enforce Oraan’s terms and conditions

 

(2) Biometric data

Purposes:

  • Fraud prevention and security assurance in registration and new device identification and authentication processes

  • Remote account opening

 

(3) Personal data we collect from third parties

Purposes:

  • Compliance with a legal or regulatory obligation, for example, to keep your registration up-to-date or comply with legal and / or regulatory obligations imposed on Oraan, including Know Your Client, Money Laundering Prevention and Terrorism Financing and other rules

 

(4) Navigation and device data

Purposes:

  •  Provision of services, offering the contracted products and improving the use and experience with the Oraan application and websites

  • Operationalization of new products and services

  • Recommendation of new services, products or features of the application, including services of partners that may interest you

  • Decision process to assess your creditworthiness and risk profile

  • Generation of statistics relevant to activities and behavior in the use of products or services

  • Credit protection, including credit granting and limit raising

  • Prevention and resolution of technical or security problems

 

(5) Personal data originating from the use of our products and services

Purposes:

  • Provision of services and offering of contracted products

  • Transaction authentication, customer service and support

  • Improvement of the services provided by Oraan, including the crossing of information on products contracted by individuals and legal entities to offer new products and services

  • Development of new products and services to be offered by Oraan and generation of knowledge for innovation or development of new products

  • Tests to improve Oraan models and services and products

  • Marketing, prospecting, market research, opinion and promotion of our products and services, or of our partners, including viable offers and sending information about products, services, news, features, content, news and other relevant events for maintaining the relationship with you

  • Credit protection, including credit granting and limit raising

  • Prevention and resolution of technical or security problems and monitoring the use and performance of Oraan products and services

  • Investigations and measures to prevent and combat illicit acts, fraud, financial crimes and guarantee the safety of Oraan customers and the financial system

  • Regular exercise of Oraan's rights, including presenting documents in judicial and administrative proceedings, if necessary

  • Collaboration or compliance with a court order, competent authority or supervisory body

  • Compliance with legal or regulatory obligation

 

(6)  Public data

Purposes:

  • Disclosure of products and services provided by Oraan on social networks, websites, applications or institutional and advertising materials

  • Credit protection, including credit granting and limit raising

  • Investigations and measures to prevent and combat illicit acts, fraud, financial crimes and guarantee the safety of Oraan customers and the financial system

  • Regular exercise of Oraan rights

  • Compliance with legal and / or regulatory obligations imposed on Oraan, including Know Your Customer, Money Laundering Prevention and Terrorism Financing rules and others

 

4.  How and Why Oraan may share your personal data

(a)  Oraan may share your data if you request it or if requested by the listed parties:

  • any local or international law enforcement or competent regulatory or governmental agency(ies) so as to assist in the prevention, detection, investigation or prosecution of criminal, corrupt practices, money laundering activities, fraud or other related transactions;

  • service providers, dealers, agents or any other associate company of Oraan for reasonable commercial purposes;

  • any credit bureau(s).

 

(b)  The sharing of your data can also be done with companies in the Oraan economic group, with third party partners and with authorities and regulatory bodies for different purposes, when necessary. Whenever done, data sharing will be carried out within the limits and purposes of our and in accordance with the terms of the applicable legislation.

 

5. Retention and deletion of your personal data
  • As long as you are an Oraan customer or prospect, while using our products and services and for the entire period that Oraan stores your personal data, it will be kept in a safe and controlled environment.

  •  When applicable, and even after the cancellation of the Oraan account or other services or products, we may store your personal data for an additional period of time for audit purposes, compliance with legal or regulatory obligations, for regular exercise rights of Oraan or also for the necessary period of time in accordance with the legal basis that justifies the retention of the data.

 

6.  Your rights as a holder of personal data

As the holder of personal data, you can exercise your rights and control your personal data. We provide the mechanisms detailed below so that you understand clearly and transparently how to exercise your rights and our team will be ready to meet any requests. Your rights are as follows:

 (a) Confirmation of the existence of personal data processing

  • The fact that you are an Oraan customer already means that we process your personal data, even if that treatment is, among others, the storage of personal data in a safe and controlled environment. You can ask Oraan to confirm that your personal data is being processed.

 (b) Access to personal data

  •  You can request Oraan to inform and provide you with your personal data that it stores.

 (c)         Correction of incomplete, inaccurate or outdated personal data

  • If you find that your personal data is incomplete, inaccurate or out of date, you can ask Oraan for correction or supplementation. For this, if it is not possible to make the change through the Oraan application itself, you will need to send a document that proves the correct and current form of personal data.

(d)         Elimination of personal data processed with consent

  • If you have given your consent for the processing of your personal data for specific purposes (and not necessary for the provision of our services or delivery of our products), you can request the elimination of such personal data, for example, personal data obtained from  your geolocation to indicate the place where your purchases were made.

 (e)         Information about the companies with which Oraan shared or from which it received your personal data

  • You can ask Oraan to inform you of the third parties with whom your personal data has been shared with or from whom we received personal data about you.

 (f)          Information about the possibility of not giving consent and about the consequences of the denial

  •  If your consent is required to access or use a particular product or service, you can ask Oraan to clarify whether it is possible to provide that product or service without your consent for the processing of your personal data, or what the consequences are of not providing consent for this case.

 

7. Oraan Community
  • ‘Oraan Community (OC)’ on Facebook is one of the mediums for  official Oraan community, created for people, especially women to connect, ask questions, share ideas and suggestions and stay on top of Oraan news.

  • All information posted to the community is public. To avoid any risk to the security of Oraan Platform users, we recommend that you never disclose personal data such as debit/credit card numbers and passwords, income, addresses, telephone numbers etc.

  • Any sharing of information on this community with unauthorized people is prohibited and Oraan shall not be held responsible in the event of any misuse of information.

  • Oraan community is also in the form of whatsapp groups created for Oraan Committees perspective.

  • By being part of any Oraan Community, members must respect each others privacy.

 

8.   Changes to this Policy
  • Oraan may change, alter, amend or revise this Policy at any time. Whenever any relevant condition of this Policy is changed, these changes will be valid, effective and binding after the new version is posted on our website or sent by email to you.

  • Transparency is important to us at Oraan, therefore every time a relevant change is made, we will send you a notice indicating the new version in effect. By continuing to use our products and services after a change to this Policy, you are agreeing to the new conditions - but you can always express your disagreement through our customer service channels, if any.

  •  In the event that changes to this Policy result in changes in the treatment of personal data that require your consent, we will ask for your consent to the new terms of the Policy in relation to the treatment of data and purposes indicated.

 

9.  How to contact us if you are not happy

We appreciate that at Oraan we may not always get things right and it is regrettable for us as an organization when we receive a complaint. We take all complaints seriously and can assure you we will do our best to deliver a satisfactory outcome. If you do wish to complain about how your personal data is used by Oraan then please reach out to us through the options below. 

 

Disclaimer: We may use third parties, including Google Analytics and Facebook Pixel, to help us gather and analyze information about the areas visited on the Websites and App in order to better understand, evaluate and improve the user experience and the convenience of the Websites and App.